LinuxSecurity.com

Linux developers have proposed an IPsec fix after reproducing a memory error in IP-TFS, a mode that groups and pads encrypted traffic to make traffic patterns harder to infer.

Linux developers have proposed a FastRPC fix for a race that can leave the kernel using memory after it has been released.

Linux developers have proposed six fixes for the driver that reads QNX6 filesystems, a disk format associated with the QNX operating system.

LightLLM, software used to serve AI models, can expose Linux AI servers to remote code execution when operators enable its profiling mode, a tool for measuring performance.

ModSecurity has released fixes for a group of web application firewall (WAF) weaknesses that can let dangerous input reach Linux-hosted applications without being inspected as intended.

A Linux device driver fix closes a use-after-free risk in the AC100 real-time clock (RTC) driver.

Flatpak 1.18.4 fixes three vulnerabilities that could let a malicious sandboxed app affect files or processes on its Linux host.

A Linux flash-storage fix prevents a double free, in which the kernel releases the same object twice during device setup.

Apache released Karaf 4.4.12 on September 27, 2026, to fix three authorization flaws in its Java server runtime.

The maintainers of shell-quote, a JavaScript library for building shell commands, released version 1.11.0 on September 29, 2026, to fix CVE-2026-102422.

A newly reported Linux perf filter flaw lets an unprivileged user find where the kernel is loaded on a tested x86-64 configuration.

A Linux patch series addresses how file truncation or hole punching could discard valid data beyond the range an application asked to remove.

A proposed Linux tracing patch addresses a race that could free a function probe while its return callback is still using it.

A proposed Linux patch addresses a double unlock in the SuperH architecture’s page-fault handling.

A Linux security review can find a check, a lock, or a safe-looking range and still miss the failure.

Two critical GitLab flaws can turn authenticated continuous integration and delivery (CI/CD) configuration into code execution on self-managed servers.

crun has tightened the boundary between container-controlled configuration and host-controlled microVM behavior.

Two Linux fixes show how extended Berkeley Packet Filter (eBPF) security can fail when mutable map data crosses into the exec path, where Linux starts a program.

A Linux GPU security fix changes how AMD’s Kernel Fusion Driver (KFD) tracks shared mappings when several containers use one device.

runc 1.5.2 adds a workaround for a Linux cgroup v2 memory-corruption bug that can make the privileged container runtime crash unpredictably.