» Tag
linux-kernel
32 postsRefluXFS: XFS reflink race lets Linux users escalate to root (CVE-2026-64600)
Qualys details RefluXFS (CVE-2026-64600), an XFS reflink race enabling local privilege escalation to root on default RHEL, Rocky, and Fedora Server installs.
A 24-Year-Old Linux Kernel TCP Bug Found via Stuck rsync Transfers
How Skroutz engineers traced mysterious rsync hangs to a 24-year-old TCP flow-control bug buried in the Linux kernel.
Linux kernel edges toward $ORIGIN support via eBPF
How a Nix community effort led to a Linux kernel patch adding programmable $ORIGIN support via eBPF and binfmt_misc, without breaking process identity.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comAI Agent XBOW Finds and Exploits a Linux Kernel Bug (CVE-2026-72018)
XBOW's AI security agent found and exploited a Linux kernel bug (CVE-2026-72018) via SMC-D, achieving full root privilege escalation.
DOOM runs inside the Linux kernel via unmodified eBPF
BPF Capsule compiles DOOM and other complex C/C++/Rust programs into standard eBPF, running them unmodified through the stock Linux verifier and JIT.
Proof-Carrying-BPF Programs Aim to Expand eBPF Verifier Acceptance
A SOSP '26 paper proposes proof-carrying-BPF programs, letting the eBPF verifier accept complex programs it previously rejected via formal proofs.
ZeroFS adds a native Rust Linux kernel module, bypassing FUSE
ZeroFS ships a Linux kernel module written almost entirely in Rust, bypassing FUSE and running via CI tricks even on kernels without Rust support.
ExploitGym: A Benchmark for AI-Driven Exploit Development
ExploitGym is an open-source AI benchmark with 869 real-world exploit tasks spanning userspace software, V8, and the Linux kernel.
64 BFD sessions at 10ms saturate FRR bfdd's core; XDP handles it at 0 flaps
FRR's bfdd saturates one core at 64 BFD sessions while an XDP fast path carries the same load at 751ns/packet with zero flaps; three FRR bugs merged upstream.
RK3576 NPU on Mainline Linux: Single-Task Works, Multi-Task Stalls
Mainline RK3576 NPU driver bring-up fixes an int8 requantization bug but hits a hard wall on multi-task jobs; full root-cause ledger published.