» Tag
linux-kernel
25 postsLinux Kernel Bridge STP Timer Use-After-Free Vulnerability
Linux bridge STP timers vulnerable to use-after-free via dellink teardown gap, enabling potential kernel control-flow hijack. Patched upstream.
Kernel-Level Enforcement for AI Agents via eBPF-LSM and Z3
Solo-built eBPF-LSM prototype enforces AI agent guardrails at the kernel syscall boundary with Z3 SMT checks; open break-it challenge on GitHub.
Linux Kernel UDP Corking Flaw Enables Local Privilege Escalation
Two Linux kernel CVEs (2026-53362, 2026-53366) expose a heap OOB write via UDP MSG_SPLICE_PAGES corking, enabling local privilege escalation.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comKernel devs review two LLM-assisted memory management patch sets
Two LLM-assisted Linux kernel patch sets—1GB huge page allocation and VM memory tracking—reveal how maintainers judge AI-assisted code.
PFL Reimagines OpenBSD's pf Firewall as a Linux eBPF/XDP Dataplane
pfSense's creator built PFL, porting OpenBSD's pf firewall language onto Linux XDP. Here's how stateful filtering and NAT survive the eBPF verifier's strict constraints.
Bridging eBPF Verifier Diagnostics with bpfix
eBPF verifier errors often hide the real failure point; bpfix locates where safety proofs break, boosting LLM-based repair success by 11-21 points.
Januscape: 16-Year-Old UAF in KVM Shadow MMU Crashes Hosts
CVE-2026-53359 (Januscape) is a 16-year-old UAF in KVM's shadow paging code enabling guest-to-host escape; the public PoC reliably panics the host, disrupting all co-located VMs.
CVE-2026-64560: Use-After-Free in Linux posix-cpu-timers
CVE-2026-64560 details a Linux kernel posix-cpu-timers use-after-free caused by an exec() race condition, along with its memory-ordering fix.
OVSwrap (CVE-2026-64531): AI-Assisted Discovery of a Linux Kernel LPE
OVSwrap (CVE-2026-64531): an AI-assisted discovery of a Linux kernel Open vSwitch LPE caused by a 16-bit nested action length wraparound.
eBPF and TCX bring line-rate network visibility to hostile CI jobs
Blacksmith explains how eBPF programs attached via TCX and a host-side DNS proxy deliver line-rate network observability for untrusted CI VMs.