» Tag
linux-kernel
32 postsPFL Reimagines OpenBSD's pf Firewall as a Linux eBPF/XDP Dataplane
pfSense's creator built PFL, porting OpenBSD's pf firewall language onto Linux XDP. Here's how stateful filtering and NAT survive the eBPF verifier's strict constraints.
Bridging eBPF Verifier Diagnostics with bpfix
eBPF verifier errors often hide the real failure point; bpfix locates where safety proofs break, boosting LLM-based repair success by 11-21 points.
Januscape: 16-Year-Old UAF in KVM Shadow MMU Crashes Hosts
CVE-2026-53359 (Januscape) is a 16-year-old UAF in KVM's shadow paging code enabling guest-to-host escape; the public PoC reliably panics the host, disrupting all co-located VMs.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comNetkit: eBPF Datapath Closes the Container Networking Performance Gap
Netkit is an eBPF-based Linux datapath that eliminates redundant queue traversals, boosting container network throughput up to 37% with Cilium/Kubernetes.
CVE-2026-64560: Use-After-Free in Linux posix-cpu-timers
CVE-2026-64560 details a Linux kernel posix-cpu-timers use-after-free caused by an exec() race condition, along with its memory-ordering fix.
OVSwrap (CVE-2026-64531): AI-Assisted Discovery of a Linux Kernel LPE
OVSwrap (CVE-2026-64531): an AI-assisted discovery of a Linux kernel Open vSwitch LPE caused by a 16-bit nested action length wraparound.
eBPF and TCX bring line-rate network visibility to hostile CI jobs
Blacksmith explains how eBPF programs attached via TCX and a host-side DNS proxy deliver line-rate network observability for untrusted CI VMs.
Differential Testing Exposes Native vs Generic XDP Behavior Gaps
An open-source differential harness compares native vs generic XDP frame bytes and verdicts, with a reproducible virtio/veth baseline on Linux 6.8.
How the Linux kernel's iomap layer works
An LWN deep dive explains how the Linux kernel's iomap layer maps files to storage, replacing buffer heads and cutting filesystem boilerplate code.
How GitHub Uses eBPF to Block Circular Dependencies in Deployments
GitHub explains how it uses eBPF to detect and block circular dependencies caused by hosting its own source code, using cGroup-based network filtering and a DNS proxy.