Search results for tag #linux
A second dracut flaw (CVE-2026-15816) lets a rogue DHCP server run code as root when a Linux machine boots over the network. June's fix for the first bug missed it.
Only network-booted systems are exposed.
Update dracut and rebuild your initramfs.
https://suriq.io/blog/dracut-cve-2026-15816-dhcp-root-execution
#CVE #Linux #infosec #cybersecurity
Alt...
Row of dark server monoliths with one near the top split open by a bright thread
Tails 7.10.1 patches CVE-2026-64560 in the Linux kernel and expat library flaws that could let attackers deanonymize users and gain admin privileges.
#Tails #Linux #Privacy #CVE202664560 #Cybersecurity #AnonymousOS
Boosts willkommen: Ein Kleinunternehmen sucht IT Betreuung.
Setup: 1 Server, 6 PCs/Laptops, Windows und Linux gemischt, Fernzugriff, Benutzer und Berechtigungen, ERP, Backup.
Gesucht ist kein Großanbieter, sondern ein kleines Team mit persönlicher Betreuung. Vor Ort im Raum Nürnberg wäre ideal.
Kennt jemand jemanden? Gerne per DM.
Zapscape (CVE-2026-64561) is another reminder that the hypervisor boundary is only as strong as the code implementing it.
The vulnerability is a guest-to-host escape in Linux KVM's x86 Shadow MMU. The root cause is a stale-root validation ordering bug that allows the page fault handler to continue using an invalidated shadow MMU root after quota reclaim, ultimately leading to a use-after-free primitive. Public research demonstrates a complete guest-to-host escape chain, although exploitation requires privileged code execution inside an L1 guest and nested virtualization exposure.
I put together a deep technical analysis covering the Shadow MMU internals, nested virtualization, exploitation stages, cross-cache reallocation, KASLR bypass, AMD vs. Intel trigger conditions, the upstream fix, and why simply moving a stale-root check eliminates the entire exploitation chain.
Interested to hear how others assess the practical risk for multi-tenant KVM deployments where nested virtualization is enabled.
https://thecybersecguru.com/news/zapscape-cve-2026-64561-kvm-guest-host-escape/
#Linux #KVM #Virtualization #KernelSecurity #CloudSecurity #CVE202664561
I love this old behemoth. It's the Stag Solar ROM burner. I also have one of them crappy and lame USB burners too, but this is just so much cooler.
It runs with StagCom 95. The 95 meaning it's not any of those tired old Windows 3.11 programs, but the new 32 bit Windows 95 ones! And in 2026 it runs just fine under Wine in Linux, although from the last time I had used Wine, it had gone through an evolution of being split into 32 and 64 bit versions, so I had to recover the StagCom installation.
#retrotech #wine #eprom #linux
Alt...
Stag Solar EPROM burner. A huge beige early 90s device with a 4x16 LCD display, rubber keypad and 4 EPROM sockets.
Alt...
Screenshot of the Windows 95 based control software for the EPROM burner.
<<< torbrowser (anon-dist / Kicksecure) >>>
* nice onion signature dl
(/etc/torbrowser.d/30_user.conf) made possible by a systemd unit.
* live run is not yet possible
* tb is disabled by default in persistent mode (sysmaint)
#tor #FundInternetFreedom @whonix #LinuxDevelopment
<<< torbrowser-launcher ('Official') >>>
* tor+https signature from only a few functional mirrors that remain on the --settings list
* does run grub live in Kicksecure
<<< #Arti + tb >>>
* live functionality in Qubes dvms but not in Kicksecure
@tails
#ComputerSafetyEducation #GetFediHired #cryptography #linux
Six stable kernels with a security fix https://lwn.net/Articles/1087567/ #tech #linux
We hire again. If you want to work in a small company in #switzerland #thurgau and/or #remote as a #backend #php #softwaredeveloper
#5plus years of experience is a must
At least some #german language skill required
We are working in the #healthcare sector and are working on modernizing our code base and release it (at least partially) as #freesoftware
We use #gnu #linux and #opensource software wherever possible
Initial Steam Machine reviews are broadly positive, Jellyfin is losing some key project leaders, Sony deletes more movies that people “bought”, why you probably shouldn’t wipe your phone when the US authorities ask for access, Graham repurposes some discarded crypto hardware to play arcade games, Félim gets that old game working, a great terminal music player, and more.
https://latenightlinux.com/late-night-linux-episode-397/
Alt...
Late Night Linux artwork
@subm3rge Having a 1.5kg laptop with 24 cores is "nice", and arguable more *powerful* than an ARM SoC with ~50nm die.
However, the actual usefulness diminishes sharply behind typical deskwork tasks that can absolutely be done in a performant way on 4 cores in a lean #linux #distro.
And all of that has been reverse engineered to the X so big tech really has no moat against people doing their own thing.
Shai-Hulud strikes again: CHAINDROP worm hits 400+ npm packages
On August 4, 2026, a sophisticated supply chain attack compromised the keyv npm package maintainer, deploying CHAINDROP, a self-propagating worm that automatically backdoors packages using stolen npm credentials. Over 400 npm packages were infected, affecting more than 1.3 billion monthly downloads. The worm executes via preinstall hooks, deploys across Linux, macOS, and Windows platforms, and harvests credentials from over 300 patterns targeting AI tooling, cloud providers, GitHub tokens, and npm credentials. CHAINDROP uses Ethereum smart contracts for C2 resolution and propagates by publishing trojanized versions of packages the compromised maintainer can access. The payload is heavily obfuscated and contains Dune-themed references consistent with previous Shai-Hulud campaigns.
Pulse ID: 6a73cac4902afff959b758aa
Pulse Link: https://otx.alienvault.com/pulse/6a73cac4902afff959b758aa
Pulse Author: AlienVault
Created: 2026-08-05 23:44:04
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#BackDoor #Cloud #CyberSecurity #ELF #GitHub #InfoSec #Linux #Mac #MacOS #NPM #OTX #OpenThreatExchange #SupplyChain #Trojan #Windows #Worm #bot #AlienVault
#Introduction
How should I introduce us?
We are an independent French small collective helping to develop and promote musical culture: concerts, production, recordings, promotion, etc.
This is an unofficial profile.. we’re sort of on vacation here on #Mastodon. So, our interests are numerous and varied.
Here is a non-exhaustive list of keywords:
#art #culture #music
#literature #photography
#history #science
#earth #space
#sciencefiction
#reader #writer #blogger
#retro #vintage
Kind of #geek about:
#linux #opensource
#MSDOS #DOSGaming #CPM
#retrogaming #retrocomputing #oldcomputers #BBS
#gaming #videogames
#gamedev #indiegamedev #indiedev
I mainly play:
#rpg #dnd #mmorpg #rogue #nethack #roguelike #tetris
Everyone is Welcome! 🖖😎
Friendly and respectful.
Feel free to spread the word by a retoot. Merci beaucoup! :0)
@solarphasing run this profile on #Mastodon #fediverse since 2017.
Alt...
We are an independent French small collective helping to develop and promote musical culture: concerts, production, recordings, promotion, etc.
Alt...
We are an independent French small collective helping to develop and promote musical culture: concerts, production, recordings, promotion, etc.
Alt...
We are an independent French small collective helping to develop and promote musical culture: concerts, production, recordings, promotion, etc.
RE: https://social.heise.de/@heiseonline/117046813938759954
Ein NoGo, dass #Microsoft damit das sichere Booten für #Linux Systeme in der Hand hat. Wenn Microsoft sich entschließt morgen keine Linux Bootloader mehr zu zertifizieren, können die nicht mehr mit #UEFI gebootet werden. Man kann das abschalten, kein Problem. Aber hier geht es um das Prinzip. Mit Schuld sind die PC Hersteller, die nur MS Zertifikate im BIOS installieren. Auf neueren PCs teilweise sogar nur die neueren von 2023 und nicht mehr die Alten von 2011, was dann zur Folge hat, das alte Kernels nicht mehr booten.
Ich würde mal sagen das System ist „broken by design“
Linux muss einen Weg finden sich hier aus der Geiselhaft von Microsoft zu befreien. Und die PC Hersteller sind ein Schlüssel dazu. Aber die haben wahrscheinlich alle die Hosen voll, weil sie, wenn sie das unterstützen, Repressalien von Microsoft befürchten müssen.
Das ist auch der Grund, warum so gut wie jeder neue Rechner mit MS Lizenz ausgeliefert wird und der Käufer kämpfen muss das zurück erstattet zu bekommen.
🐘#Linux: a 13-year-old Linux kernel flaw dubbed #OVSWrap lets local users gain root privileges on most Linux distributions. CVE-2026-64531 vulnerability is in the Linux kernel’s Open vSwitch datapath:
#PrivilegeEscalation
👇
Proxmox VE Arm64 has officially launched, bringing feature parity, unified lifecycle management, and enterprise support to 64-bit Arm server architectures.
#ProxmoxVE #Arm64 #Virtualization #DataCenter #Linux
https://securityonline.info/proxmox-ve-arm64/?utm_source=mastodon&utm_medium=jetpack_social
Sometimes I’ll go through my old saved git repos…
People really want to keep “thefuck” alive even though it’s been dead for 2 years. Around 4000 forks..damn. https://github.com/nvbn/thefuck/issues
Luckily people make their own rewrites. Although many of which have readmes filled with emojis, which turn me off….its like seeing Sysco outside of the restaurant your about to enter.
Desktop Linux just cracked 10% market share - and Windows 11 is mostly to blame
https://zdnet.com/article/the-linux-desktop-finally-cracks-the-10-market-share-barrier/ via @ZDNet & @sjvn
Windows is in decline, and both Macs and #Linux are gaining ground at its expense.
#Linux adoption is likely to be higher even than that, because some Linux-users configure their browsers to identify as Windows for reasons of either compatibility or privacy. (For instance, if you enable #Firefox's "resist fingerprinting" setting, as I have, it identifies as Windows, regardless of OS.)
Anyone with a amazon #kindle paperwhite 3 (2015, 7th Gen) who would be interested in installing #Linux 6.15 and getting rid of nearly all the Amazon bits?
I'm now looking for brave alpha testers to dig out their old kindle and test installation scripts (there is a chance of bricking which could be rescued by tapping the serial lines)
Let me know if you are interested.
@PabloMartini
Until it's possible to fix/repair problems without EVER having to touch the Terminal/CLI, #Linux will NEVER become the dominate OS. 😞
Despite having used Linux for 20 years, Windows is still my primary OS.
(Another problem: Too many Linux variants that aren't cross-platform compatible.)
@MugsysRapSheet @PabloMartini Sadly, I don’t think that’s ever going to happen, since there are some things that are easier and/or quicker to do in the terminal/CLI regardless of operating system.
For example, it’s easier for me to perform pings and traceroutes in terminal.
Plus, GUI programming is difficult in the #linux space in general, especially because of different frameworks and those different frameworks not all having the same components.
[$] FUSE status and plans https://lwn.net/Articles/1086336/ #tech #linux
Linux, reinstalação do CachyOS [SENSITIVE CONTENT]
Gosto de GNU/Linux, mas me espanto com algumas situações. Exemplo: um erro durante atualização do kernel motivado por falta de espaço no SSD. Uso partição btrfs com snapshots, mas quando reiniciou, sumiu foi tudo! E, como estava sem kernel, não tinha muito o que fazer. Não perdi dados, mas deu uma trabalheira para reinstalar.
Aproveitei para testar o KDE Plasma. É visualmente lindo, mas como uso muito o teclado, logo esbarrei nuns bugs com atalhos. Instalei novamente e vi que o CachyOS permite cumular Xfce4 + i3wm (print em anexo).
É o mesmo "setup" que usei antes de o sistema quebrar, mas como marquei ambos na instalação, tenho a impressão que a integração ficou bem melhor, com o i3wm aplicando os temas escuros, por exemplo. Vamos ver agora se vai corrigir um bug / conflito chato com apps padrão e no download / upload com navegadores comuns.
Preciso aprender o básico de Linux no que se refere a uso de terminal, permissões de arquivos e pastas etc. Mas como é bom ter um sistema customizado nos mínimos detalhes e uma memória "muscular" dos atalhos de teclado personalizados.
Alt...
Captura de tela da Instalação da distribuição Linux CachyOS. Nela, há uma lista de itens, a maioria está desmarcada. Os marcados são:
- CachyOS Packages;
- CachyOS shell configuration;
- Base-devel + Commom packages;
- Xfce4;
- i3-Window-Manager;
- Printing-Support; e
- Accessibility Tools;
A 13-year-old bug buried deep inside the Linux kernel has quietly become one of the most interesting privilege escalation vulnerabilities disclosed this year.
OVSwrap (CVE-2026-64531) affects the Open vSwitch kernel datapath and can allow an unprivileged local user to gain root privileges on many Linux distributions under common configurations.
What makes this vulnerability particularly noteworthy isn't just the bug itself. The vulnerable code had existed for over a decade, but a seemingly unrelated change in 2025 removed a size limit that had unknowingly prevented it from being exploited. Once that guard disappeared, a dormant integer truncation bug became a reliable kernel memory corruption vulnerability.
The public proof-of-concept is equally impressive from a research perspective. It supports roughly 800 x86-64 kernel builds, avoids traditional heap grooming techniques, and demonstrates a deterministic path from a local user account to root by abusing a 16-bit Netlink length wraparound in the Open vSwitch datapath.
I put together a deep technical analysis covering the vulnerability from the kernel internals upward, including the root cause, why it remained hidden for 13 years, how the exploit chain works, affected distributions, upstream fixes, and practical mitigation guidance.
🔗 Read the full analysis:
https://thecybersecguru.com/news/ovswrap-cve-2026-64531-linux-kernel-openvswitch-root-vulnerability/
What are your thoughts on unprivileged user namespaces? Should distributions continue enabling them by default, or is the growing kernel attack surface becoming too difficult to justify?
#Linux #LinuxKernel #OpenvSwitch #CyberSecurity #InfoSec #KernelSecurity #Vulnerability #Exploit #CVE #DevSecOps
OVSwrap (CVE-2026-64531) lets an ordinary local user get root on most default Linux distros through the Open vSwitch kernel module.
You do not need to run Open vSwitch to be exposed. A public exploit targets ~800 kernel builds.
Patch the kernel now.
https://suriq.io/blog/ovswrap-open-vswitch-kernel-local-root
#CVE #Linux #infosec #cybersecurity
Alt...
Isometric tiled hall with one floor tile lifted revealing a bright shaft below
Hey #linux users,
In my switch from Windows to Linux, I am now looking for a nice email client. I am not a big fan of the clunky interface of Thunderbird (as much as it does work quite well), which are the best options for email? To give you an idea, on Windows I currently use eM Client
🤖 CVE-2026-64531 (CVSS 7.8): OVSwrap — memory corruption in the Linux kernel's Open vSwitch datapath lets local users gain root. Public exploit ships pre-built records for ~800 kernel builds; broad impact on default-configured distros.
🔗 https://thehackernews.com/2026/08/new-ovswrap-linux-kernel-flaw-lets.html
#CVE #Exploit #Linux #CyberSec
@TimWardCam I will always engage high quality debate in kind.
But I posted about struggling with undocumented aspects of #macos and you chose to use that moment to take pot shots at #linux
In my view that is not high quality debate.
The first public preview of Holo Core for aarch64 is here!
Developed with Valve for Steam Frame, this work brings Arch Linux to an architecture it does not officially support, backed by new tooling and CI infrastructure for reproducible rolling-release builds.
Explore the binaries, sources, and containers: https://www.collabora.com/news-and-blog/news-and-events/building-an-arch-linux-aarch64-port-for-holo-core.html
Nelson: rust-lang/rust is adopting an LLM policy https://lwn.net/Articles/1087326/ #tech #linux
Security updates for Wednesday https://lwn.net/Articles/1087318/ #tech #linux
"While Torvalds Makes Peace With AI in Linux, Greg Kroah-Hartman Draws a Line (Sort of)"
"His new policy keeps AI patches out of drivers/staging, the tree meant for newcomers to learn kernel development."
https://feed.itsfoss.com/link/24361/17403762/linux-drivers-staging-ai-rejection
Hi, moOde 10.3.2 (Trixie) is available in the Media Player OS section of the Raspberry Pi Imager or as a direct download from the Release archive at moodeaudio.org. Visit the Forum for more information https://moodeaudio.org/forum/showthread.php?tid=8849&pid=73697#pid73697
#audio #foss #linux #raspberrypi #music #moodeaudio #opensource #supporter
I'm curious whether future civilizations are going to look at Nix as something primitive or something advanced
Linux is running large advertising campaigns now in Berlin #diday #dutgemacht #linux
Alt...
A glowing digital display shows an error log from a system journal, listing multiple instances of "Failed to write entry" with details about byte sizes and item counts. The scene is set at night, with a visible city backdrop and foliage.
Two Normies (non-tech folks "what is Linux?") standing next to my desk at the office "HIS LOCKSCREEN IS INSANE I've NEVER SEEN ANYTHING LIKE THAT"
Me "its just blurred when locked..."
normies "NO I MEAN WHEN YOU TYPE YOUR PASSWORD WTF IS THAT"
Me "???"
Normies "THAT THING THAT REACTS AND SPINS"
Me "??? what are you talking about? 😅"
I type my password to unlock the system. Swaylock does swaylock things.
Normies "O M G THAT IS SO COOL!!!"
LMAO of all the things on linux, default animation setting of swaylock on manjaro-sway, seems to be what blows normie-folks minds 😂
Hi, moOde 10.3.1 (Trixie) is available in the Media Player OS section of the Raspberry Pi Imager or as a direct download from the Release archive at moodeaudio.org. Visit the Forum for more information https://moodeaudio.org/forum/showthread.php?tid=8848&pid=73691#pid73691
#audio #foss #linux #raspberrypi #music #moodeaudio #opensource #supporter
We've been working with Valve on Holo Core, a pure aarch64 port of Arch Linux, built to run on Steam Frame. Arch has no official aarch64 support and no CI infra of its own, so we built both. First public preview (binaries, sources, containers) is out now!
Damn. This quote from Linus Torvalds is... well... damning.
In response to a discussion around use of generative AI as it relates to contributions to the Linux code base, Linus (creator and lead contributor to Linux) firmly states that AI contributions are welcome.
But then he goes on and concludes with this:
"The kernel project has been and will continue to be about the technology.
Sure, the social angle of working on open source is important and often a very motivating part of the project, but in the end that's a side benefit, not the _point_ of the project.
This is *NOT* some kind of "social warrior" project, never has been, and never will be.
In the kernel community we do open source because it results in better technology, not because of religious reasons.
And so we make decisions primarily based on technical merit. Not fear of new tools.
Linus"
A lot of us are on Linux specifically because of the social and political positives. Closed source is control. Open source is democracy.
Linus doing the typical tech-bro "i don't think of politics, I only think of tech" harkens back to any number of "science without ethics" atrocities.
Linus is and has always been a tech-bro (or proto tech bro). He has his throne of power and is happy where he is. Other tech-bros want money and influence. They're all the same.
But Linus is wrong.
Tech is politics.
And his stance and guiding influence with Linux is wrong.
Linus just made a political statement and has shifted the politics and societal approach of Linux.
#linux #solarPunk #Linus #AI #openSource
Alt...
screenshot of Linus' remarks stating: The kernel project has been and will continue to be about the technology.
Sure, the social angle of working on open source is important and often a very motivating part of the project, but in the end that's a side benefit, not the _point_ of the project.
This is *NOT* some kind of "social warrior" project, never has been, and never will be.
In the kernel community we do open source because it results in better technology, not because of religious reasons.
And so we make decisions primarily based on technical merit. Not fear of new tools.
Linus"
📄 New research paper: "Bringing Up the RK3576 NPU on Mainline Linux" — DOI: 10.5281/zenodo.21348017
#Linux #OpenSource #EdgeAI #Rockchip
(2/2)
Hi, moOde 10.3.0 (Trixie) is available in the Media Player OS section of the Raspberry Pi Imager or as a direct download from the Release archive at moodeaudio.org. Visit the Forum for more information https://moodeaudio.org/forum/showthread.php?tid=8794&pid=73111#pid73111
#audio #foss #linux #raspberrypi #music #moodeaudio #opensource #supporter
