A kernel stack use-after-free: Exploiting Nvidia's GPU Linux drivers(blog.quarkslab.com)

160 points by mustache_kimono 1 year ago | 21 comments

OpenSSH Ships on Every Mac, Linux Server and Windows. Its Creator Trusts No One(zbruceli.org)

4 points by zbruceli 20 days ago | 0 comments

Long-form blog profile of OpenSSH creator Theo de Raadt, covering his NetBSD exit, lost DARPA grant, and security-focused philosophy.

Using lei, b4, and mutt to do kernel development (2021)(josefbacik.github.io)

77 points by cpach 3 years ago | 6 comments

Why did you write a new RTOS for CHERIoT?(cheriot.org)

43 points by todsacerdoti 2 years ago | 10 comments

One parser, two bugs, many routers: Exploiting Broadcom WiFi across eCos, Linux(quentinkaiser.be)

87 points by zoobab 9 days ago | 22 comments

Blog post by Quentin Kaiser describing two bugs in a Broadcom WiFi parser and how they are exploited on routers running eCos and Linux.

A deep dive into Linux's new mseal syscall(blog.trailofbits.com)

230 points by todsacerdoti 2 years ago | 50 comments

Several vulnerabilities have been discovered in the Linux kernel(lwn.net)

529 points by luispa 24 days ago | 380 comments

LWN.net repost of Debian Security Advisory DSA-6528-1, a Linux kernel security update fixing numerous CVEs, dated September 29, 2026.

For Linux kernel vulnerabilities, there is no heads-up to distributions(openwall.com)

565 points by ori_b 5 months ago | 477 comments

An oss-security mailing list reply from Gentoo's Sam James on CVE-2026-31431 (CopyFail), a Linux local privilege escalation, and the lack of advance notice to distributions.

New Linux udisks flaw lets attackers get root on major Linux distros(bleepingcomputer.com)

336 points by smig0 1 year ago | 227 comments

BleepingComputer news article about a udisks vulnerability that lets attackers gain root privileges on major Linux distributions.

Several Linux kernel vulnerabilities accidentally posted to public mailing list(phoronix.com)

223 points by mrkn1 4 days ago | 89 comments

Phoronix news article reporting that Trend Micro's Zero Day Initiative accidentally posted several unpatched Linux kernel vulnerability reports to the public LKML.

The Linux Kernel Module Programming Guide(sysprog21.github.io)

350 points by wrycoder 2 years ago | 35 comments

Online edition of The Linux Kernel Module Programming Guide, a free book on writing Linux kernel modules, with GitHub and PDF links.

Maybe you shouldn't install new software for a bit(xeiaso.net)

813 points by psxuaw 5 months ago | 427 comments

Short blog post by Xe Iaso noting new Linux kernel vulnerabilities and advising a week-long pause on installing new software due to supply chain attack risk.