https://linuxsecurity.com/ The central voice for Linux and Open Source security news. en-us 1999-2026 Guardian Digital, Inc. All rights reserved dave@linuxsecurity.com (Dave Wreski) Fri, 04 Sep 2026 20:11:30 +0000 Fri, 04 Sep 2026 20:11:30 +0000 generate_indexes-linuxsecurity-v451-validation-scope-fix.php http://blogs.law.harvard.edu/tech/rss 20 https://linuxsecurity.com/news/security-trends/exploring-ai-integration-in-business-operations https://linuxsecurity.com/news/security-trends/exploring-ai-integration-in-business-operations Artificial Intelligence in business is slowly becoming the norm and necessary in the competitive struggle. Today, it is a powerful tool for developing companies, solving business problems, performing deep analytics, and automating processes.  Sat, 17 Aug 2024 18:05:34 +0000 LinuxSecurity Editors news security-trends LinuxSecurity.com https://linuxsecurity.com/news/why-tails-os-is-changing-linux-security-updates https://linuxsecurity.com/news/why-tails-os-is-changing-linux-security-updates Tails OS is changing the speed of its entire Linux distribution because one of its most security-sensitive applications is tied to the system image. Tails 7.12 is the first release on a new two-week cadence, following Firefox and Tor Browser. Thu, 03 Sep 2026 22:20:02 +0000 LinuxSecurity Editors news news LinuxSecurity.com https://linuxsecurity.com/features/linux-security-roundup-september-3-2026 https://linuxsecurity.com/features/linux-security-roundup-september-3-2026 The Linux security news from August 27 through September 3 brought serious fixes for remote access software, PostgreSQL, sandboxing tools, local system services, and software that processes untrusted files. Thu, 03 Sep 2026 22:00:24 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/news/hackscracks/kestra-vulnerability-linux-container-rce https://linuxsecurity.com/news/hackscracks/kestra-vulnerability-linux-container-rce A newly confirmed Kestra vulnerability is being exploited in the wild. CISA added CVE-2026-49869 to its Known Exploited Vulnerabilities catalog on Sep 2, 2026, turning an already serious authentication bypass into a current incident-response concern. Thu, 03 Sep 2026 21:25:59 +0000 LinuxSecurity Editors news hackscracks LinuxSecurity.com https://linuxsecurity.com/features/ai-linux-kernel-vulnerabilities-exploit-chains https://linuxsecurity.com/features/ai-linux-kernel-vulnerabilities-exploit-chains A kernel crash tells defenders that something went wrong. It does not show whether an attacker can turn that failure into a useful capability, combine several capabilities, and reach a security goal. That gap is one of the hardest parts of Linux kernel exploit development. Thu, 03 Sep 2026 21:20:41 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/virtualizor-bgp-hijack-malicious-linux-updates https://linuxsecurity.com/news/security-vulnerabilities/virtualizor-bgp-hijack-malicious-linux-updates Virtualizor has confirmed that a BGP hijack redirected traffic for part of its update infrastructure and allowed an attacker-controlled server to deliver a malicious update package to a small number of installations. The company disclosed the incident on August 31, 2026, after the routing diversion ran across two periods between August 28 and August 30. Thu, 03 Sep 2026 13:06:36 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/features/linux-logging-bottleneck-bind9-intrusion-prevention https://linuxsecurity.com/features/linux-logging-bottleneck-bind9-intrusion-prevention A Linux host intrusion prevention system can fail even when the protected server still has spare CPU. If its logging path cannot record and move events as quickly as an attacker creates them, the control loses the evidence it needs to block the source. Thu, 03 Sep 2026 13:00:17 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/linux-kernel-llc-state-machine-out-of-bounds-read https://linuxsecurity.com/news/security-vulnerabilities/linux-kernel-llc-state-machine-out-of-bounds-read A Linux kernel patch series submitted on Sep 1, 2026, stops an out-of-service Logical Link Control socket from indexing below two connection-state tables. The bug produced Kernel Address Sanitizer and Undefined Behavior Sanitizer reports for a global out-of-bounds read. Thu, 03 Sep 2026 12:52:35 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/howtos/learn-tips-and-tricks/continuous-linux-security https://linuxsecurity.com/howtos/learn-tips-and-tricks/continuous-linux-security A Linux server can be carefully hardened before it reaches production and still become less secure over time. Hardening means reducing unnecessary services, accounts, permissions, and other ways into the system. That work matters, but it describes the server at one point in time. Six months later, a new application may be installed, a firewall port opened for troubleshooting, an administrator given sudo access to run commands with elevated privileges, or a software update may have changed a c... Thu, 03 Sep 2026 12:39:58 +0000 LinuxSecurity Editors howtos learn-tips-and-tricks LinuxSecurity.com https://linuxsecurity.com/howtos/learn-tips-and-tricks/linux-security-foundations-operations https://linuxsecurity.com/howtos/learn-tips-and-tricks/linux-security-foundations-operations A sustainable Linux security program depends on more than individual hardening settings, scanners, and monitoring tools. Those controls matter, but they only remain useful when teams understand what they operate, define what secure behavior should look like, assign responsibility, and revisit their assumptions as systems change. Tue, 18 Aug 2026 13:17:52 +0000 LinuxSecurity Editors howtos learn-tips-and-tricks LinuxSecurity.com https://linuxsecurity.com/news/network-security/why-patched-servers-fail-pentest https://linuxsecurity.com/news/network-security/why-patched-servers-fail-pentest A patched Linux server can still fail a penetration test because patch status cannot show whether an attack path remains open. Wed, 02 Sep 2026 23:55:50 +0000 LinuxSecurity Editors news network-security LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/prevent-dns-leak-secure-proxy-credentials https://linuxsecurity.com/news/security-vulnerabilities/prevent-dns-leak-secure-proxy-credentials Using a proxy on Linux changes how web traffic reaches its destination, but it does not automatically protect every part of the connection. DNS requests may still leave through the system’s normal resolver, while proxy usernames and passwords can remain exposed in scripts or local files. Wed, 02 Sep 2026 23:25:07 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/linux-crypto-api-sa2ul-stack-overflow-ipsec https://linuxsecurity.com/news/security-vulnerabilities/linux-crypto-api-sa2ul-stack-overflow-ipsec A version 2 Linux kernel patch posted on August 31 fixes a stack overflow in the SA2UL hardware crypto driver. The Kernel Address Sanitizer, or KASAN, detected a one-byte write past a local buffer while strongSwan’s charon-systemd process was configuring an IPsec transform. Wed, 02 Sep 2026 04:30:21 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/features/rxrpc-linux-namespace-teardown-race https://linuxsecurity.com/features/rxrpc-linux-namespace-teardown-race RxRPC is a Linux kernel transport for remote procedure calls. A teardown race reported in August shows that its network namespace cleanup can still reach a peer after that peer has been freed. The failure was caught by the Kernel Address Sanitizer, or KASAN, during automated testing. Wed, 02 Sep 2026 04:15:22 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/ebpf-security-landlock-policy-objects-linux-exec https://linuxsecurity.com/news/security-vulnerabilities/ebpf-security-landlock-policy-objects-linux-exec A version 2 Linux kernel patch series posted on August 31 proposes a new eBPF security interface for applying Landlock policy during program execution. The 15-patch set introduces generic Linux Security Module policy objects, lets privileged BPF programs retain those objects in maps, and adds a helper that can apply a selected policy during exec processing. Wed, 02 Sep 2026 02:15:19 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/features/ebpf-security-research-attack-surface-gap https://linuxsecurity.com/features/ebpf-security-research-attack-surface-gap An eBPF security system can produce precise Linux telemetry while leaving a harder question unanswered: what happens if the eBPF layer itself is misconfigured, vulnerable, or trusted too broadly? Mon, 31 Aug 2026 20:30:19 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/linux-cpu-hotplug-regmap-irq-use-after-free https://linuxsecurity.com/news/security-vulnerabilities/linux-cpu-hotplug-regmap-irq-use-after-free Linux interrupt maintainer Thomas Gleixner traced a Kernel Address Sanitizer report to incomplete regmap IRQ cleanup on Aug 30, 2026. The crash appeared while Linux was taking a CPU offline, but the stale pointer was created earlier when a device’s interrupt setup failed. Mon, 31 Aug 2026 20:12:07 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/linux-gpu-security-drm-fence-uaf-read https://linuxsecurity.com/news/security-vulnerabilities/linux-gpu-security-drm-fence-uaf-read Jonghyuk Kim submitted a Linux Direct Rendering Manager scheduler patch series on Aug 28, 2026 that targets a use-after-free read shared by several GPU drivers. The proposed change caches a fence’s timeline name while its scheduler is still alive. Mon, 31 Aug 2026 20:00:12 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/features/linux-proxy-servers https://linuxsecurity.com/features/linux-proxy-servers A linux proxy server has been around for years, but in 2026, it’s become baseline infrastructure. Privacy demands are higher, compliance rules are stricter, and the hybrid cloud has blurred the edge of the network. Thu, 27 Nov 2025 19:14:03 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/linux-kernel-tracing-reader-trace-instance-lifetime https://linuxsecurity.com/features/linux-kernel-tracing-reader-trace-instance-lifetime Removing a Linux trace instance should end its lifetime. An open tracefs reader can currently keep using that instance after another task removes it, creating a kernel use-after-free path in the tracing subsystem. Fri, 28 Aug 2026 19:15:53 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/ebpf-security-state-aware-syscall-filtering https://linuxsecurity.com/features/ebpf-security-state-aware-syscall-filtering A Linux service may need broad system-call access while it starts, then only a smaller set while it handles requests. A single policy loaded before startup often has to keep every required call available for the service's entire lifetime. Fri, 28 Aug 2026 19:05:19 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/kubecap-linux-capabilities-kubernetes-workloads https://linuxsecurity.com/features/kubecap-linux-capabilities-kubernetes-workloads A Kubernetes workload can run with more Linux capabilities than its code needs. When capability settings are missing or broad, that excess authority may remain invisible because the application still works. Fri, 28 Aug 2026 19:45:46 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/howtos/learn-tips-and-tricks/linux-patching-best-practices https://linuxsecurity.com/howtos/learn-tips-and-tricks/linux-patching-best-practices Patch work often gets declared finished at the package manager. The update installs, version inventory changes, the service restarts, and the ticket begins moving toward closed. That sequence is clean. Production rarely is. Thu, 27 Aug 2026 20:35:55 +0000 LinuxSecurity Editors howtos learn-tips-and-tricks LinuxSecurity.com https://linuxsecurity.com/features/linux-security-roundup-august-27-2026 https://linuxsecurity.com/features/linux-security-roundup-august-27-2026 Linux kernel vulnerability news dominated the security updates published from August 20 through August 27. Ubuntu, Debian, Fedora, Mageia, Oracle Linux, Rocky Linux, SUSE, and openSUSE released fixes for standard kernels, cloud kernels, real-time kernels, hardware-specific builds, and live-patch streams. Thu, 27 Aug 2026 14:03:51 +0000 LinuxSecurity Editors features linuxsecurity-com-must-read-articles LinuxSecurity.com https://linuxsecurity.com/features/apparmor-credential-update-linux-security-hooks https://linuxsecurity.com/features/apparmor-credential-update-linux-security-hooks A Linux security hook should be able to check a task without invalidating the identity data that surrounding kernel code is still using. AppArmor broke that expectation when a policy update made the task's current label stale: code inside widely used hooks could replace the task's credentials before the caller had finished with them. Thu, 27 Aug 2026 12:36:43 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/linux-nfs-client-rpc-pipefs-use-after-free https://linuxsecurity.com/news/security-vulnerabilities/linux-nfs-client-rpc-pipefs-use-after-free Linus Torvalds merged a Linux NFS client update on Aug 26, 2026, that includes a fix for rpc_pipefs files left attached to an RPC client after the client object was freed. Opening one of those leftover files could trigger a kernel use-after-free. Thu, 27 Aug 2026 12:23:03 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/ipmi-security-rcu-grace-period https://linuxsecurity.com/news/security-vulnerabilities/ipmi-security-rcu-grace-period The Linux IPMI maintainer accepted a patch on Aug 26, 2026 that restores an RCU grace period before command-receiver objects are freed. The one-line change addresses a use-after-free condition in the kernel's Intelligent Platform Management Interface message handler. Thu, 27 Aug 2026 07:10:59 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/features/linux-uevent-leak-synaptics-rmi4 https://linuxsecurity.com/features/linux-uevent-leak-synaptics-rmi4 A Linux uevent can carry bytes from freed kernel memory when one object survives longer than the allocation behind its name. A new Synaptics RMI4 patch demonstrates that path during device removal and a probe failure. Thu, 27 Aug 2026 06:41:37 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/howtos/learn-tips-and-tricks/software-supply-chain-security-workflows https://linuxsecurity.com/howtos/learn-tips-and-tricks/software-supply-chain-security-workflows A Linux system can be hardened, monitored, and carefully administered while still receiving untrusted code through a package, dependency, container image, build runner, or deployment pipeline. The risk often begins before the software reaches the host. Wed, 26 Aug 2026 15:44:38 +0000 LinuxSecurity Editors howtos learn-tips-and-tricks LinuxSecurity.com https://linuxsecurity.com/howtos/learn-tips-and-tricks/incident-response-recovery https://linuxsecurity.com/howtos/learn-tips-and-tricks/incident-response-recovery An alert suggests that a Linux server may be compromised. The first impulse is often to reboot it, stop a process, delete a suspicious file, or patch the visible weakness. During Linux incident response, those actions can erase the evidence needed to determine what happened and whether the attacker reached anything else. Wed, 26 Aug 2026 15:38:26 +0000 LinuxSecurity Editors howtos learn-tips-and-tricks LinuxSecurity.com https://linuxsecurity.com/howtos/learn-tips-and-tricks/hardening-architecture-isolation https://linuxsecurity.com/howtos/learn-tips-and-tricks/hardening-architecture-isolation Linux hardening is not the act of enabling every restrictive setting a distribution provides. It is the work of reducing unnecessary exposure, limiting what users and processes can do, separating workloads, and confirming that those controls remain effective as the system changes. Tue, 25 Aug 2026 13:47:39 +0000 LinuxSecurity Editors howtos learn-tips-and-tricks LinuxSecurity.com https://linuxsecurity.com/howtos/learn-tips-and-tricks/visibility-logging-detection https://linuxsecurity.com/howtos/learn-tips-and-tricks/visibility-logging-detection Linux security monitoring is useful only when it helps a team explain what happened. Collecting more events does not automatically provide better visibility, especially when nobody knows which records matter, how long they should be retained, or what the evidence can actually prove. Thu, 20 Aug 2026 15:32:19 +0000 LinuxSecurity Editors howtos learn-tips-and-tricks LinuxSecurity.com https://linuxsecurity.com/howtos/learn-tips-and-tricks/identity-privilege-administrative-access https://linuxsecurity.com/howtos/learn-tips-and-tricks/identity-privilege-administrative-access Access to a Linux system involves several connected decisions. The system must determine who or what is requesting access, verify that identity, decide which resources it may use, and control whether it can gain additional privilege. Wed, 19 Aug 2026 19:18:48 +0000 LinuxSecurity Editors howtos learn-tips-and-tricks LinuxSecurity.com https://linuxsecurity.com/howtos/learn-tips-and-tricks/linux-security-howto https://linuxsecurity.com/howtos/learn-tips-and-tricks/linux-security-howto Linux security problems rarely stay in one place. An authentication issue can lead to unexpected privilege. A container problem can reach the host. Missing logs can make it difficult to determine whether an incident is contained or still active. Mon, 17 Aug 2026 14:03:59 +0000 LinuxSecurity Editors howtos learn-tips-and-tricks LinuxSecurity.com https://linuxsecurity.com/features/linux-security-howto-start-here https://linuxsecurity.com/features/linux-security-howto-start-here Linux security no longer lives on one server. Mon, 17 Aug 2026 13:58:52 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/linux-dm-integrity-writeback-checksum-mismatch https://linuxsecurity.com/news/security-vulnerabilities/linux-dm-integrity-writeback-checksum-mismatch A Linux dm-integrity patch posted on Aug 24, 2026 targets a writeback race that can leave stored data with the wrong integrity tag after a crash. Chen Cheng proposed requiring stable writes when dm-integrity generates internal hashes in direct, bitmap, or inline mode. Tue, 25 Aug 2026 22:30:55 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/features/linux-rds-rdma-path-count-memory-corruption https://linuxsecurity.com/features/linux-rds-rdma-path-count-memory-corruption Linux RDS can accept a path count that is larger than the storage allocated for an InfiniBand connection. A peer on the same Remote Direct Memory Access, or RDMA, fabric can then make receive-side kernel code walk beyond that allocation, producing an out-of-bounds write and a system crash. Tue, 25 Aug 2026 22:15:05 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/bpf-congestion-control-linux-tcp-use-after-free https://linuxsecurity.com/features/bpf-congestion-control-linux-tcp-use-after-free A Linux TCP query can touch congestion-control memory after a concurrent BPF update has freed it. Two new use-after-free reports show how an ordinary read path inherited a lifetime assumption that no longer holds when BPF makes congestion-control objects dynamically replaceable. Mon, 24 Aug 2026 12:34:56 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/ebpf-security-link-update-cgroup-lsm-hooks https://linuxsecurity.com/news/security-vulnerabilities/ebpf-security-link-update-cgroup-lsm-hooks A Linux BPF patch posted on August 21, 2026, expands validation for program replacement across cgroup and Linux Security Module hooks. Version 3 addresses cases where two programs share a broad type but expect different runtime contexts or return rules. Mon, 24 Aug 2026 12:30:00 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/security-projects/linux-7-3-ima-policy-measurement-tpm-timing https://linuxsecurity.com/news/security-projects/linux-7-3-ima-policy-measurement-tpm-timing Code merged for the Linux 7.3 development cycle changes the measured boot evidence produced by the Integrity Measurement Architecture, or IMA. The kernel now records the raw policy rules that decide what the system measures, closing a gap that could leave remote verifiers without a complete picture of how the evidence was created. Mon, 24 Aug 2026 12:22:53 +0000 LinuxSecurity Editors news security-projects LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/kata-containers-genpolicy-mount-source-vulnerability https://linuxsecurity.com/news/security-vulnerabilities/kata-containers-genpolicy-mount-source-vulnerability A flaw in Kata Containers weakened container security in some Confidential Containers deployments. It allowed a malicious host operator to make the protected guest use attacker-chosen files or content at approved mount locations. Fri, 21 Aug 2026 23:40:42 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com https://linuxsecurity.com/news/vendors-products/ad-blockers-for-linux-browsers https://linuxsecurity.com/news/vendors-products/ad-blockers-for-linux-browsers A good ad blocker is one of those browser additions you stop noticing once it’s working. Pages settle down. Autoplay boxes disappear. News sites stop shifting under your cursor while three ad slots load. On a slower laptop, the difference can be surprisingly obvious. But “blocks ads” isn’t a useful buying criterion anymore. Plenty of extensions do that. Thu, 20 Aug 2026 18:40:46 +0000 LinuxSecurity Editors news vendors-products LinuxSecurity.com https://linuxsecurity.com/news/network-security/what-is-kali-linux https://linuxsecurity.com/news/network-security/what-is-kali-linux A penetration tester can build a security workstation on almost any Linux distribution. The problem is the amount of setup that comes with it. Scanners, packet-analysis tools, web testing software, password-auditing utilities, and forensic packages all have to be installed and kept working together. Kali Linux does much of that work in advance. It is a Debian-based distribution built around penetration testing, security auditing, digital forensics, and related security work. That does not mak... Tue, 04 Nov 2025 21:33:20 +0000 LinuxSecurity Editors news network-security LinuxSecurity.com https://linuxsecurity.com/news/cloud-security/cloud-security-posture-management https://linuxsecurity.com/news/cloud-security/cloud-security-posture-management Many companies are transitioning from physical servers to cloud operations, but this transformation brings new challenges. Cloud Security Posture Management (CSPM) can help protect your data in this virtual realm. Mon, 14 Oct 2024 15:00:43 +0000 LinuxSecurity Editors news cloud-security LinuxSecurity.com https://linuxsecurity.com/features/ebpf-security-beyond-kernel-verifier https://linuxsecurity.com/features/ebpf-security-beyond-kernel-verifier eBPF security is often summarized in one sentence: Linux loads an eBPF program only after the kernel verifier accepts it under the safety checks the verifier performs. That description is useful, but it covers only one part of a larger system. Sat, 22 Aug 2026 00:05:39 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/features/kvm-intel-tdx-enforcement-gap https://linuxsecurity.com/features/kvm-intel-tdx-enforcement-gap Recent KVM work exposed a gap between what Linux says a TDX protection supports and what the TDX-specific code actually enforces. Fri, 21 Aug 2026 22:50:24 +0000 LinuxSecurity Editors features features LinuxSecurity.com https://linuxsecurity.com/news/cryptography/shieldzfs-confidential-vm-storage-freshness https://linuxsecurity.com/news/cryptography/shieldzfs-confidential-vm-storage-freshness Confidential computing can protect sensitive workloads even when the cloud host cannot be fully trusted. Confidential virtual machines can shield memory and CPU state from the hypervisor. Disk encryption can also stop the host from reading stored data. But how does the virtual machine know the disk state it received is the newest? Fri, 21 Aug 2026 17:32:53 +0000 LinuxSecurity Editors news cryptography LinuxSecurity.com https://linuxsecurity.com/news/server-security/secure-remote-access-linux-servers https://linuxsecurity.com/news/server-security/secure-remote-access-linux-servers Linux runs the internet. More than 96% of the world’s top one million web servers operate on Linux-based systems. That makes every linux server a target by default. Attackers do not go where defenses are strongest; they go where the infrastructure is exposed. Wed, 13 May 2026 13:11:26 +0000 LinuxSecurity Editors news server-security LinuxSecurity.com https://linuxsecurity.com/news/network-security/xnet-xdp-traffic-sampling-ids-visibility https://linuxsecurity.com/news/network-security/xnet-xdp-traffic-sampling-ids-visibility During a live academic-network deployment, the Linux traffic-sampling system cut the stream sent to the sensor by 78 to 84 percent. In a separate test, it preserved 99.6 percent of baseline Suricata alerts. Thu, 20 Aug 2026 15:25:43 +0000 LinuxSecurity Editors news network-security LinuxSecurity.com https://linuxsecurity.com/news/security-vulnerabilities/bpf-disassembler-out-of-bounds https://linuxsecurity.com/news/security-vulnerabilities/bpf-disassembler-out-of-bounds Linux kernel fuzzing service syzbot has reported an out-of-bounds array access in print_bpf_insn(), a routine used to turn BPF instructions into readable verifier output. Thu, 20 Aug 2026 15:21:06 +0000 LinuxSecurity Editors news security-vulnerabilities LinuxSecurity.com