News
Linux container escape flaw explained: safe on kernel 5.17 and later
InfrastructureLinuxSecurity
Linux cgroups v1 flaw CVE-2022-0492 is being exploited and CISA added it to KEV. A missing permission check on release_agent enables container escape and privilege escalation. Escape needs conditions like privileged containers. Update to kernel 5.17+ and harden.
2026.06.0396 views
News
Samba Vulnerabilities: Safe on 4.22.10/4.23.8/4.24.3+, Default Configs Unaffected
SecurityInfrastructureLinux
Samba file servers and classic domain controllers are exposed to unauthenticated RCE via CVE-2026-4408 (CVSS 9.0). The %u substitution in check password script passes the client-controlled username to the shell without escaping metacharacters, allowing arbitrary root command execution over SAMR. Fixed in Samba 4.22.10, 4.23.8, and 4.24.3.
2026.05.28115 views
News
Two Unauthenticated RCEs in Pi.Alert: CVE-2026-44887 / 44888 Hit Home Network Watchers
SecurityInfrastructureLinux
Pi.Alert, the home/SOHO Wi-Fi and LAN intruder detector, ships with two unauthenticated RCE flaws (CVE-2026-44887/44888, both CVSS 9.8). Web protection is disabled by default, letting any attacker write Python code into pialert.conf which the scan daemon then loads via exec(). Patched in the 2026-05-07 release.
2026.05.2868 views
News
LibVNCClient Flaw CVE-2026-44988: Malicious VNC Server Can Hijack Your PC On Connect
SecurityDevelopmentLinux
CVE-2026-44988 (CVSS 8.8) hits LibVNCClient v0.9.15 and earlier. A malicious VNC server can send crafted framebuffer-update rectangles to overwrite memory on the connecting client, leading to potential RCE. Remmina, KRDC, ZoneMinder and other downstream projects are affected. No tagged release with the fix has shipped yet.
2026.05.2870 views
News
IINA Vulnerability Explained: Update to 1.4.4, the 1.4.3 Fix Was Incomplete
DevelopmentSecurityLinux
A critical CVSS 8.8 vulnerability has been found in IINA, the popular open-source video player for Mac. Just clicking a malicious link and approving the open prompt lets attackers run arbitrary commands on your Mac. Used by 44K+ GitHub stargazers, the project has shipped a fix in version 1.4.3 and immediate updates are advised.
2026.05.22109 views
News
Linux Kernel 'Fragnesia' Vulnerability (CVE-2026-46300): Which Versions Are Safe and How to Patch
SecurityInfrastructureLinux
A new Linux kernel privilege escalation "Fragnesia" (CVE-2026-46300) was disclosed on May 13 — the third root-takeover bug in three weeks after Copy Fail and Dirty Frag. We explain the structural pattern of XFRM/ESP's aging design and a five-layer mitigation frame for operators.
2026.05.14107 views
News
Linux Copy Fail Vulnerability: Fixed Kernel Versions and Current Status
LinuxSecurityInfrastructure
Linux kernel's new critical vulnerability "Copy Fail" (CVE-2026-31431) is public. Just 732 bytes of code can seize admin privileges on every major distribution. CISA's deadline is May 15. A four-layer defense framework you can act on today.
2026.05.12100 views
News
Linux passes 5% on the Steam hardware survey for the first time (2026)
gameLinux
Linux surged to 5.33% in the March 2026 Steam Hardware Survey, crossing the 5% threshold for the first time. We break down the growth drivers — SteamOS, Steam Deck, and Proton — and the caveats behind the numbers.
2026.04.04179 views
