The Lab · 2026-03-30 05:26:59 · GitHub Issues
A new GitHub repository proposes compiling a definitive archive of Linux kernel 'war stories'—detailed narratives of catastrophic bugs, severe performance regressions, and critical CVE case studies. The project aims to document the symptom, investigation, root cause, fix, and ultimate design lesson for each major incid...
The Lab · 2026-04-04 04:26:49 · Hacker News
A vulnerability that lay dormant within the Linux kernel for over two decades has been unearthed, not by a human security researcher, but by an artificial intelligence. The discovery was made by Anthropic's Claude Code, an AI assistant designed for software development tasks. This finding highlights a significant shift...
The Lab · 2026-05-04 18:54:10 · Habr
В ядре Linux обнаружена критическая уязвимость CVE-2026-31431 с оценкой 7,8 балла по шкале CVSS, получившая название Copy Fail. Проблема позволяет локальному пользователю относительно простым способом повысить свои привилегии в системе. Дефект скрывался в коде модуля algif_aead на протяжении почти девяти лет — с 2017 г...
The Lab · 2026-05-06 12:31:40 · GitHub Issues
The openEuler kernel project has merged a critical security fix addressing a buffer overflow vulnerability in the Linux kernel's AF_ALG cryptographic interface. The patch, committed on April 29, 2026, resolves CVE-2026-31677 and targets a flaw in how the receive scatter-gather (RX SG) list extraction was handled withou...
The Lab · 2026-05-08 17:24:44 · GitHub Issues
A cluster of critical Linux kernel vulnerabilities has surfaced this week with no available patches, creating an immediate and active threat landscape for systems worldwide. The most severe disclosure—Dirty Frag—has been identified as a universal Linux Local Privilege Escalation (LPE) zero-day. The vulnerability was di...
The Lab · 2026-05-10 02:31:42 · Mastodon:mastodon.social:#infosec
A novel approach to vulnerability research is pushing large language models past their built-in guardrails to surface out-of-bounds write vulnerabilities in the Linux kernel. The technique, described as "getting LLMs drunk," represents an unconventional convergence of fuzzing methodologies, artificial intelligence, and...
The Lab · 2026-05-11 08:10:41 · GitHub Issues
Qualys TRU a mis au jour une série de vulnérabilités dormantes depuis près de huit ans au cœur du sous-système AppArmor du kernel Linux. Onze identifiants CVE — de CVE-2026-23268 à CVE-2026-23411 — ont été assignés à cette campagne, désignée sous le nom CrackArmor. Les failles affectent aussi bien le code kernel (prése...
The Lab · 2026-05-11 21:18:33 · Mastodon:mastodon.social:#cybersecurity
A proposed patch to the Linux kernel could give system administrators a powerful new tool: a runtime mechanism to disable vulnerable kernel functions before security fixes are available. The killswitch design targets a critical gap in modern kernel security—the often-lengthy window between vulnerability disclosure and ...
The Lab · 2026-05-13 08:48:29 · Mastodon:hachyderm.io:#infosec
Linux kernel maintainers have proposed a new runtime disable mechanism, called "Killswitch," that would allow administrators to immediately deactivate vulnerable kernel subsystems while patches are built, tested, and deployed. The initiative directly addresses the operational gap that leaves production systems exposed ...
The Lab · 2026-05-13 21:18:26 · Mastodon:mastodon.social:#infosec
A security researcher has identified a new vulnerability designated "Fragnesia," catalogued as another variant within the DirtyFrag/CopyFail family of flaws. The discovery signals continued activity in this vulnerability class, with researchers actively mapping its behavior across different Linux environments. Initial ...
The Lab · 2026-05-14 04:48:18 · r/cybersecurity
Security researchers are examining a series of technical claims regarding Anthropic's Claude Mythos system, including alleged vulnerability chains that could enable privilege escalation across multiple operating systems. The claims center on CVE-2026-4747, reportedly associated with a return-oriented programming (ROP) ...
The Lab · 2026-05-14 08:48:30 · Mastodon:mastodon.social:#infosec
Security researchers have disclosed a critical vulnerability in the Linux kernel, tracked as "Fragnesia," that enables local unprivileged users to escalate to root access without relying on a traditional race condition. The flaw specifically allows attackers to corrupt cached binaries held in memory, with these modific...