Life with the Penguin

Recent news

Red Hat Quay Build Workflow Could Expose Registry Credentials
  

Red Hat Quay Build Workflow Could Expose Registry Credentials

As of September 17, Red Hat had documented a flaw in a Red Hat Quay build workflow that could expose

How a PowerPC Guest Could Trigger a KVM Use-After-Free
  

How a PowerPC Guest Could Trigger a KVM Use-After-Free

A PowerPC KVM use-after-free could leave the Linux host kernel accessing a nested-guest object after another virtual CPU caused that

CISA Warns of Active Attacks on a Critical Cisco ISE Flaw
  

CISA Warns of Active Attacks on a Critical Cisco ISE Flaw

Attackers are exploiting a critical Cisco ISE flaw that can open the product’s web management interface without a valid login.

Linux Security Researcher Uses AI to Find Four Python Code-Execution Flaws
  

Linux Security Researcher Uses AI to Find Four Python Code-Execution Flaws

Security researcher Sai Teja Erukude disclosed four alarming Python security flaws between June and August 2026 after combining specialized AI

Beyond the 10-year mark: Extending Ubuntu Pro 16.04 LTS security coverage
  

Beyond the 10-year mark: Extending Ubuntu Pro 16.04 LTS security coverage

A decade ago, Canonical launched Ubuntu 16.04 LTS (codenamed “Xenial Xerus”). As a Long-Term Support (LTS) release, it comes with

How a TOCTOU Race Condition Breaks Linux Path Validation
  

How a TOCTOU Race Condition Breaks Linux Path Validation

A Linux path can be valid when a program checks it and point somewhere else when the program uses it. That

Android™ development shouldn’t start with a physical device
  

Android™ development shouldn’t start with a physical device

How on-demand Android environments lay the foundation for Android engineering Software engineering has evolved dramatically over the last decade. Development

Acronis Backup Flaw Is Being Exploited on Linux Hosting Servers
  

Acronis Backup Flaw Is Being Exploited on Linux Hosting Servers

Acronis has fixed a high-severity vulnerability in its Linux hosting backup integrations after detecting exploitation in limited, targeted attacks. The

Docker Sandboxes Flaw Lets a Guest Reach Host Unix Sockets
  

Docker Sandboxes Flaw Lets a Guest Reach Host Unix Sockets

Docker has fixed a high-severity Docker Sandboxes vulnerability that allowed a malicious guest to redirect a host-side relay toward Unix

How Linux File Permissions Become a Root Trust Boundary
  

How Linux File Permissions Become a Root Trust Boundary

Linux file permissions are usually introduced as a way to decide who may read, write, or execute a file. On

Why eBPF Security Depends on Matching Metadata Lifetimes
  

Why eBPF Security Depends on Matching Metadata Lifetimes

eBPF lets verified programs run inside the Linux kernel. Linux eBPF security depends on supporting data remaining available for as

How Transparent Huge Pages Could Lose Rewritten Data During Reclaim
  

How Transparent Huge Pages Could Lose Rewritten Data During Reclaim

Transparent huge pages let Linux manage memory in larger blocks for better performance.LinuxSecurity – Security ArticlesRead More

Linux SMB Security Fixes Restore Ownership and Input-Trust Boundaries
  

Linux SMB Security Fixes Restore Ownership and Input-Trust Boundaries

SMB, or Server Message Block, lets Linux systems access files shared over a network.LinuxSecurity – Security ArticlesRead More

Container Security Failure Could Let a Malicious Image Reach the Linux Host
  

Container Security Failure Could Let a Malicious Image Reach the Linux Host

Container security can fail before a workload fully enters its root filesystem, the private file tree the container is meant

Bring Zenoh to ROS 2 with snaps
  

Bring Zenoh to ROS 2 with snaps

ROS 2 gives robotics developers the freedom to choose the middleware that fits their system. As a communication protocol for

Attackers Chain Artifactory Vulnerabilities to Take Over Repositories
  

Attackers Chain Artifactory Vulnerabilities to Take Over Repositories

On September 10, 2026, Wiz Research reported that multiple attackers had chained two Artifactory vulnerabilities against self-hosted repositories. One flaw

Evolution of the RISC-V ISA. What next after RVA23?
  

Evolution of the RISC-V ISA. What next after RVA23?

Introduction Releasing the RVA23 specification was a major milestone for the RISC-V community. While it provides an excellent baseline for

Linux Can Hold TLS Traffic Until a Confidential VM Proves Its State
  

Linux Can Hold TLS Traffic Until a Confidential VM Proves Its State

Confidential computing can protect a virtual machine’s memory from the host that runs it. A remote client still needs to

Linux Virtualization Fix Limits a Host Memory Exhaustion Path
  

Linux Virtualization Fix Limits a Host Memory Exhaustion Path

Linux virtualization lets a physical host run guest virtual machines. A fix in vhost, the Linux component that helps those

Cut bloat, not features
  

Cut bloat, not features

Accelerating software delivery with minimal OCI images For Independent Software Vendors (ISVs), delivering containerized applications to enterprise clients often means

Linux Sandbox Bug Could Read a Freed Parent Directory
  

Linux Sandbox Bug Could Read a Freed Parent Directory

A Linux sandbox restricts which files a program can access. Landlock, a kernel facility that lets programs apply those restrictions

Why Linux Must Close File Descriptors Before a Filesystem Can Stall
  

Why Linux Must Close File Descriptors Before a Filesystem Can Stall

A file descriptor is the numbered handle a running program uses to access an open file or similar resource. Linux

IPv6 Security Flaw Lets Route Listing Reach Freed Kernel Memory
  

IPv6 Security Flaw Lets Route Listing Reach Freed Kernel Memory

Listing network routes should tell administrators where traffic will go. An IPv6 security report instead shows Linux accessing a freed

Linux Privilege Escalation Exploit Uses an RDS Cleanup Bug
  

Linux Privilege Escalation Exploit Uses an RDS Cleanup Bug

A new Linux privilege escalation exploit shows how a cleanup mistake in Reliable Datagram Sockets, or RDS, can give a