Do Son Linux legend Greg Kroah-Hartman reveals how AI is catching bugs in the kernel. Discover why 40 out of 60 AI fixes were "genuinely efficacious" in 2026.
Linux Kernel
Full disclosure: Technical details and a GitHub PoC for CVE-2025-39946 are live. This Linux TLS vulnerability allows root escalation via memory shaping.
Google’s new AutoFDO for the Android kernel uses real-world data to cut app lag and boost battery life. Discover the 2026 update making your phone feel new.
Linux 7.0 officially drops HIPPI support in Jan 2026. Discover the history of this 800Mbps supercomputing giant and why the kernel is moving on.
A 5-year-old flaw in Linux x86 page fault handling has finally been patched in Kernel 6.19. Discover how engineers fixed this "combinatorial nightmare."
Linus Torvalds shuts down the debate on AI slop in the Linux kernel, calling documentation rules "pointless posturing" and sticking to peer review.
The Chronomaly exploit weaponizes CVE-2025-38352, a Linux kernel race condition. It allows any local user to gain root access across Android and Linux.
From Meta adopting the Steam Deck scheduler to the first Rust CVE, 2025 was the year Linux matured, clashed, and conquered. Read the full year-end wrap.
Google is upstreaming Propeller to LLVM, bringing its 10% performance boost for the Linux kernel and large-scale apps to the standard compiler toolchain.
A critical Linux KVM flaw allows guests using Intel AMX to trigger host kernel panics. Fixes are underway for modern kernels (5.17+) to prevent host DoS.
PoC exploit for CVE-2025-38352 reveals a critical race condition in Linux POSIX timers, leaving 32-bit Android devices vulnerable to kernel corruption.
Linux logs its first Rust CVE (CVE-2025-68260): a race condition in the Android Binder driver causing kernel crashes. Fixed in 6.18.1 and 6.19-rc1.
Linus Torvalds blasts the TSEM security module as "pointless," leading developers to threaten an appeal to the Linux Foundation’s Technical Advisory Board.
Linux Kernel io_uring UAF Flaw Used to Cheat BPF Verifier and Achieve Container Escape, PoC Releases
Linux Kernel io_uring UAF Flaw Used to Cheat BPF Verifier and Achieve Container Escape, PoC Releases
A high-severity UAF (CVE-2025-40364) in Linux io_uring allows root RCE. Researchers demonstrated two kill chains: cheating the BPF verifier and using Dirty Pagetables for container escape. Patch immediately.
A UAF flaw in the Linux kernel TLS subsystem allows a low-privileged user to gain RCE by exploiting memory corruption during asynchronous decryption.
A critical UAF flaw in the Linux Traffic Control subsystem (CVE-2023-4921, CVSS 7.8) allows local privilege escalation to root. A fully detailed PoC exploit has been released.
A High-severity TOCTOU race condition (CVE-2025-38352) in the Linux/Android POSIX CPU Timer subsystem can lead to kernel crashes and privilege escalation.
A high-severity flaw in the Linux ethtool netlink interface (CVE-2025-21701) enables a Use-After-Free attack to gain root privileges. A PoC has been publicly released.
A PoC has been released for two High-severity flaws in the Linux HID core, allowing malicious USB devices to leak up to 64KB of kernel memory.
A new report details a 0-click RCE exploit chain in the Linux kernel's ksmbd module that allows an authenticated user to gain root access. A PoC has been published.
A new Linux kernel flaw (CVE-2025-38617) in the af_packet subsystem can cause a kernel panic. A PoC has been released, and admins are urged to update patched kernels.
Linus Torvalds rejected a late code submission from a Google engineer for Linux 6.17, calling it "garbage" and criticizing its timing during the merge window.