Linux Security Archives • Page 3 of 4 • Daily CyberSecurity

NVIDIA Alert: High-Severity Code Execution Flaws Hit CUDA Toolkit

NVIDIA acquisition rumors NVIDIA AI Security AI Framework Vulnerabilities Nvidia 595.76 Hotfix NVIDIA Megatron Bridge vulnerability GPU vs ASIC AI battle NVIDIA Driver Vulnerability CVE-2025-33217 NVIDIA biggest TSMC customer 2026, NVIDIA vs Apple TSMC revenue share NVIDIA CUDA Toolkit CVE-2025-33228 Groq NVIDIA licensing deal, Jonathan Ross acquihire 2025 NeMo Code Injection, AI Framework RCE NVIDIA App Privilege Escalation, CVE-2025-23358 NVIDIA Security Update, DLS Vulnerability CVE-2025-23316 NVIDIA NVDebug, vulnerabilities NVIDIA Driver Vulnerabilities, vGPU Security Nvidia Jetson, UEFI Vulnerabilities CVE-2024-0130 - CVE-2024-0136 CVE-2024-0148 NVIDIA Driver Support, Windows 10 EOL

NVIDIA Alert: High-Severity Code Execution Flaws Hit CUDA Toolkit

Do Son January 22, 2026

NVIDIA has rolled out a critical software update for its widely used CUDA Toolkit, patching a quartet...

Trust Hijacked: Hackers Seize Expired Domains to Poison Linux Snap Apps Snap Store Malware Domain Hijacking

Trust Hijacked: Hackers Seize Expired Domains to Poison Linux Snap Apps

Do Son January 22, 2026

A disturbing new tactic has emerged in the Linux software ecosystem, turning trusted developer accounts into vehicles...

NVIDIA Patches High-Severity Flaws in Graphics and AI Tools NVIDIA FLARE Vulnerability Federated Learning Security NVIDIA Jetson Linux Edge AI Security BioNeMo Vulnerability Insecure Deserialization NVIDIA RTX 50 Super delay NVIDIA Nsight Vulnerability Merlin Transformers4Rec NVIDIA AI Bubble $57 Billion Revenue H20 AI chip NVIDIA earnings Blackwell AI Nvidia DGX-1 Vulnerabilities CVE-2024-0143 NVIDIA Linux Gaming, VKD3D Performance

NVIDIA FLARE Vulnerability Federated Learning Security NVIDIA Jetson Linux Edge AI Security BioNeMo Vulnerability Insecure Deserialization NVIDIA RTX 50 Super delay NVIDIA Nsight Vulnerability Merlin Transformers4Rec NVIDIA AI Bubble $57 Billion Revenue H20 AI chip NVIDIA earnings Blackwell AI Nvidia DGX-1 Vulnerabilities CVE-2024-0143 NVIDIA Linux Gaming, VKD3D Performance

NVIDIA Patches High-Severity Flaws in Graphics and AI Tools

Do Son January 21, 2026

NVIDIA has issued a dual security warning for developers and data scientists, releasing critical updates for two...

10-Year-Old GNU Inetutils Telnetd Flaw Lets Hackers Log In as Root via “-f root” GNU Inetutils Telnetd Root Authentication Bypass

10-Year-Old GNU Inetutils Telnetd Flaw Lets Hackers Log In as Root via “-f root”

Do Son January 21, 2026

A critical-severity security flaw has been disclosed in GNU Inetutils, specifically within its telnetd server, allowing remote...

CVE-2025-65586: Libheif Flaw Exposes Image Decoders to Denial-of-Service libheif Vulnerability CVE-2025-65586 Trend Micro RCE CVE-2025-69258 SessionReaper CVE-2025-54236 VS Code Marketplace, supply chain attack npm Supply Chain, Toptal Compromise Ruckus AP Vulnerability

libheif Vulnerability CVE-2025-65586 Trend Micro RCE CVE-2025-69258 SessionReaper CVE-2025-54236 VS Code Marketplace, supply chain attack npm Supply Chain, Toptal Compromise Ruckus AP Vulnerability

CVE-2025-65586: Libheif Flaw Exposes Image Decoders to Denial-of-Service

Do Son January 21, 2026

A new vulnerability has been discovered in libheif, a widely used open-source library for decoding modern image...

Crypto Foundation Cracked: One-Byte Overflow in GNU libtasn1 (CVE-2025-13151) XCharge C6 vulnerabilities EV charger security flaws GNU libtasn1 Vulnerability CVE-2025-13151 Credit Card Skimmer Malware CVE-2024-13892

XCharge C6 vulnerabilities EV charger security flaws GNU libtasn1 Vulnerability CVE-2025-13151 Credit Card Skimmer Malware CVE-2024-13892

Crypto Foundation Cracked: One-Byte Overflow in GNU libtasn1 (CVE-2025-13151)

Do Son January 21, 2026

A potentially dangerous vulnerability has been uncovered in GNU libtasn1, a foundational software library used by countless...

ImageMagick Alert (CVE-2026-23876): “XBM” Image Uploads Trigger Massive Heap Overflow ImageMagick Vulnerability CVE-2026-23876 ImageMagick TIM Overflow, Memory Disclosure Flaw ImageMagick vulnerabilities, memory corruption CVE-2023-34152

ImageMagick Alert (CVE-2026-23876): “XBM” Image Uploads Trigger Massive Heap Overflow

Do Son January 21, 2026

A new high-severity vulnerability has been discovered in ImageMagick, the ubiquitous image processing library powering everything from...

Decades-Old Flaw & New Heap Corruption: Critical glibc Bugs Revealed glibc Security Legacy DNS Flaws glibc Vulnerabilities Linux Security Alert glibc Vulnerability CVE-2026-0861

glibc Security Legacy DNS Flaws glibc Vulnerabilities Linux Security Alert glibc Vulnerability CVE-2026-0861

Decades-Old Flaw & New Heap Corruption: Critical glibc Bugs Revealed

Do Son January 19, 2026

The maintainers of the GNU C Library (glibc), the core library that underpins the vast majority of...

CVE-2025-33206: High-Severity Flaw Patched in NVIDIA Nsight Graphics for Linux NVIDIA Nsight Vulnerability CVE-2025-33206 NVIDIA ConnectX Firmware - CVE-2024-0105

NVIDIA Nsight Vulnerability CVE-2025-33206 NVIDIA ConnectX Firmware - CVE-2024-0105

CVE-2025-33206: High-Severity Flaw Patched in NVIDIA Nsight Graphics for Linux

Do Son January 15, 2026

NVIDIA has released a critical software update for its Nsight Graphics tool on Linux, patching a high-severity...

shell-quote command injection AI-Driven Vulnerabilities Q1 2026 Cyber Threats vm2 Sandbox Escape Node.js RCE upKeeper Privilege Escalation CVE-2026-2449 Pharos Controls Vulnerability Root Access Exploit Cybersecurity Vulnerability Roundup CVSS 10.0 Flaws Shadow Archives CVE-2026-0866 MS-Agent Prompt Injection CVE-2026-2256 basic-ftp Path Traversal CVE-2026-27699 telnetd Root Vulnerability CVE-1999-0073 Regression USR-W610 Vulnerabilities End-of-Life IoT Security IceWarp Security Update IceWarp Vulnerabilities Airleader Master Vulnerability CVE-2026-1358 ZLAN5143D Vulnerability CISA ICS Advisory Acronis Cyber Protect Vulnerability CVE-2025-30411 WAGO 852 Vulnerability OT Network Security SandboxJS Vulnerability Sandbox Escape (CVSS 10.0) Kubernetes Local Path Provisioner CVE-2025-62878 CISA Unresponsive Vendors Avation & RISS Vulnerabilities KiloView Vulnerability CVE-2026-1453 OpenClaw RCE vulnerability Johnson Controls Vulnerability CVE-2025-26385 SandboxJS Vulnerability CVE-2026-23830 ibaPDA Vulnerability CVE-2025-14988 Protobuf Vulnerability CVE-2026-0994 AVEVA Process Optimization Vulnerability CVE-2025-61937 ConnectWise PSA Vulnerability CVE-2026-0695 Aruba VIA Vulnerability CVE-2025-37186 aiohttp v3.13.3, Denial of Service (DoS) SmarterMail RCE, CVE-2025-52691 Airoha RACE, Headphone Jacking HPE OneView RCE CVE-2025-37164 FreePBX Auth Bypass, PBX Takeover ScreenConnect Config Flaw, Untrusted Extensions Ruby SAML Auth Bypass, XML Parser Differential Devolutions SQL Injection, Password Manager Flaw Vivotek Unauthenticated RCE, EOL IP Camera Flaw Lynx+ Critical Flaw, Unauthenticated Reset Firebox Default Credentials, CVE-2025-59396 Veeder-Root RCE, Critical ATG Flaw ArcGIS Server SQLi Watchdoc RCE, CVE-2025-58384 Delta DIALink Daikin Security Gateway, authentication bypass Frostbyte10, industrial controller security SunPower, vulnerability Ubiquiti UniFi Connect, EV Station Vulnerabilities Adobe Experience Manager, RCE Vulnerability UniFi Access, Command Injection LDAPNightmare - CVE-2025-1316

Details Exposed: High-Severity Aruba VIA Root Flaw Publicly Disclosed

Do Son January 14, 2026

HPE Aruba Networking has issued a security alert for users of its Virtual Intranet Access (VIA) client...

Wide Open Firewall: Critical Foomuuri Flaws Let Local Users Take Control Foomuuri Vulnerability CVE-2025-67603 bypass WAF protections

Wide Open Firewall: Critical Foomuuri Flaws Let Local Users Take Control

Do Son January 9, 2026

The SUSE Security Team has released a detailed report exposing multiple vulnerabilities in Foomuuri, a popular nftables-based...

GoBruteforcer Returns: How AI Code Snippets Fueled a 50,000-Server Botnet Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware

Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware

GoBruteforcer Returns: How AI Code Snippets Fueled a 50,000-Server Botnet

Do Son January 8, 2026

A sophisticated new variant of the GoBruteforcer botnet is on the loose, and it’s capitalizing on a...

CVE-2025-67859: Critical Auth Bypass Discovered in Popular Linux Battery Utility TLP Vulnerability CVE-2025-67859 Linux Kernel 6.9 Linux Kernel, End-of-Life

TLP Vulnerability CVE-2025-67859 Linux Kernel 6.9 Linux Kernel, End-of-Life

CVE-2025-67859: Critical Auth Bypass Discovered in Popular Linux Battery Utility

Do Son January 8, 2026

A critical security flaw has been unearthed in TLP, the widely used power management utility for Linux...

Critical Wget2 Flaws Expose Users to Arbitrary File Overwrites and Memory Crashes GNU Wget2, Path Traversal

Critical Wget2 Flaws Expose Users to Arbitrary File Overwrites and Memory Crashes

Do Son January 2, 2026

GNU Wget2, the modern successor to the ubiquitous command-line download tool, has been hit with a double...

Privilege Escalation in guix-daemon: Critical Vulnerabilities Threaten Multi-User Systems Guix Daemon, Privilege Escalation

Privilege Escalation in guix-daemon: Critical Vulnerabilities Threaten Multi-User Systems

Do Son June 26, 2025

The Guix project has issued a critical security advisory detailing two newly discovered vulnerabilities in guix-daemon—CVE-2025-46415 and...

Critical Privilege Escalation Flaw in FreeIPA Threatens Linux Domain Security FreeIPA, Privilege Escalation

Critical Privilege Escalation Flaw in FreeIPA Threatens Linux Domain Security

Do Son June 20, 2025

A newly disclosed vulnerability in FreeIPA, an identity management solution used to centrally manage Linux and UNIX...

IGEL OS 10 Flaw (CVE-2025-47827): Full Secure Boot Bypass Allows Untrusted Kernel & Rootkits, PoC Available IGEL OS, Secure Boot Bypass

IGEL OS 10 Flaw (CVE-2025-47827): Full Secure Boot Bypass Allows Untrusted Kernel & Rootkits, PoC Available

Do Son June 12, 2025

Researcher Zack Didcott has disclosed a critical vulnerability affecting IGEL OS 10. Tracked as CVE-2025-47827, the flaw...

glibc Vulnerability Puts Millions of Linux Systems at Risk of Code Execution glibc vulnerability Linux security

glibc Vulnerability Puts Millions of Linux Systems at Risk of Code Execution

Do Son May 19, 2025

A newly reported vulnerability within the GNU C Library (glibc), a fundamental component of countless Linux applications,...

Critical Privilege Escalation Flaw in IGEL OS Exposes Systems to Root Access Risks IGEL OS, Privilege Escalation

Critical Privilege Escalation Flaw in IGEL OS Exposes Systems to Root Access Risks

Do Son May 8, 2025

IGEL Technology has issued a critical security advisory for its Linux-based operating system, IGEL OS, warning users...

CVE-2025-29906: Finit’s Bundled Getty Flaw Allows Authentication Bypass on Linux Systems Finit vulnerability, authentication bypass

CVE-2025-29906: Finit’s Bundled Getty Flaw Allows Authentication Bypass on Linux Systems

Do Son May 1, 2025

A serious security vulnerability has been discovered in Finit, a lightweight and fast init system for Linux,...

Critical Alert 2 Active Exploits Detected Today