Linux kernel

Several Linux kernel security vulnerabilities were unintentionally disclosed on the public Linux Kernel Mailing List, meaning exploit details may have been visible before patches were ready. The incident has raised concerns among developers and security researchers about disclosure practices and whether fixes will land in time to protect systems running the kernel.

Two unannounced Raspberry Pi models — a Zero 3W and a Pi 4 Model A — have been identified in Linux kernel device tree files, which typically list hardware before official release. The discovery suggests the Raspberry Pi Foundation is preparing new variants of its single-board computers, and hobbyists are speculating about specs, pricing and release dates.

A security discussion is underway after it was noted that Go programs enable Multipath TCP by default on Linux, which exposes them to the recently disclosed kernel vulnerability CVE-2026-98432. Developers are weighing the risk to Go-based network services and whether the default should be changed, with the Go team's announcements list cited as the reference point.

Ubuntu has released patched kernels addressing a critical flaw in the Linux TCP implementation, staging them in a testing area for 22.04 LTS and newer releases. The company says applying the kernel updates, rather than disabling Multipath TCP, is the right defense while wider testing continues.

A critical vulnerability in the Linux TCP/IP stack, tracked as CVE-2026-98432, has been disclosed with a CVSS score of 9.8. The flaw is described as a use-after-free bug in TCP handling that could allow attackers to remotely compromise affected systems. Engineers are discussing the technical details, severity ratings and the challenge of fixing memory-safety bugs in the kernel's networking code.

Anthropic's AI model has been credited with finding a vulnerability in the Linux kernel, tracked as CVE-2026-98432, which could allow attackers to gain remote root access to affected systems. Security outlet CSO Online reported the discovery, and the bug is drawing attention across searches in the UK, Germany, Russia and Japan as researchers assess its severity.

Security researchers report that Claude AI was able to exploit a Linux kernel vulnerability to execute root commands without any user interaction. The finding has raised alarm in the cybersecurity community, as it demonstrates how AI agents could be leveraged to autonomously exploit system flaws, prompting renewed debate about the safety risks of granting AI tools deep system access.

Open Source consultancy Collabora has relocated its Mastodon account from floss.social to Fosstodon, telling existing followers they will carry over automatically. The company, which works on the Linux kernel, graphics, multimedia, machine learning and XR, says it will use the new account to share engineering blog posts, talks and software releases.

A batch of security stories is drawing attention: PHP vulnerabilities, SSL certificates secured with comically weak keys, and an accidental disclosure of a Linux kernel CVE. On a different note, Canonical is ramping up development of its immutable version of the Ubuntu desktop, which hopefully will not be limited to GNOME.

Linux kernel 7.2 has reached its end of life, meaning it will no longer receive bug fixes or security patches from developers. Users still running the series are advised to move to the Linux 7.3 kernel, which is now the maintained release. Free and open source software communities are sharing the announcement, reminding system administrators to update their installations promptly to stay protected.

Linus Torvalds has announced the first release candidate of Linux kernel 7.4, opening the testing period for the next version of the kernel. Release candidates let developers and testers try new features before the stable release, which typically follows after several weeks of candidates. Free and open-source software communities are circulating the announcement as testers begin downloading and reporting bugs on the new build.

A newly assigned vulnerability, CVE-2026-98432, describes a use-after-free flaw in the Linux kernel's IPv4 networking code. Use-after-free bugs in core network code are considered serious because they can potentially allow privilege escalation or remote code execution. Security researchers and Linux maintainers are expected to assess affected kernel versions and ship patches.

The Linux Lite project has released version 8.2 of its beginner-friendly distribution, built on Ubuntu 26.04 LTS and shipping with the Linux 7.3 kernel. The update, reported by 9to5linux, is drawing attention in open-source communities as users consider upgrading to get the latest kernel features and long-term Ubuntu base.

A newly catalogued Linux kernel vulnerability, CVE-2026-98432, a use-after-free bug in the TCP stack, is reported to affect programs written in Go. The Go team has circulated an announcement addressing the issue, and developers are discussing how widely their applications could be exposed and what updates or mitigations they need to apply.

Linus Torvalds says the Linux kernel is out of its stabilization phase and that AI-related contributions now follow a 'much healthier model'. He acknowledged machine-made patches still 'often get rewritten', suggesting AI-assisted code is entering the kernel process under closer human review rather than being accepted wholesale.

A critical vulnerability in the Linux kernel is drawing attention from security researchers and system administrators, with warnings that attackers could exploit it to gain remote control over affected servers. Administrators are urged to patch affected systems promptly, and discussion is focused on which kernel versions are vulnerable and how widely servers may be exposed.

Security researchers have disclosed a set of local privilege escalation vulnerabilities affecting the Linux kernel, a class of bug that lets unprivileged users gain root access on affected systems. The disclosure, published by OpenAI's security team under the title 'A Thousand Fewer Paths to Root', describes a systematic effort to find and eliminate many such escalation paths at once. Discussion is focused on how many systems may be exposed and how quickly patches will land in distributions.

OpenAI reportedly ran an automated AI pipeline that discovered 948 Linux kernel vulnerabilities at a cost of about $1.2 million, then patched them. The story highlights what this means for Linux users and administrators, urging them to review updates and apply patches now. It fuels debate over AI's growing role in large-scale security auditing and vulnerability discovery.

A critical vulnerability in the Linux kernel has prompted system administrators and distributors worldwide to push urgent security patches. The flaw could allow attackers to compromise affected systems, and users are being urged to update their kernels as soon as fixes become available for their distributions.

A critical flaw in the Linux kernel's TCP/IP stack allows remote code execution and is being patched now. The bug reportedly went unnoticed for eleven years and was discovered by Anthropic's Claude AI, sparking discussion about security research by artificial intelligence and the need for system administrators to update promptly.

Red Hat has shipped a patch for a critical use-after-free vulnerability in the Linux kernel's TCP stack, rated 9.8 out of 10, while Ubuntu has also released fixes in testing. The flaw reportedly allows a remote attacker to corrupt kernel memory with a single crafted TCP handshake, with no login, password, or user interaction required, making it remotely exploitable.

A developer has released a major update to a Linux system call reference website and API first launched in 2020. The new version adds support for more CPU architectures, a kernel version selector, and syscall descriptions, along with other improvements. Mobile support has also been improved, though the author notes the CSS work is not their strength. The project serves as a lookup tool for developers working with Linux kernels.

The Fedora Project has released Fedora Linux 45, the distribution's scheduled six-monthly update. The release brings a refreshed kernel, new installer features and an updated toolchain and subsystems. Fedora Linux serves as the open-source upstream for RPM-based enterprise Linux distributions, so the update will shape future enterprise releases. Linux users are discussing the new features and what the changes mean for downstream distributions.

A Linux news roundup is drawing attention with items including Fortnite on Linux, the upcoming Ubuntu 26.10 release, Linux Mint 27, KDE Plasma 6.8, and a future Linux 7.3 kernel. The discussion centers on whether Fortnite could finally come to Linux, as the game has so far been blocked on the platform, alongside updates from major distributions and desktop projects.

A new operating system called AlpineBSD has been announced, combining the NetBSD kernel with the Alpine Linux userland. Its developers are promoting it as a free and open source OS built without AI assistance, a stance that sets it apart in current software discussions. Reaction so far centres on the unusual pairing of BSD and Linux components and on the explicit no-AI positioning.

The Linux kernel is preparing to remove the last of its MMX optimization code, with the change expected to land in Linux 7.5. MMX dates back to 1990s Intel processors, and the cleanup would drop support for hardware that is long obsolete. Developer coverage of the removal is drawing attention as another step in the kernel shedding legacy x86 technology.

A Linux kernel flaw affecting Ubuntu remains unpatched, and Solana validator operators are being urged to apply mitigations immediately. Users who do not run validators are advised to check their kernel version and monitor Ubuntu's -proposed package repository for incoming fixes. The warning has circulated among Linux infrastructure and security watchers, who stress the risk is mainly to validator and server operators until an official patch lands.

Security researchers have flagged critical vulnerabilities in the Linux kernel and PHP, prompting urgent calls for server administrators to apply patches. The flaws could allow attackers to compromise web servers running common open-source stacks. Experts urge admins to update affected systems promptly and review exposed servers for signs of exploitation.

IPFire has released Core Update 205 for its open-source firewall distribution, patching CVE-2026-98432, a use-after-free vulnerability in the Linux kernel's TCP stack. The flaw is described as serious, potentially allowing exploitation through network traffic, and users of IPFire 2.29 are advised to update their systems promptly to stay protected.

The Linux kernel community is facing a constant stream of CVE vulnerability reports, and the 2026 Linux Plumbers Conference addressed how kernel users, not just developers, are coping with the volume. Discussion focused on how downstream users handle the flood of security advisories and what changes might make managing kernel vulnerabilities more sustainable.