Tag

Linux kernel

6 stories
Claude-written exploit exposes critical Linux kernel race, patches and uncertain attack path

Claude-written exploit exposes critical Linux kernel race, patches and uncertain attack path

Anthropic’s Frontier Red Team disclosed a striking research result: an unreleased Claude model produced a working exploit for a critical Linux kernel vulnerability tracked as CVE-2026-98432. According to Anthropic, the proof-of-concept lets a remote attacker run commands as root without a login or user interaction. The company treated the work as a lab test and said the underlying bug has been fixed upstream and backported to maintained kernel branches—but distribution…

Saugata Datta3 min read36
Kali Linux 2026.3: Six New Tools, Kernel 7.1.5, KDE 6.7 and Major NetHunter Upgrades

Kali Linux 2026.3: Six New Tools, Kernel 7.1.5, KDE 6.7 and Major NetHunter Upgrades

Kali Linux 2026.3 arrived on October 26 as the third point release of 2026, bringing a broad set of updates across tools, the kernel, desktops, and the mobile-focused NetHunter platform. This release packages 126 updated packages, bumps the rolling-kernel from 6.19 to 7.1.5, and refreshes the image-building scripts while introducing six new penetration-testing utilities. For users and builders, the release mixes practical tool additions with infrastructure and documentation changes meant…

Saugata Datta7 min read47
Accidental Leak Exposes Critical KSMBD Flaws in the Linux Kernel

Accidental Leak Exposes Critical KSMBD Flaws in the Linux Kernel

Several unpatched Linux vulnerabilities were unintentionally posted to public mailing lists in October, exposing technical details before fixes reached production kernels. The reports, submitted by Trend Micro’s Zero Day Initiative (ZDI), included two critical flaws—each rated CVSS 9.0—that affect the kernel’s built-in KSMBD SMB file server and could enable remote code execution depending on configuration. Other reports described local privilege-escalation and information-disclosure risks across different kernel subsystems and related software.…

Saugata Datta4 min read139
Debian Patches 1,313 Kernel Flaws: What Administrators Need to Know

Debian Patches 1,313 Kernel Flaws: What Administrators Need to Know

Debian has just released a major kernel security update that aggregates fixes for 1,313 CVE entries, a headline figure that has drawn attention across the Linux community. The update — published as DSA-6528-1 and delivered for the Trixie stable release as Linux source package 6.12.111-1 — addresses a range of vulnerabilities that could, in different contexts, lead to privilege escalation, denial of service, or information leaks. While the scale of…

Saugata Datta4 min read206
Copy Fail (CVE-2026-31431): A 4‑Byte Kernel Bug That Lets Attackers Gain Root on Major Linux Distros

Copy Fail (CVE-2026-31431): A 4‑Byte Kernel Bug That Lets Attackers Gain Root on Major Linux Distros

Microsoft Defender Security Research recently disclosed CVE-2026-31431—nicknamed “Copy Fail”—a high‑severity local privilege escalation in the Linux kernel’s crypto subsystem that enables an unprivileged user to escalate to root. The vulnerability affects kernels released since 2017 and has broad implications for cloud and container environments because the exploit can corrupt in-memory representations of readable files (including setuid binaries) without changing the on-disk file. Although public proof-of-concept code exists and detected exploitation…

Saugata Datta5 min read350
CrackArmor: Nine AppArmor Flaws Let Local Users Escalate to Root — What Organizations Need to Know

CrackArmor: Nine AppArmor Flaws Let Local Users Escalate to Root — What Organizations Need to Know

AppArmor, a widely deployed Linux Mandatory Access Control (MAC) framework, is at the center of a set of serious vulnerabilities that researchers have dubbed “CrackArmor.” Disclosed on March 12, 2026 by the Qualys Threat Research Unit (TRU), the collection of flaws affects AppArmor’s implementation as a Linux Security Module (LSM) and has been present in the upstream kernel since around version 4.11 (2017). Because AppArmor ships enabled by default on…

Saugata Datta4 min read758
🧰

Free Tools: IP, DNS, SSL

40+ free network and other tools in one place. No signup. Click explore or visit https://technochat.in/tools

Explore