🛡️ Linux Security
Kernel bugs, urgent alerts for the software on your servers, patches, and the polite art of not getting rooted. Plain-English advisories with the exact commands, kernel versions and honest caveats.
📡 Latest Linux Kernel Threats
The kernel bugs that attackers are using right now, with the fix status from Ubuntu and Red Hat. It updates itself every hour.
📚 Security Advisories
Click a title to view the full guide:
Dirty Frag (CVE-2026-43284 / CVE-2026-43500) Copy Fail (CVE-2026-31431) kTLS Zero-Length Record (CVE-2025-39682) ebtables SNAT ARP Write (CVE-2026-53266) AF_ALG Concurrent Write Race (CVE-2025-39964) IPv6 Fraggap Overflow (CVE-2026-53362)
There are two kinds of sysadmins:
Those who reboot after a kernel update, and those who are still vulnerable.
Those who reboot after a kernel update, and those who are still vulnerable.
Good Habits
- Patch, then reboot — A new kernel does nothing until you boot into it. uname -r tells the truth
- Know who can run code — Most local exploits need a foothold first. Shared servers, CI runners and container hosts come first
- Mitigations are bandages — Blocking a module buys time. It is not a substitute for the fix
- Check the vendor page — Kernel version numbers differ per distribution, so compare against your own vendor's advisory
⚠️ Heads up: These pages are defensive: how to check exposure, mitigate and patch. Only run commands on machines you own or administer, and read the "side effects" notes before changing a production box.
Coming Soon
- More advisories, written up as they land