📰 IT Security

Preisgabe von Informationen in Shibboleth (Ubuntu)

Mehrere Probleme in SimpleSAMLphp (Ubuntu)

Ausführen beliebiger Kommandos in Snapcast (Ubuntu)

Überschreiben von Dateien in Suricata-Update (Ubuntu)

Mehrere Probleme in kitty (Ubuntu)

I found the best speech-to-text tool for Linux, and I’ll never dictate notes again without it

If dictation is your favorite method of taking notes and Linux is your desktop OS, Speech Note is the perfect app for you. Here’s how to get started.

I found the best speech-to-text tool for Linux, and I’ll never dictate notes again without it

If dictation is your favorite method of taking notes and Linux is your desktop OS, Speech Note is the perfect app for you. Here’s how to get started.

CVE-2024-44964 | Linux Kernel up to 6.10.4 idpf vport_open memory leak (6b289f8d9153/f01032a2ca09 / Nessus ID 213014)

A vulnerability was found in Linux Kernel up to 6.10.4 and classified as critical.

CVE-2024-44963 | Linux Kernel up to 6.10.4 btrfs allocation of resources (98251cd60b4d/bb3868033a4c / Nessus ID 212724)

A vulnerability identified as problematic has been detected in Linux Kernel up to 6.10.4.

CVE-2024-44962 | Linux Kernel up to 6.6.45/6.10.4 Bluetooth timer_shutdown_sync denial of service (4d9adcb94d55/28bbb5011a97/0d0df1e750ba / Nessus ID 212724)

A vulnerability has been found in Linux Kernel up to 6.6.45/6.10.4 and classified as problematic.

CVE-2024-44961 | Linux Kernel up to 6.6.45/6.10.4 AMD GPU buffer overflow (0da0b06165d8/c28d207edfc5/829798c789f5 / Nessus ID 212724)

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.45/6.10.4.

CVE-2024-44960 | Linux Kernel up to 6.10.4 gadget null pointer dereference (Nessus ID 208245 / WID-SEC-2024-2057)

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.10.4. Affected is an unknown function of the component gadget.

Ausführen beliebiger Kommandos in polkit (Ubuntu)

$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws

AI-assisted researchers flooded Vercel with reports, forcing the company to automate vulnerability triage.

BambooToken Malware Uses MQTT to Control Windows and Linux Systems

Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a…

CVE-2024-44957 | Linux Kernel up to 6.6.45/6.10.4 privcmd irqfd_wakeup deadlock (c2775ae4d922/49f2a5da6785/1c682593096a / Nessus ID 212724)

A vulnerability labeled as critical has been found in Linux Kernel up to 6.6.45/6.10.4.

CVE-2024-44959 | Linux Kernel up to 6.6.45/6.10.4 tracefs i_lru initialization (726f4c241e17/061da60716ce/0b6743bd60a5 / Nessus ID 212724)

A vulnerability identified as problematic has been detected in Linux Kernel up to 6.6.45/6.10.4.

CVE-2024-44954 | Linux Kernel up to 6.10.4 line6 race condition (Nessus ID 208245 / WID-SEC-2024-2057)

A vulnerability classified as problematic has been found in Linux Kernel up to 6.10.4.

CVE-2024-44956 | Linux Kernel up to 6.10.4 preempt_fence_work_func deadlock (458bb83119df/3cd1585e5790 / Nessus ID 212724)

A vulnerability was found in Linux Kernel up to 6.10.4 and classified as critical. This vulnerability affects the function preempt_fence_work_func.

CVE-2024-44955 | Linux Kernel up to 6.10.4 AMD Display is_dsc_need_re_compute null pointer dereference (39b217193729/fcf6a49d7992 / Nessus ID 234782)

This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all.

CVE-2024-44953 | Linux Kernel up to 6.10.4 scsi kworker/0 ufshcd_rpm_get_sync deadlock (f13f1858a28c/3911af778f20 / Nessus ID 212724)

A vulnerability described as critical has been identified in Linux Kernel up to 6.10.4.

BambooToken malware controls Windows and Linux systems via MQTT

A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT)…

Survive any Linux catastrophe with a Btrfs snapshot – these GUIs make it easy

Want to ensure your Linux system can recover from a catastrophe? Consider a handy GUI app for your Btrfs filesystem. These are the three I recommend.

Survive any Linux catastrophe with a Btrfs snapshot – these GUIs make it easy

Want to ensure your Linux system can recover from a catastrophe? Consider a handy GUI app for your Btrfs filesystem. These are the three I recommend.

CVE-2026-91786 | Red Hat Enterprise Linux GNOME Shell out-of-bounds (EUVD-2026-78417)

A vulnerability labeled as critical has been found in Red Hat Enterprise Linux. This affects an unknown part of the component GNOME Shell.

CVE-2026-80914 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 Bluetooth ISO iso_conn_ready use after free

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.12.108/6.18.49/7.2.3.

CVE-2026-64294 | Linux Kernel up to 7.2-rc2 mm file_owner_or_capable/owner_or_capable permission (Nessus ID 345814)

A vulnerability described as very critical has been identified in Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3/7.2-rc2.

CVE-2026-68363 | Linux Kernel up to 7.2-rc4 ath9k hif_usb.c ath9k_hif_request_firmware use after free (Nessus ID 345819)

A vulnerability was found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4 and classified as critical.

Red Heron Hackers Exploit Critical Gitea RCE to Steal Source Code and Deploy Linux Malware

A Chinese-speaking threat actor tracked as Red Heron has exploited a remote-code-execution vulnerability in Gitea to steal source code, establish…

Red Heron Hackers Exploit Critical Gitea RCE to Steal Source Code and Deploy Linux Rootkit

A Chinese-speaking threat actor known as Red Heron has exploited a critical remote code execution (RCE) vulnerability in Gitea to steal private…

CVE-2026-63889 | Linux Kernel up to 7.0.11 Scsi Transport Fc pname_count integer overflow (Nessus ID 345819)

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 7.0.11.

[NEU] [hoch] Microsoft Windows 11 (Secure Kernel Mode): Schwachstelle ermöglicht Privilegieneskalation

Ein lokaler Angreifer kann eine Schwachstelle in Microsoft Windows 11 (Secure Kernel Mode) ausnutzen, um seine Privilegien zu erhöhen.

[UPDATE] [mittel] Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation und Denial of Service

Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel für eine Privilegieneskalation ausnutzen, sowie um einen Denial of Service Zustand oder…

USN-8730-2: Linux kernel (Azure) vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system.

Linux Kernel ZcopyReaper Vulnerability Lets Local Attackers Gain Root Privileges

Security researchers have disclosed a local privilege escalation vulnerability in the Linux kernel related to the Reliable Datagram Sockets (RDS)…

Ausführen beliebiger Kommandos in dracut (Ubuntu)