tsecurity.de - News Radar & Live Feeds

DISA STIG Automation for AlmaLinux OS 9

Mon, 26 Oct 2026 18:30:38 +0100

Hello AlmaLinux community! At TuxCare, we’ve contributed free DISA STIG automation for AlmaLinux OS 9 to the ComplianceAsCode project, and the maintainers merged it on October 20, 2026. That means you can now point OpenSCAP at an AlmaLinux OS 9 system and get a report of which STIG requirements it meets, rather than working through a few hundred... Weiterlesen

Systemd Creator’s Startup Opens Signups for Private Preview of its Linux System

Mon, 26 Oct 2026 18:30:04 +0100

Before announcing this Linux-based implementation, Amutable had released two open source tools. tine, a Buck2-based build system that composes OS images; available under MPL-2.0, and Quarry, a TUF-based tool that distributes those images to machines; available under Apache-2.0.What Amutable Foundations brings to the table is a service where... Weiterlesen

Distribution Release: Maze Linux 2026.10.26

Mon, 26 Oct 2026 18:29:56 +0100

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Berk Küçük has announced the release of a new version of Maze Linux, an Arch-based Linux distribution focused on security, privacy and artificial intelligence (AI). It ships a customised and hardened KDE Plasma desktop with defensive and anonymity tools installed and pre-configured:... Weiterlesen

[NEU] [mittel] Red Hat Enterprise Linux Flatpack: Mehrere Schwachstellen ermöglichen Manipulation von Dateien

Mon, 26 Oct 2026 18:08:12 +0100

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux Flatpack ausnutzen, um Dateien zu manipulieren. Weiterlesen

[NEU] [mittel] Red Hat Enterprise Linux (FreeIPMI): Mehrere Schwachstellen

Mon, 26 Oct 2026 18:08:11 +0100

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux (FreeIPMI) ausnutzen, um beliebigen Programmcode auszuführen und um einen Denial of Service Angriff durchzuführen. Weiterlesen

Kali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3

Mon, 26 Oct 2026 18:03:01 +0100

The Kali Linux team released version 2026.3 after overhauling the public build scripts it uses to produce every official image. The refreshed scripts share the same features, command-line arguments and, where possible, the same layout, so a pipeline written against an older script may need edits. Builds can now run in a container Each refreshed... Weiterlesen

Linux Flaws Exposed Before Fixes as Root Exploit Goes Public

Mon, 26 Oct 2026 18:02:49 +0100

Six Linux flaws were made public, including one with a working root exploit and no merged fix Weiterlesen

A Newly Proposed Linux Filesystem Can Fix Corrupted Data

Mon, 26 Oct 2026 17:57:39 +0100

BeamFS creator Aurelien Desbrieres is not calling for a merge, but is requesting feedback on an 18-patch proposal that takes the place of FTRFS, an earlier filesystem he proposed in April. The Linux/Open Source blog It's FOSS reports: Filesystems that can repair damage, like Btrfs and ZFS, usually do it by falling back on a spare copy of the data.... Weiterlesen

25% of Incoming Pull Requests May Be AI Slop, Finds Study From Linux Foundation Research

Mon, 26 Oct 2026 17:57:27 +0100

"59% of maintainers report growing contribution volume since the rise of GenAI," according to a new study published by Linux Foundation Research. But 25% of their incoming pull requests "are estimated to be low-quality, also known as 'AI slop'." And on large projects, 69% see growing contributions — and estimate that 31% are low-quality/AI slop.... Weiterlesen

Reddit's Largest Open Source Community Dumbfounded By AI Ban: 'I Guess Linux Is No Longer Allowed?'

Mon, 26 Oct 2026 17:57:22 +0100

Kotaku reports: r/opensource, Reddit's primary "subreddit for everything open source related," has banned all AI-assisted and AI-related projects.... As reported by The Verge, the subreddit's October 24 post, titled "Your tokens aren't valuable: No more AI," features four new main rules: all projects must now be at least "1 year old," have... Weiterlesen

Distribution Release: Kali Linux 2026.3

Mon, 26 Oct 2026 13:44:31 +0100

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Kali Linux, a Debian-based distribution built for penetration testing, security research, digital forensics and reverse engineering, has been updated to version 2026.3 - now with build scripts for generating a personalised Kali Linux distribution: "We are back with Kali Linux 2026.3,... Weiterlesen

PlayStation 5 Linux project upgraded to support PS5 Pro and newer firmware

Mon, 26 Oct 2026 13:39:31 +0100

The impressive PlayStation 5 Linux project is continuing on, and recent updates to it have again expanded what it can support.Read the full article on GamingOnLinux. Weiterlesen

Kali Linux 2026.3 Released With 6 New Penetration Testing Tools and Linux Kernel 7.1

Mon, 26 Oct 2026 13:28:12 +0100

Kali Linux 2026.3 has been released as the third Kali update of 2026, bringing six new penetration testing tools, Linux kernel 7.1.5, KDE Plasma 6.7, refreshed image-building scripts, and a large set of Kali NetHunter changes. The release arrived on October 26 with 126 package updates and moves the kernel from version 6.19 to 7.1.5. The update... Weiterlesen

Kali Linux 2026.3 Released With 6 New Hacking Tools, Linux Kernel 7.1, and NetHunter Updates

Mon, 26 Oct 2026 13:24:34 +0100

Kali Linux 2026.3 has been released, introducing six security tools, Linux kernel 7.1.5, refreshed image-building scripts, and expanded NetHunter capabilities. Announced on October 26, 2026, the distribution’s third release of the year includes 126 package updates and KDE Plasma 6.7, combining security-testing additions with desktop and deployment... Weiterlesen

Kali Linux 2026.3 Released With 6 New Penetration Testing Tools and Major Updates

Mon, 26 Oct 2026 13:22:42 +0100

Kali Linux 2026.3 has been officially released, bringing six new security tools, updated image-building scripts, KDE Plasma 6.7, and major NetHunter improvements. Announced on October 26, 2026, this third release of the year includes 126 package updates and upgrades the Linux kernel from version 6.19 to 7.1.5.kali. This release focuses on... Weiterlesen

Kali Linux 2026.3 released with 6 new tools, desktop updates

Mon, 26 Oct 2026 13:14:50 +0100

Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more. [...] Weiterlesen

Kali Linux 2026.3 Released With 6 New Penetration Testing Tools and Major Updates

Mon, 26 Oct 2026 12:53:17 +0100

Kali Linux 2026.3 Release (Build-Scripts Refresh)

Mon, 26 Oct 2026 12:47:21 +0100

We are back with Kali Linux 2026.3, the third release of the year! We have been busy making it easier to build Kali, updating the desktop experience, and bringing in more tools for you. Ready to get your hands on it? Head over to the download page, or upgrade your existing installation to get started. Here is what has changed since the 2026.2... Weiterlesen

8 CLI HTTP Clients to Test APIs and Download Files in Linux

Mon, 26 Oct 2026 09:47:23 +0100

The post 8 CLI HTTP Clients to Test APIs and Download Files in Linux first appeared on Tecmint: Linux Howtos, Tutorials & Guides .Testing an API or troubleshooting a web server that returns a 502 error shouldn’t require opening a browser or launching The post 8 CLI HTTP Clients to Test APIs and Download Files in Linux first appeared on... Weiterlesen

Linux security vulnerabilities fixed per kernel version

Mon, 26 Oct 2026 09:40:26 +0100

Source: https://github.com/gregkh/kernel-development/blob/master/graphs%2Fpatches\_per\_release%2Fcves\_fixed\_per\_release.png This seems to be the impact of AI tools. In my experience AI is very good at finding bugs(not particularly great at good fixes though) submitted by /u/ShaderCompilation [link] [comments] Weiterlesen

CVE-2026-90164 | Linux Kernel up to 7.2.5 ksmbd ksmbd_server_init allocation of resources (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:17 +0100

A vulnerability classified as critical has been found in Linux Kernel up to 7.2.5. This issue affects the function ksmbd_server_init of the component ksmbd. The manipulation leads to allocation of resources. This vulnerability is referenced as CVE-2026-90164. Remote exploitation of the attack is possible. No exploit is available. It is recommended... Weiterlesen

CVE-2026-90166 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 ksmbd smb/server ksmbd_ipc_tree_connect_request null pointer dereference (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:17 +0100

A vulnerability was found in Linux Kernel up to 6.12.109/6.18.51/7.2.5 and classified as critical. This impacts the function ksmbd_ipc_tree_connect_request of the file smb/server of the component ksmbd. Executing a manipulation can lead to null pointer dereference. This vulnerability is registered as CVE-2026-90166. It is possible to launch the... Weiterlesen

CVE-2026-90165 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd ksmbd_stop_durable_scavenger null pointer dereference (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:17 +0100

A vulnerability has been found in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 and classified as very critical. This affects the function ksmbd_stop_durable_scavenger of the component ksmbd. Performing a manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2026-90165. It is possible to initiate the attack... Weiterlesen

CVE-2026-90168 | Linux Kernel up to 7.2.5 ksmbd ksmbd_free_work_struct improper synchronization (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:15 +0100

A vulnerability was found in Linux Kernel up to 7.2.5. It has been declared as very critical. Affected by this vulnerability is the function ksmbd_free_work_struct of the component ksmbd. The manipulation results in improper synchronization. This vulnerability is reported as CVE-2026-90168. The attack can be launched remotely. No exploit exists.... Weiterlesen

CVE-2026-90167 | Linux Kernel up to 7.2.5 ksmbd test_and_set_bit race condition (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:15 +0100

A vulnerability was found in Linux Kernel up to 7.2.5. It has been classified as very critical. Affected is the function test_and_set_bit of the component ksmbd. The manipulation leads to race condition. This vulnerability is documented as CVE-2026-90167. The attack can be initiated remotely. There is not any exploit available. Upgrading the... Weiterlesen

CVE-2026-90169 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd memory leak (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:15 +0100

A vulnerability was found in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. It has been declared as critical. This affects an unknown function of the component ksmbd. Executing a manipulation can lead to memory leak. This vulnerability appears as CVE-2026-90169. The attack may be performed from remote. There is no available exploit. It is... Weiterlesen

CVE-2026-90170 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd ipc_validate_msg out-of-bounds (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:15 +0100

A vulnerability was found in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. It has been rated as critical. This impacts the function ipc_validate_msg of the component ksmbd. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2026-90170. It is possible to initiate the attack remotely. There is no exploit... Weiterlesen

CVE-2026-90173 | Linux Kernel up to 7.2.5 smbdirect ib_free_cq use after free (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:15 +0100

A vulnerability identified as very critical has been detected in Linux Kernel up to 7.2.5. Affected by this vulnerability is the function ib_free_cq of the component smbdirect. This manipulation causes use after free. This vulnerability is handled as CVE-2026-90173. The attack can be initiated remotely. There is not any exploit available. You... Weiterlesen

CVE-2026-90172 | Linux Kernel up to 7.2.5 smbdirect mm/slub.c smbdirect_accept_connect_request null pointer dereference (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:15 +0100

A vulnerability categorized as critical has been discovered in Linux Kernel up to 7.2.5. Affected is the function smbdirect_accept_connect_request of the file mm/slub.c of the component smbdirect. The manipulation results in null pointer dereference. This vulnerability is known as CVE-2026-90172. It is possible to launch the attack remotely. No... Weiterlesen

CVE-2026-90174 | Linux Kernel up to 7.2.5 ksmbd ksmbd_alloc_user hash_sz out-of-bounds (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:15 +0100

A vulnerability labeled as critical has been found in Linux Kernel up to 7.2.5. Affected by this issue is the function ksmbd_alloc_user of the component ksmbd. Such manipulation of the argument hash_sz leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2026-90174. The attack can be launched remotely. No exploit exists.... Weiterlesen

CVE-2026-90175 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd ksmbd_ipc_login_request_ext memory leak (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:14 +0100

A vulnerability was found in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. It has been rated as critical. Affected by this issue is the function ksmbd_ipc_login_request_ext of the component ksmbd. This manipulation causes memory leak. This vulnerability appears as CVE-2026-90175. The attack may be initiated remotely. There is no available... Weiterlesen

CVE-2026-90176 | Linux Kernel up to 7.2.5 ksmbd check_lock_range locking (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:13 +0100

A vulnerability classified as very critical was found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. Impacted is the function check_lock_range of the component ksmbd. The manipulation results in improper locking. This vulnerability is identified as CVE-2026-90176. The attack can be executed remotely. There is not any exploit... Weiterlesen

CVE-2026-90178 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 hwmon coretemp_device_remove allocation of resources (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:13 +0100

A vulnerability identified as problematic has been detected in Linux Kernel up to 6.12.109/6.18.51/7.2.5. This vulnerability affects the function coretemp_device_remove of the component hwmon. Performing a manipulation results in allocation of resources. This vulnerability is known as CVE-2026-90178. Attacking locally is a requirement. No exploit... Weiterlesen

CVE-2026-90177 | Linux Kernel up to 7.2.5 bpf input validation (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:13 +0100

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 7.2.5. This affects an unknown part of the component bpf. Such manipulation leads to improper input validation. This vulnerability is traded as CVE-2026-90177. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the... Weiterlesen

CVE-2026-90179 | Linux Kernel up to 6.18.51/7.2.5 AppArmor change_hat deadlock (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:12 +0100

A vulnerability described as critical has been identified in Linux Kernel up to 6.18.51/7.2.5. The affected element is the function change_hat of the component AppArmor. The manipulation results in deadlock. This vulnerability was named CVE-2026-90179. The attack may be performed from remote. There is no available exploit. Upgrading the affected... Weiterlesen

CVE-2026-90180 | Linux Kernel up to 7.2.5 block mtip_hw_ioctl use after free (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:11 +0100

A vulnerability was found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. It has been rated as very critical. This issue affects the function mtip_hw_ioctl of the component block. Performing a manipulation results in use after free. This vulnerability is reported as CVE-2026-90180. The attack is possible to be carried out remotely.... Weiterlesen

CVE-2026-90182 | Linux Kernel up to 7.2.5 blk-iocost ioc_pd_free race condition (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:11 +0100

A vulnerability categorized as problematic has been discovered in Linux Kernel up to 7.2.5. Impacted is the function ioc_pd_free of the component blk-iocost. Executing a manipulation can lead to race condition. This vulnerability appears as CVE-2026-90182. The attack requires local access. There is no available exploit. It is advisable to... Weiterlesen

CVE-2026-90181 | Linux Kernel up to 7.2.5 ublk __ublk_shmem_remove_ranges infinite loop (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:09 +0100

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 7.2.5. Affected is the function __ublk_shmem_remove_ranges of the component ublk. Executing a manipulation can lead to infinite loop. This vulnerability is tracked as CVE-2026-90181. The attack can be launched remotely. No exploit exists. You should upgrade the... Weiterlesen

CVE-2026-90184 | Linux Kernel up to 7.2.5 null_blk block/blk-zoned.c nullb_device_power_store zoned/zones race condition (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:04 +0100

A vulnerability classified as problematic has been found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. The impacted element is the function nullb_device_power_store of the file block/blk-zoned.c of the component null_blk. This manipulation of the argument zoned/zones causes race condition. The identification of this vulnerability... Weiterlesen

CVE-2026-90183 | Linux Kernel up to 7.2.5 blk-iolatency iolatency_pd_free use_delay/congestion_count denial of service (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:03 +0100

A vulnerability identified as critical has been detected in Linux Kernel up to 7.2.5. The affected element is the function iolatency_pd_free of the component blk-iolatency. The manipulation of the argument use_delay/congestion_count leads to denial of service. This vulnerability is traded as CVE-2026-90183. It is possible to initiate the attack... Weiterlesen

CVE-2026-90186 | Linux Kernel up to 7.2.5 null_blk main.c nullb_update_nr_hw_queues null pointer dereference (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:03 +0100

A vulnerability was found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5 and classified as problematic. Affected by this issue is the function nullb_update_nr_hw_queues of the file drivers/block/null_blk/main.c of the component null_blk. The manipulation results in null pointer dereference. This vulnerability is cataloged as... Weiterlesen

CVE-2026-90185 | Linux Kernel up to 7.2.5 null_blk power_store race condition (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:03 +0100

A vulnerability has been found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5 and classified as critical. Affected by this vulnerability is the function power_store of the component null_blk. The manipulation leads to race condition. This vulnerability is listed as CVE-2026-90185. The attack must be carried out locally. There is no... Weiterlesen

CVE-2026-90187 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 null_blk null_del_dev memory leak (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:03 +0100

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. The impacted element is the function null_del_dev of the component null_blk. The manipulation results in memory leak. This vulnerability is known as CVE-2026-90187. Attacking locally is a requirement. No exploit is available. The affected component... Weiterlesen

CVE-2026-90188 | Linux Kernel up to 7.2.5 null_blk null_setup_tagset allocation of resources (WID-SEC-2026-3444)

Mon, 26 Oct 2026 05:18:02 +0100

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. This affects the function null_setup_tagset of the component null_blk. This manipulation causes allocation of resources. This vulnerability is handled as CVE-2026-90188. The attack can be initiated remotely. There is not any... Weiterlesen

CVE-2026-90189 | Linux Kernel up to 7.2.5 null_blk block/genhd.c null_init use after free (WID-SEC-2026-3444)