Fragnesia Is Yet Another Local Privilege Escalation Flaw in Linux Kernel
Fragnesia is a new local privilege escalation flaw in the Linux kernel that may lead to local privilege escalation. Patch now!
Latest Linux and open source news from around the web
Fragnesia is a new local privilege escalation flaw in the Linux kernel that may lead to local privilege escalation. Patch now!
Sent out on Wednesday was the latest AMDGPU/AMDKFD driver pull request of new feature code ready for DRM-Next as the staging area ahead of the upcoming Linux 7.2 kernel. This doesn't yet land the HDMI 2.1 enablement work that's finally been taking place but it is preparing for that with the FRL register headers now in place as part of this merge...
Introduced to the Linux kernel last year was Control-flow Enforcement Technology "CET" virtualization for modern AMD and Intel CPUs. This complements CET that has existed in Linux for quite some time but it's new now to the KVM virtualization world, but some yet to be diagnosed problems are causing some hosts to hang when making use of this virtualization security feature...
Inside this week's LWN.net Weekly Edition: Front: Fedora AI; Forgejo "carrot" disclosure; memory-management maintainership; huge THPs; mshare; 64KB base pages; DAMON; direct map. Briefs: Dirty Frag; Fragnesia; Mythos and curl; killswitch; Debian reproducible builds; KDE investment; Quotes ... Announcements: Newsletters, conferences, security updates, patches, and more.
PipeWire 1.6.5 audio/video server for Linux is now available for download with extra security checks and hardening fixes, removal of the pipe filter in filter-graph, and various bug fixes.
Timur Kristóf of Valve's Linux open-source graphics driver team isn't done driving new improvements to aging AMD GCN 1.0/1.1 era graphics cards on Linux. Beyond enhancing display support for older APUs, transitioning GCN 1.0/1 GPUs from the legacy Radeon driver to modern AMDGPU driver, and a host of other fixes and optimizations for these old GPUs going back to the Radeon HD 7000 series, he has another notable addition that was announced today. These original GCN graphics cards with pending patches to the AMDGPU kernel driver and Mesa user-space can now allow for DRM format modifiers...
The PanVK Vulkan driver and Panfrost Gallium3D driver for Arm Mali graphics hardware is now supporting the latest "v14" hardware GPU hardware with the Arm Mali G1-Pro now being advertised as supported...
Nginx 1.31 introduces HTTP forward proxy support and addresses security vulnerabilities in HTTP/2, HTTP/3, OCSP, and core modules.
Fedora Hummingbird ships the entire OS as a bootable OCI image with atomic updates and rollback support.
A proposed scheduler update shows frame time improvements on aging hardware under heavy CPU load.
Fragnesia exposes another Linux kernel page-cache attack path, allowing local root escalation through ESP handling.
Two kernel zero‑day fixes, two quick Tails releases, and one Tor‑backed project determined to keep its privacy‑minded users safe — this is open source security hygiene in action. The post Dirty Frag, Copy Fail, and How Tails Under Tor Delivers ‘Open Source Done Right’ appeared first on FOSS Force.
PipeWire 1.6.5 fixes muted audio output issues, improves jack detection behavior, and adds more PulseAudio server hardening.
A push by Red Hat employees to create a Fedora "AI Developer Desktop" with support for out-of-tree kernel drivers and AI toolkits has been met with objections from some long-time members of the Fedora community. After more than a month of sometimes heated discussion, the Fedora Council had voted to approve the initiative; however, a last-minute change to vote against the proposal by council member Justin Wheeler has (at least temporarily) sent it back to the drawing board.
With new data types, improved imports, error bars, and UI tweaks, Graphs 2.0 beta aims to become the go-to plotting tool for serious Linux data work. The post Graphs 2.0 Beta Brings Serious Plotting Power to the Linux Desktop appeared first on FOSS Force.