Latest Linux and open source news from around the web
A trusted Debian dev turns scary new kernel bugs into a temporary two‑click fix until distros ship permanent patches. The post A Simple One Click Mitigation for ‘Copy Fail’ and ‘Dirty Frag’ for Debian, Ubuntu, Mint, and Other Debian‑Based Distros appeared first on FOSS Force.
KDE developers continue to be quite busy in preparing additional Plasma 6.7 desktop features ahead of the stable release due out in mid-June...
It's a more 'reliable' exploit than most.
Linux kernel developers are reviewing a killswitch proposal that can disable vulnerable functions after recent CVE disclosures.
FreeBSD 15.1 continues working its way toward a stable release in June. Out today is FreeBSD 15.1 Beta 2...
Greg Kroah-Hartman has released the 6.1.171, 5.15.205, and 5.10.255 stable kernels, quickly followed by 6.1.172 and 5.15.206 kernels. This is another round of stable kernels to provide fixes for one of the CVEs (CVE-2026-43284) assigned following the Dirty Frag and Copy Fail 2 security disclosures. There is not, yet, a stable kernel with a fix for CVE-2026-43500, though a patch to fix the second half is in the works.
An unusual, some might say hostile, approach to disclosing an alleged remote-code-execution (RCE) flaw in the Forgejo software-collaboration platform has sparked a multifaceted conversation. A so-called "carrot disclosure" in April has raised questions about the researcher's methods of unveiling a security problem, Forgejo's security policies, and the project's overall security posture.
The best Linux discoveries aren't the ones you went looking for—they're the ones you find on a slow Saturday afternoon.
TUXEDO BM15 is a repairable Linux business laptop with smart card authentication, optional 4G LTE, and upgradeable RAM and storage.
KDE Frameworks 6.26 open-source software suite is out now with various improvements and bug fixes for KDE apps and the Plasma desktop environment. Here’s what’s new!
KDE Frameworks 6.26 is out with updates across KIO, Baloo, Kirigami, KCalendarCore, KImageformats, and more.
TUXEDO BM 15 is now available for pre-order as an upgradable business Linux laptop powered by an Intel Core i5 120U, up to 64GB RAM, up to 8 TB SSD, and 4G LTE support.
Dirty Frag follows Copy Fail with a new Linux kernel local privilege escalation risk affecting major distributions and server environments.
It seems that we are in for an extended period of the disclosure of vulnerabilities before fixes become available. One possible way of coping with this flood might be the killswitch proposal from Sasha Levin. In short, killswitch can immediately disable access to specific functionality in a running kernel, essentially blasting a vulnerable path (and its associated functionality) out of existence until a fix can be installed. "For most users, the cost of 'this socket family stops working for the day' is much smaller than the cost of running a known vulnerable kernel until the fix land."
A new Linux kernel security vulnerability, Dirty Frag, has been uncovered and allows a local user to escalate its privileges to gain root access.
Linux News