Linux NewsAfter Copy Fail, Linux Now Faces Dirty Frag Privilege Flaw
Dirty Frag follows Copy Fail with a new Linux kernel local privilege escalation risk affecting major distributions and server environments.
killswitch for short-term emergency vulnerability mitigation
It seems that we are in for an extended period of the disclosure of vulnerabilities before fixes become available. One possible way of coping with this flood might be the killswitch proposal from Sasha Levin. In short, killswitch can immediately disable access to specific functionality in a running kernel, essentially blasting a vulnerable path (and its associated functionality) out of existence until a fix can be installed. "For most users, the cost of 'this socket family stops working for the day' is much smaller than the cost of running a known vulnerable kernel until the fix land."
Dirty Frag Linux Kernel Flaw Allows Local Privilege Escalation, Patch Now
A new Linux kernel security vulnerability, Dirty Frag, has been uncovered and allows a local user to escalate its privileges to gain root access.
[$] A 2026 DAMON update
The kernel's DAMON subsystem provides user-space monitoring and management of system memory. DAMON is developing rapidly, so an update on its progress has become a regular feature of the annual Linux Storage, Filesystem, Memory Management, and BPF Summit. This tradition continued at the 2026 gathering with an update from DAMON creator SeongJae Park covering a long list of new capabilities — tiering, data attributes monitoring, transparent huge pages, and more — being added to this subsystem.
Security updates for Friday
Security updates have been issued by AlmaLinux (libsoup and mingw-libtiff), Debian (apache2, chromium, lcms2, libreoffice, and prosody), Fedora (openssl and perl-Starman), Oracle (git-lfs, libsoup, and perl-XML-Parser), Slackware (libgpg, mozilla, and php), SUSE (389-ds, cairo, cf-cli, chromedriver, cri-tools, freeipmi, gnutls, grafana, java-11-openjdk, java-17-openjdk, jetty-minimal, libmariadbd-devel, librsvg, mesa, mozjs52, mutt, nix, opencryptoki, python-Django, python-django, python-pytest, rmt-server, thunderbird, traefik, webkit2gtk3, wireshark, and xen), and Ubuntu (civicrm, dpkg, htmlunit, lcms2, libpng1.6, linux, linux-*, linux-azure, linux-azure-fips, linux-raspi, linux-xilinx, lua5.1, nasm, opam, openexr, openjpeg2, owslib, postfix, postfixadmin, and vim).
HP Z6 G5 A Continues Working Out Well For Linux-Friendly, High-End Workstation
In late 2023 I reviewed the HP Z6 G5 A workstation that at the time was built around the AMD Ryzen Threadripper PRO 7000 series and NVIDIA RTX Ada Generation graphics. More recently, HP has revised the Z6 G5 A workstation for the latest Threadripper PRO 9000 series and NVIDIA RTX PRO Blackwell graphics. HP sent over the upgraded Z6 G5 A workstation that I've been benchmarking the past few weeks. This workstation remains Linux-friendly down to convenient LVFS/Fwupd support and delivers stellar performance with the Zen 5 Threadripper and NVIDIA Blackwell combination.
NVIDIA Releases CUDA-Oxide 0.1 For Experimental Rust-To-CUDA Compiler
A new NVIDIA Labs project is greatly improving the capabilities of using the Rust programming language for developing CUDA kernels for NVIDIA GPUs...
Four stable kernels with partial fixes for Dirty Frag
Greg Kroah-Hartman has announced the release of the 7.0.5, 6.18.28, 6.12.87, and 6.6.138 stable kernels. These kernels contain a partial fix for the Dirty Frag and Copy Fail 2 security flaws. Kroah-Hartman has confirmed that a second patch is required, but it is still in development and has not yet been merged.
DM-INLINECRYPT Expected For Linux 7.2 To Leverage Inline Encryption
Queued for merging as part of the DeviceMapper changes for the upcoming Linux 7.2 kernel cycle is the new dm-inlinecrypt target for leveraging inline block device encryption...
Qt Creator 20 Beta Expands AI Integration
The Qt Group released the Qt Creator 20 Beta today for this Qt/C++ focused integrated development environment (IDE). In building off the trends of recent releases of Qt Creator and development tools at large, AI integration continues to be a big area of focus...
OpenZL 0.2 Released For Meta's Content-Aware Compression Software
Last October engineers at Meta announced OpenZL as a format-aware compression framework. OpenZL aims to be speedy yet capable of delivering high compression ratios depending upon what is being compressed. OpenZL is viewed as their next leap in data compression beyond their wonderful work on Zstandard (Zstd). This week there's finally a new OpenZL software release available...
AMD's Local, Open-Source AI Can Now Easily Interact With Your Gmail
AMD software engineers continue rapidly advancing their open-source software efforts around local AI/LLM use on consumer-class Radeon and Ryzen hardware. AMD GAIA 0.17.6 was released on Thursday with more improvements for local AI processing on Windows, Linux, and even macOS. For those trusting enough in local LLM pipelines to do the right thing, there is even integration now for AMD GAIA to interface with your Gmail account...
Linux Erroneously Thinks Intel Bartlett Lake CPUs Run At 7GHz
With Intel's recently-launched Bartlett Lake P-core-only processors intended for the embedded market, there is a rather surprising oversight under Linux: the Intel P-State driver reporting a 7.0+ GHz clock speed. While many would yearn for a 7GHz CPU, the Core 9 273PE where this issue was discovered in reality can only boost up to 5.7GHz for its maximum turbo frequency...
Star Labs StarFighter Linux Laptop Finally Goes on Sale
Star Labs' StarFighter Linux laptop is now available with Intel and AMD options, coreboot firmware, LVFS updates, and a 16-inch display.
Ubuntu Snap Prompting Improvements
If you haven’t tried Ubuntu’s ‘Permission Prompting’ feature for a while, there’s more reason to do so in the latest release. Canonical’s Oliver Calder has shared an update on recent improvements to the security feature, which sets out to “empower users” by letting them decide what software can access on the rest of the system at runtime rather than retrospectively. Android or iOS show similar prompts, with screen modals asking if you want to “allow Acme App to access the camera” and similar. Ubuntu’s app prompting effort is still an ‘experimental’ feature in 26.04 LTS, but is now said to […]