Copy Fail Linux Kernel Flaw Allows Local Users to Gain Root
Copy Fail (CVE-2026-31431) is a Linux kernel vulnerability that allows local unprivileged users to gain root access on affected systems.
Latest Linux and open source news from around the web
Copy Fail (CVE-2026-31431) is a Linux kernel vulnerability that allows local unprivileged users to gain root access on affected systems.
LibreOffice 26.2.3 arrives with over 40 fixes, improving stability across DOCX, PPTX, XLSX, Writer, Calc, and Impress.
Hyrum's Law states that any observable behavior of a system will eventually be depended upon by somebody. The kernel community is currently contending with a clear demonstration of that principle. The recent work to address some restartable-sequences performance problems in the 6.19 release maintained the documented API in all respects, but that was not enough; Google's TCMalloc library, as it turns out, violates the documented API, prevents other code from using restartable features, and breaks with 6.19. But the kernel's no-regressions rule is forcing developers to find a way to accommodate TCMalloc's behavior.
Version 16.1 of the GNU Compiler Collection (GCC) has been released. The C++ frontend now defaults to the GNU C++20 dialect and the corresponding parts of the standard library are no longer experimental. Several C++26 features receive experimental support, including Reflection (-freflection), Contracts, expansion statements and std::simd. Other changes include the introduction of an experimental compiler frontend for the Algol68 language, ability to output GCC diagnostics in HTML form, and more.
Greg Kroah-Hartman has released the 7.0.3, 6.18.26, 6.12.85, 6.6.137, 6.1.170, 5.15.204, and 5.10.254 stable kernels. The 7.0.3 and 6.18.26 kernels only contain fixes needed for Xen users; he advises that all users of the other kernel series must upgrade.
Security updates have been issued by AlmaLinux (buildah, firefox, gdk-pixbuf2, giflib, grafana, java-1.8.0-openjdk, java-21-openjdk, LibRaw, OpenEXR, PackageKit, pcs, python3.11, python3.12, python3.9, sudo, tigervnc, vim, xorg-x11-server, xorg-x11-server-Xwayland, yggdrasil, and yggdrasil-worker-package-manager), Debian (calibre, firefox-esr, and openjdk-17), Fedora (asterisk, binaryen, buildah, dokuwiki, lemonldap-ng, libexif, libgcrypt, miniupnpd, openvpn, podman, python3.9, rust-rpm-sequoia, skopeo, and xdg-dbus-proxy), Red Hat (buildah, gdk-pixbuf2, and nodejs:20), SUSE (dnsdist, libheif, openCryptoki, polkit, sed, and xen), and Ubuntu (linux-bluefield, python-marshmallow, and roundcube).
Due to Linux Mint moving to a longer development cycle with their next release not due until December, Linux Mint developers have decided to begin regularly publishing hardware enablement "HWE" ISOs with newer Linux kernel versions to provide better support for new hardware...
It's not too entirely surprising given the aggressive stance that the CachyOS Linux distribution has taken on out-of-the-box performance, but for those curious, it continues largely leading over the newly-released Ubuntu 26.04 LTS and Fedora Workstation 44 distributions for the leading performance on modern hardware.
AerynOS, the Linux distribution formerly known as Serpent OS, is out with a new monthly ISO refresh and details on other recent improvements to this original, from-scratch Linux distribution...
We take Fedoraβs newest weeklyβdistro pick for a spin to see how it handles realβworld browsing, office work, mediaβ¦ with a bit of gaming on the side. The post Fedora 44 Brings GNOME 50, KDE 6.6, and Better Gaming (With Screenshots) appeared first on FOSS Force.
Wireshark 4.6.5 network protocol analyzer fixes dozens of vulnerabilities, including crashes, infinite loops, and memory issues.
My initial testing of the Linux 7.1 development kernel on various systems in the lab continues going well. Aside from one main regression in a synthetic micro-benchmark appearing on multiple systems, not seeing much in the way of Linux 7.1 performance concerns thus far and seeing some nice performance gains in select workloads...
GCC 16.1 is now available as the first stable release of GCC 16 as this year's major open-source GNU compiler feature release...
There are two exciting initiatives taking place simultaneously by the 3mdeb consulting firm: the open-source developers are working on an open-source firmware stack for a Gigabyte EPYC server motherboard and they are also working on a similar Coreboot + AMD openSIL port to a Ryzen AM5 consumer motherboard, the MSI PRO B850-P WiFi. While not yet ready for end-users, 3mdeb published their latest blog post to highlight their latest milestone achieved with the openSIL + Coreboot bring-up on the MSI PRO B850-P motherboard...
Posted to the Linux kernel mailing list this week was the newest revision of a patch series originally started in early 2025 by a NVIDIA engineer for accelerating page migration. Now being worked on by AMD engineers, this accelerated page migration via batch copies and hardware offloading continues to show promising results...