Linux NewsMozilla Firefox 156.0.1 Is Now Available for Download with Various Bug Fixes
Mozilla Firefox 156.0.1 open-source web browser is now available for download with various bug fixes and improvements for all supported platforms.
Ubuntu Container Escape Vulnerability Gets Public Exploit Before Kernel Patch Arrives
by George Whittaker Ubuntu administrators running containerized workloads have a new Linux kernel security problem to watch closely. Public exploit code is now available for CVE-2026-80521, a Linux kernel use-after-free vulnerability that can allow an unprivileged process inside a container to escape and obtain root privileges on the underlying host. Security firm DepthFirst published its research and exploit on September 22, 2026, demonstrating the attack against Ubuntu 26.04 LTS. The underlying Linux kernel vulnerability had already been fixed upstream on August 6, but as of September 23, Ubuntu's security tracker still lists the main kernel package in Ubuntu 26.04 LTS as "Vulnerable, work in progress," while Ubuntu 24.04 LTS is also listed as vulnerable. The situation is particularly important for Docker, Kubernetes, cloud infrastructure, and other environments that run potentially untrusted workloads because the vulnerable kernel functionality can be reached through ordinary operat
NetBSD 10.2 Released With New Hardware Support and Security Fixes
NetBSD 10.2 is out as the second point release in the 10.x stable series, adding new Ethernet, VMware, ARM, and security improvements.
[$] Compiling the kernel with gccrs
Pierre-Emmanuel Patry and Arthur Cohen gave a talk at RustConf 2026 on the status of the Rust frontend for GCC (gccrs), with a particular eye toward the goal of compiling the Linux kernel. Patry gave a follow-up talk for a more kernel-focused audience at Kangrejos the next week, which Cohen could not attend. The gccrs project is making good progress overall, but it will still be some time until the compiler is usable.
Linux 7.2 vs. Linux 7.3 Shows A Few Improvements With AMD Strix Halo
Last week I ran some benchmarks showing performance gains for AMD Ryzen AI Max+ "Strix Halo" on Ubuntu 26.10. Then shortly after that testing on its daily state, which used the Linux 7.2 kernel, Canonical switched to Linux 7.3 as the Ubuntu 26.10 kernel. Here are some Linux 7.2 vs. Linux 7.3 benchmarks for the AMD Ryzen AI Max+ 395 "Strix Halo" with the Framework Desktop...
Security updates for Tuesday
Security updates have been issued by AlmaLinux (apr-util, corosync, curl, freerdp, gstreamer1-plugins-base, libarchive, libtiff, libxml2, openexr, openssh, rsyslog, sudo, tomcat, unbound, webkit2gtk3, yggdrasil, and yggdrasil-worker-package-manager), Debian (chromium), Fedora (alsa-plugins, amarok, aqualung, atomes, attract-mode, audacious-plugins, audacity, baresip, blender, calibre, cantata, cef, chromaprint, chromium, digikam, doctl, dragon, ffmpeg, ffmpegthumbnailer, ffmpegthumbs, ffms2, fooyin, glaxnimate, goldendict-ng, gpac, gstreamer1-plugin-libav, guacamole-server, guvcview, haruna, hedgewars, icecat, janus, k3b, kdenlive, kf5-kfilemetadata, kf6-kfilemetadata, kpipewire, lazygal, lego, libcamera-apps, libheif, libopenshot, libopenshot-audio, libvncserver, localsearch, mat2, minidlna, mivisionx, mixxx, mlt, monado, mpd, mpv, mpv-mpris, neatvnc, notcurses, nv-codec-headers13.0, obs-studio, obs-studio-plugin-droidcam, obs-studio-plugin-pwvideo, obs-studio-plugin-vaapi, obs-studio
18 Programming eBooks, 1 Bundle, and Your Purchase Also Fights Surveillance
DRM-free ebooks on programming from the prestigious No Starch Press. Part of your purchase gets donated to EFF.
Giada 1.6 Loop Machine Adds Time-Stretching Playback Mode for Sample Channels
Giada 1.6 open-source minimalistic and hardcore music production software has been released today as a major update that introduces several new features and improvements.
Ubuntu Linux Maker Canonical Achieved $345M USD In Revenue For 2025
In 2024 Canonical generated nearly $300M USD in revenue for this company behind Ubuntu Linux and other services and software solutions. For 2025, they not only broke $300M but well exceeded it with $345M in revenue...
Systemd 262 Released With Static PID 1 Builds and Better Container, TPM, and VM Support
Systemd 262 is now available with static PID 1 builds for small containers, Intel TDX support, TPM improvements, and updated service management features.
Linux has a price, it's just not money
Freedom isn't free.
Steam Tests New Pyrowave Codec on Linux and SteamOS
Valve is testing Pyrowave, a new low-latency Steam Remote Play codec available on Linux and SteamOS through the experimental SteamRT3 client.
Flatpak 1.18.3 Released With Security and Regression Fixes
Flatpak 1.18.3 is out with updated Bubblewrap and xdg-dbus-proxy components, plus fixes for regressions introduced in version 1.18.2.
Flatpak 1.18.3 Fixes Subsandbox Startup and Updates Meson Wrap Subprojects
Flatpak 1.18.3 Linux application sandboxing and distribution framework is now available for download with various bug and crash fixes for the stable Flatpak 1.18 series.
Variable Refresh Rate "VRR" Target Limiter Proposed For Linux Graphics Drivers
A new proposal being discussed is introducing a Linux user-space API to be able to specify frame rate targets for Variable Refresh Rate (VRR) handling on the Linux desktop...