Curated security research, vulnerabilities, advisories and tools for practitioners.

#linux

Security coverage tagged linux.

1.

IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years

vulnerability | High | 2026-07-07 00:00 | CVE-2026-43499 | nebusec.ai | original ↗ | #featured | #vulnerability-research | #container-security

2.

I handed the epoll UAF to an agent

blog | 2026-07-13 00:00 | CVE-2026-46242 | guysrd.github.io | original ↗ | #ai-security | #kernel-security | #linux

3.

mquire: Linux memory forensics without external dependencies

blog | 2026-02-25 12:00 | blog.trailofbits.com | original ↗ | #open-source | #incident-response | #linux

4.

Why I’m Finally Ditching YUM for DNF in 2026 (And You Should, Too)

blog | 2026-02-19 19:15 | jfrog.com | original ↗ | #linux | #jfrog | #package-management

5.

suForce: Linux Local Account Password Brute-Forcing Tool via 'su'

tool | 2025-03-24 09:22 | github.com | original ↗ | #linux | #red-team

6.

Caido 🤝 Parrot

blog | 2025-01-17 00:00 | caido.io | original ↗ | #pentesting | #linux | #caido

7.

Unpacking Diicot - Evolving Campaign Targeting Linux Environments

blog | 2024-12-17 17:31 | wiz.io | original ↗ | #cloud | #cloud-security | #malware

8.

OtterRoot: Netfilter universal root 1-day

vulnerability | 2024-11-25 00:00 | CVE-2024-26809 | osec.io | original ↗ | #linux | #privilege-escalation | #kernel

9.

CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177: Everything you need to know

vulnerability | 2024-09-29 17:00 | wiz.io | original ↗ | #cloud | #rce | #linux

10.

RCE vulnerability in OpenSSH: everything you need to know

vulnerability | 2024-07-01 13:49 | CVE-2024-6387 | wiz.io | original ↗ | #rce | #linux | #vulnerability

11.

Expanding coverage with Linux runtime

blog | 2024-04-18 09:02 | wiz.io | original ↗ | #cloud | #cloud-security | #kubernetes

12.

In Plain Sight: Uncovering SuperShell & Cobalt Strike from an Open Directory

blog | 2024-04-16 00:00 | hunt.io | original ↗ | #linux | #c2 | #cobalt-strike

13.

XZ Utils CVE-2024-3094: A Tale of Broken Trust, Curious Persistence, and a Call to Action

vulnerability | 2024-04-01 16:00 | CVE-2024-3094 | hackerone.com | original ↗ | #supply-chain | #open-source | #linux

14.

Defense in depth: XZ Utils

blog | 2024-04-03 17:33 | wiz.io | original ↗ | #supply-chain | #linux | #xz-utils

15.

Out of the kernel, into the tokens

vulnerability | 2024-03-08 14:00 | blog.trailofbits.com | original ↗ | #linux | #jwt | #vulnerability-disclosure

16.

Why Windows can’t follow WSL symlinks

blog | 2024-02-12 14:30 | blog.trailofbits.com | original ↗ | #linux | #windows | #reverse-engineering

17.

Unveiling eBPF: Harnessing Its Power to Solve Real-World Issues

blog | 2023-11-19 22:06 | wiz.io | original ↗ | #rce | #kubernetes | #threat-detection

18.

Linux rootkits explained – Part 2: Loadable kernel modules

blog | 2023-10-24 17:52 | wiz.io | original ↗ | #cloud-security | #malware | #linux

19.

Unveiling eBPF: Revolutionizing Security and Observability

blog | 2023-09-27 17:00 | wiz.io | original ↗ | #cloud | #cloud-security | #linux

20.

Pitfalls of relying on eBPF for security monitoring (and some solutions)

blog | 2023-09-25 11:00 | blog.trailofbits.com | original ↗ | #linux | #kernel | #ebpf

21.

Use our suite of eBPF libraries

blog | 2023-08-09 10:45 | blog.trailofbits.com | original ↗ | #open-source | #linux | #kernel

22.

Readline crime: exploiting a SUID logic bug

blog | 2023-02-16 13:00 | blog.trailofbits.com | original ↗ | #linux | #privilege-escalation | #exploit

23.

Digging into the OCI Image Specification

research | 2022-11-23 23:00 | blog.quarkslab.com | original ↗ | #linux | #containers | #oci

24.

Defeating eBPF Uprobe Monitoring

research | 2022-08-29 22:00 | blog.quarkslab.com | original ↗ | #cloud | #linux | #exploitation

25.

Digging Into Runtimes – runc

research | 2022-05-09 22:00 | blog.quarkslab.com | original ↗ | #linux | #containers | #oci

26.

Kali Unkaputtbar

blog | 2022-03-10 00:00 | kali.org | original ↗ | #linux | #kali-linux | #btrfs

27.

Kubernetes and HostPath, a Love-Hate Relationship

research | 2022-03-02 23:00 | blog.quarkslab.com | original ↗ | #kubernetes | #linux | #vulnerability

28.

Why is Exposing the Docker Socket a Really Bad Idea?

research | 2021-12-13 23:00 | blog.quarkslab.com | original ↗ | #linux | #privilege-escalation | #containers

29.

Digging into Linux namespaces - part 2

research | 2021-11-17 23:00 | blog.quarkslab.com | original ↗ | #linux | #containers | #kernel

30.

Digging into Linux namespaces - part 1

research | 2021-11-15 23:00 | blog.quarkslab.com | original ↗ | #linux | #containers | #kernel