Curated security research, vulnerabilities, advisories and tools for practitioners.

#linux

Security coverage tagged linux.

1.

cowcups: CUPS cups-fontpath Local Privilege Escalation (LPE) to Root PoC

vulnerability | High | 2026-10-24 18:13 | codeberg.org | Original ↗ | .md | #linux | #privilege-escalation | #red-team

2.

Kali Linux 2026.3 Release (Build-Scripts Refresh)

blog | 2026-10-26 00:00 | kali.org | Original ↗ | .md | #linux | #kali-linux

3.

gpu-unlock-ada: Linux Kernel Module Unlocking Tensor Core Limits on RTX 40-Series GPUs

tool | 2026-10-23 21:00 | github.com | Original ↗ | .md | #ai-security | #github | #hardware-security

4.

Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research

research | 2026-10-16 15:36 | github.com | Original ↗ | .md | #linux | #privilege-escalation | #android

5.

Linux LPE Toolkit: Multi-Architecture Automated Privilege Escalation Tool

tool | 2026-09-23 20:28 | github.com | Original ↗ | .md | #linux | #privilege-escalation | #lpe

6.

Linux Container Escape PoCs for CVE-2026-52910 & CVE-2026-80521

tool | 2026-09-16 21:04 | github.com | Original ↗ | .md | #linux | #privilege-escalation | #red-team

7.

[CVE-2009-2854] The WordPress Chain Massacre

research | 2026-08-05 00:00 | CVE-2009-2854 | calif.io | Original ↗ | .md | #vulnerability-research | #linux | #web-security

8.

IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years

vulnerability | High | 2026-07-07 00:00 | CVE-2026-43499 | nebusec.ai | Original ↗ | .md | #featured | #vulnerability-research | #container-security

9.

I handed the epoll UAF to an agent

blog | 2026-07-13 00:00 | CVE-2026-46242 | guysrd.github.io | Original ↗ | .md | #ai-security | #kernel-security | #linux

10.

Old Wine in a New Bottle: A Decade-Old lxd-Group Root, Re-Armed

research | 2026-06-09 00:00 | starlabs.sg | Original ↗ | .md | #vulnerability-research | #linux | #privilege-escalation

11.

A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets

vulnerability | 2026-03-03 00:00 | CVE-2025-38617 | calif.io | Original ↗ | .md | #vulnerability-research | #linux | #exploitation

12.

mquire: Linux memory forensics without external dependencies

blog | 2026-02-25 12:00 | blog.trailofbits.com | Original ↗ | .md | #open-source | #incident-response | #linux

13.

Why I’m Finally Ditching YUM for DNF in 2026 (And You Should, Too)

blog | 2026-02-19 19:15 | jfrog.com | Original ↗ | .md | #linux | #jfrog | #package-management

14.

[CVE-2025-38236] From Chrome renderer code exec to kernel with MSG_OOB

vulnerability | 2025-08-08 00:00 | CVE-2025-38236 | projectzero.google | Original ↗ | .md | #linux | #privilege-escalation | #exploit

15.

suForce: Linux Local Account Password Brute-Forcing Tool via 'su'

tool | 2025-03-24 09:22 | github.com | Original ↗ | .md | #linux | #red-team | #post-exploitation

16.

Caido 🤝 Parrot

blog | 2025-01-17 00:00 | caido.io | Original ↗ | .md | #pentesting | #linux | #caido

17.

Unpacking Diicot - Evolving Campaign Targeting Linux Environments

blog | 2024-12-17 17:31 | wiz.io | Original ↗ | .md | #cloud | #cloud-security | #malware

18.

OtterRoot: Netfilter universal root 1-day

vulnerability | 2024-11-25 00:00 | CVE-2024-26809 | osec.io | Original ↗ | .md | #linux | #privilege-escalation | #kernel

19.

CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177: Everything you need to know

vulnerability | 2024-09-29 17:00 | wiz.io | Original ↗ | .md | #cloud | #rce | #linux

20.

Impact Analysis: regreSSHion OpenSSH Vulnerability (CVE-2024-6387)

vulnerability | 2024-07-02 00:00 | CVE-2024-6387 | netspi.com | Original ↗ | .md | #rce | #vulnerability-management | #linux

21.

Expanding coverage with Linux runtime

blog | 2024-04-18 09:02 | wiz.io | Original ↗ | .md | #cloud | #cloud-security | #kubernetes

22.

In Plain Sight: Uncovering SuperShell & Cobalt Strike from an Open Directory

blog | 2024-04-16 00:00 | hunt.io | Original ↗ | .md | #linux | #c2 | #cobalt-strike

23.

XZ Utils CVE-2024-3094: A Tale of Broken Trust, Curious Persistence, and a Call to Action

vulnerability | 2024-04-01 16:00 | CVE-2024-3094 | hackerone.com | Original ↗ | .md | #supply-chain | #open-source | #linux

24.

Defense in depth: XZ Utils

blog | 2024-04-03 17:33 | wiz.io | Original ↗ | .md | #supply-chain | #linux | #xz-utils

25.

Out of the kernel, into the tokens

vulnerability | 2024-03-08 14:00 | blog.trailofbits.com | Original ↗ | .md | #linux | #jwt | #vulnerability-disclosure

26.

Why Windows can’t follow WSL symlinks

blog | 2024-02-12 14:30 | blog.trailofbits.com | Original ↗ | .md | #linux | #windows | #reverse-engineering

27.

Unveiling eBPF: Harnessing Its Power to Solve Real-World Issues

blog | 2023-11-19 22:06 | wiz.io | Original ↗ | .md | #rce | #kubernetes | #threat-detection

28.

Linux rootkits explained – Part 2: Loadable kernel modules

blog | 2023-10-24 17:52 | wiz.io | Original ↗ | .md | #cloud-security | #malware | #linux

29.

Getting Started with ProjectDiscovery in Linux and Windows

blog | 2023-09-27 19:00 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #linux | #windows

30.

Unveiling eBPF: Revolutionizing Security and Observability

blog | 2023-09-27 17:00 | wiz.io | Original ↗ | .md | #cloud | #cloud-security | #linux