Tag archive
SparkyOS 2026.10 is an Arch Linux-based system designed to run entirely from USB while retaining files, settings and installed applications on the drive. T
Interpreting ZoomEye results for CVE-2025-38680, including why a large Linux host count is not an affected-asset count.
Linux kernel contributors are debating whether to remove the “Assisted-by: LLM” tag from AI-assisted patches. The label was introduced to help maintainers
CVE-2026-80521 is a use-after-free in the Linux AF_UNIX subsystem that lets an unprivileged container process reach the host, and the default seccomp profile permits the syscall it needs.
A tiering model for prioritising CVE-2025-38680 remediation across a mixed Linux fleet.
A metric-by-metric reading of the CVSS 3.1 vector assigned to CVE-2025-38680.
A host that answers on no port while the kernel keeps logging is not failing memory. In OpenZFS before 2.4.4 and 2.3.9, zfs_fillpage() computes io_len = i_size - io_off in unsigned types: race an mmap read against an in-place truncate and the length
CVE-2026-43502 (ZcopyReaper) is a local privilege escalation in the Linux kernel RDS zerocopy send path. Patching requires a reboot, and disabling RDS helps where it is unused.
Technical deep-dive on Extended Berkeley Packet Filter (eBPF) tracing, kprobes, tracepoints, bpftrace, and zero-overhead kernel runtime security monitoring.
Hardening guide for tuning Linux kernel sysctl parameters to defend against TCP SYN floods, IP spoofing, packet redirects, and memory exhaustion.
Technical guide for writing eBPF eXpress Data Path (XDP) kernel programs to drop malicious DDoS traffic at the network driver level.
Recently, I got interested in custom Linux image creation and wanted to look into a few popular build...