Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Security Vulnerabilities 
cisa kev vulnerability prioritization
cisa kev vulnerability prioritization Most Linux teams don't struggle to find vulnerabilities anymore. They struggle to decide which ones deserve attention first. Between daily scanner results, vendor advisories, and hundreds of new CVEs each month, the challenge isn't visibility—it's prioritization. . To solve this, organizations typically lean on the National Vulnerability Database (NVD) and CISA’s Known Exploited Vulnerabilities Catalog. But these aren’t competing lists. They answer two entirely different questions. While the...
Jul 22, 2026
Desktop Securitysecurity advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 12 articles for you...
210
security advisorylocal privilege escalationheap overflowXOrg Server and Xwayland Critical Update: Addressing Security Flaws
Multiple security vulnerabilities have recently been discovered in the XOrg Server prior to 21.1.11, and Xwayland display implementations prior to 23.2.4. These vulnerabilities could potentially result in heap overflows, out-of-bounds writes, and local privilege escalation, potentially enabling attackers to view additional infrastructure to attack, add or delete users, or modify permissions of files or other users. . The xorg-server v21.1.11 and xwayland v23.2.4 have been released to address these issues. It was recently discovered that the fix for these vulnerabilities was incomplete, resulting in a possible regression. Updates have now been released to fix this issue. What Are The Implications of These Flaws? How Can I Mitigate My Risk? These issues are an important warning to Linux admins, infosec professionals, internet security enthusiasts, and sysadmins, urging them to take immediate action to protect their systems. The potential consequences of ignoring these vulnerabilities could be severe, ranging from unauthorized access to system compromise. The fact that some of these vulnerabilities have remained unpatched for several years raises concerns about the overall security of the X server. Switching to Wayland instead of relying on the X server may be beneficial for admins, as the X server remains unpatched against many security vulnerabilities , facilitating the need for the migration to a more secure alternative. This raises the question of whether the open-source community should shift its focus toward Wayland and encourage Linux distribution maintainers to make it the default display server. Even if a Linux distribution already uses Wayland by default, the Xwayland implementation is likely still in use for compatibility with X11 apps. This highlights the importance of ensuring that systems are updated with the latest version and patched against these vulnerabilities . The impact of failing to do so could be significant, as any breach in the Xwayland implementation couldpotentially compromise the security-conscious infrastructure. The implications of these security vulnerabilities extend beyond immediate patches. It prompts reflection on the open-source community's approach to security, raising questions about the overall effectiveness of the current security practices. How can future vulnerabilities be prevented or detected earlier? We'd like to see increased scrutiny of the codebase by the community and regular security audits to identify and patch potential vulnerabilities. Our Final Thoughts on The Impact & Implications of These Bugs In conclusion, these vulnerabilities are a stern reminder for Linux admins, infosec professionals, internet security enthusiasts, and sysadmins to prioritize patching the XOrg Server and Xwayland vulnerabilities. The long-term consequences of any compromises could be severe, necessitating a proactive approach to ensure system integrity. We encourage a critical examination of current security practices, potentially paving the way for a broader discussion on the future of display servers in the Linux ecosystem. Above all, security practitioners must stay informed about vulnerabilities, their impact, and effective mitigation strategies by subscribing to industry newsletters like our Linux Advisory Watch . Stay safe out there, fellow Linux users! . Recent advancements in xorg-server and xwayland address significant security gaps, enhancing overall system integrity and robustness.. XOrg Security,Xwayland Update,Linux Admin Practices,System Compromise Prevention,Open Source Security. . Anthony Pell
Feb 17, 2024
•
Security Vulnerabilities
210
security advisorycriticalremote code executionFirefox and Thunderbird Critical Advisory: Remote Execution Risk
A critical zero-day vulnerability that has been exploited in the wild was discovered in Firefox and Thunderbird. This severe bug, CVE-2023-4863 , is a heap buffer overflow flaw in the WebP image format. . This flaw could allow a remote attacker to execute arbitrary code when processing a specially crafted image. Mozilla has released essential updates for Firefox and Thunderbird that mitigate this critical issue. We strongly recommend that all impacted users apply the Firefox and Thunderbird updates released by their distro(s) immediately to protect against exploits leading to crashes and system compromise. To stay on top of essential updates released by the open-source programs and applications you use, register as a LinuxSecurity user , subscribe to our Linux Advisory Watch newsletter, and customize your advisories for your distro(s). This will enable you to stay up-to-date on the latest, most significant issues impacting the security of your systems. Follow @LS_Advisories on Twitter for real-time updates on advisories for your distro(s) . . Severe vulnerability discovered in Firefox and Thunderbird exposes systems to remote code execution risks. Update immediately!. critical vulnerability, firefox update, thunderbird patch, remote execution flaw. . Brittany Day
Oct 05, 2023
•
Security Vulnerabilities
83
security issueadvisoryheap overflowVMware ESXi 8.8 Critical: Heap Overflow Risk From Ransomware Surge
An explosion of cyberattacks is infecting servers around the world with crippling ransomware by exploiting a vulnerability that was patched two years ago. . The hacks exploit a flaw in ESXi, a hypervisor VMware sells to cloud hosts and other large-scale enterprises to consolidate their hardware resources. ESXi is what’s known as a bare-metal, or Type 1, hypervisor, meaning it’s essentially its own operating system that runs directly on server hardware. By contrast, servers running the more familiar Type 2 class of hypervisors, such as Oracle’s VirtualBox, run as apps on top of a host operating system. The Type 2 hypervisors then run virtual machines that host their own guest OSes, such as Windows, Linux, or, less commonly, macOS. Advisories published recently by computer emergency response teams (CERT) in Italy, and Austria report a “massive” campaign that began no later than Friday and has gained momentum since then. Citing results of a search on Census, CERT officials in Austria, said that as of Sunday, there were more than 3,200 infected servers, including eight in that country. “Since ESXi servers provide a large number of systems as virtual machines (VM), a multiple of this number of affected individual systems can be expected,” the officials wrote. The vulnerability being exploited to infect the servers is CVE-2021-21974 , which stems from a heap-based buffer overflow in OpenSLP, an open network-discovery standard that’s incorporated into ESXi. When VMware patched the vulnerability in February 2021, the company warned it could be exploited by a malicious actor with access to the same network segment over port 427. The vulnerability had a severity rating of 8.8 out of a possible 10. Proof-of-concept exploit code and instructions for using it became available a few months later. . Malicious actors are taking advantage of a vulnerability in VMware's ESXi, resulting in widespread server compromises.. ESXi Exploit, Cyberattack Mitigation, RansomwareResponse. . LinuxSecurity.com Team
Feb 22, 2023
•
Hacks/Cracks
210
security advisorycriticallocal privilege escalationLinux IPSec Bug Fix - Critical Heap Overflow Threat Resolved
An obnoxious security bug discovered in Linux's IPSec secure networking program has now been fixed. . Nothing is quite as vexing as a security hole in a security program. Xiaochen Zou, a graduate student at the University of California, Riverside, went looking for bugs in Linux and found a whopper. This vulnerability, CVE-2022-27666 , in IPSec 's esp6 (Encapsulating Security Payload) crypto module can be abused for local privilege escalation. The problem is your basic heap overflow hole. Xiaochen explained that "the basic logic of this vulnerability is that the receiving buffer of a user message in esp6 module is an 8-page buffer, but the sender can send a message larger than 8 pages, which clearly creates a buffer overflow." Yes, yes it will. . A significant vulnerability in Linux's IPSec framework has been detected and patched. Explore the specifics of this flaw and the implemented solution.. Linux IPSec fix, Privilege Escalation Bug, Heap Overflow Security Fix. . Brittany Day
Apr 04, 2022
•
Security Vulnerabilities
210
security advisorypatch releaseheap overflowHeap Overflow Vulnerability in Linux Kernel Resolved and Patched
A heap overflow bug was recently discovered in the Linux kernel. The patch is available now in most major Linux distributions. . Most reported Linux "security" bugs actually aren't Linux bugs. For example, security vendor CrowdStrike 's report on the biggest Linux-based malware families was really about system administration security blunders with telnet, SSH, and Docker, not Linux at all. But, that doesn't mean Linux doesn't have security holes. For example, a new nasty Linux kernel problem has just popped up. In this one, there's a heap overflow bug in the legacy_parse_param in the Linux kernel's fs/fs_context.c program. This parameter is used in Linux filesystems during superblock creation for mount and superblock reconfiguration for a remount. The superblock records all of a filesystem's characteristics such as file size, block size, empty and filled storage blocks. So, yeah, it's important. . Developers have fixed a severe heap overflow vulnerability in the Linux kernel, deploying patches across major distributions. Uncover more details about this update. Heap Overflow, Linux Kernel Bug, Patch Release. . Brittany Day
Jan 21, 2022
•
Security Vulnerabilities
210
security advisorysecurity fixzero-dayChrome 90.0.4430.85 Advisory Critical: Zero-Day Patch and Security Fixes
Google has released version 90.0.4430.85 of the Chrome browser with seven security fixes, including one for a zero-day vulnerability that was exploited in the wild. . Google on Wednesday released version 90.0.4430.85 of the Chrome browser for Windows, Mac, and Linux. The release contains seven security fixes, including one for a zero-day vulnerability that was exploited in the wild. The zero-day, which was assigned the identifier of CVE-2021-21224, was described as a "type confusion in V8". In an advisory penned by Chrome technical program manager Srinivas Sista, five vulnerabilities were detailed: CVE-2021-21222 heap buffer overflow in V8, CVE-2021-21223 integer overflow in Mojo, CVE-2021-21225 out of bounds memory access in V8, CVE-2021-21226 use after free in navigation, and CVE-2021-21224 type confusion in V8. . Mozilla released Firefox version 88.0.1, addressing five security issues, among them a patch for a critical vulnerability.. Chrome Update, Security Patch, Zero-Day Vulnerability. . Brittany Day
Apr 21, 2021
•
Security Vulnerabilities
210
security advisorycriticalheap overflowCritical Sudo Heap Overflow Vulnerability CVE-2021-3156 in Linux
Like any OS, Linux and Unix OSes require regular patching - but as security professionals, ethical hackers, and criminal hackers will tell you, regular Linux and Unix patching is often neglected. Learn about a new critical rated Linux\Unix vulnerability you can't afford to ignore. . Last week (26th January 2021) a new critical rated Linux\Unix vulnerability was made public under CVE-2021-3156 . Specifically, the vulnerability is within the ‘sudo’ program, which is an abbreviation of ‘superuser do‘, well that’s how I remember it. Sudo is a powerful and fundamental program found within all Linux and Unix distributions, allowing users to execute programs with the security privileges of another user. A typical use of sudo is where you need to run a program with privilege level (i.e. administrator) access rights. The sudo ‘heap overflow’ vulnerability was discovered by Qualys researchers, the exploit allows any unprivileged user to gain root level (i.e. administrative) privileges. Qualys has posted a blog and video which explains and demonstrates the exploitation technique, which as exploits go is fairly quick and easy to do. See CVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit) | Qualys Security Blog The link for this article located at Security Boulevard is no longer available. . A serious vulnerability in the sudo command on Linux and Unix systems enables non-privileged users to obtain root-level permissions. Take immediate action!. Sudo Flaw, Heap Overflow, User Privilege Escalation. . Brittany Day
Feb 08, 2021
•
Security Vulnerabilities
210
security advisorycriticalpatchLinux Chrome 88.0.4324.150: Critical Heap Overflow Threat
Google has patched a zero-day vulnerability in its widely used Chrome web browser for desktop that it reports is being actively exploited in the wild. Patches have been release for Linux, Windows and Mac - update immediately! . The company released 88.0.4324.150 for Windows, Mac, and Linux, with a fix for a heap buffer overflow flaw (CVE-2021-21148) in its V8 JavaScript rendering engine. "Google is aware of reports that an exploit for CVE-2021-21148 exists in the wild," the company said in a statement. The link for this article located at The Hacker News is no longer available. . Mozilla has issued updates for Firefox 92.0.1 across various systems to address a significant memory corruption vulnerability.. Chrome Update, Zero-Day Patch, Browser Security, Heap Overflow Fix, Linux Browser. . Brittany Day
Feb 05, 2021
•
Security Vulnerabilities
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!