Please turn JavaScript on
LinuxSecurity - Security Articles icon

LinuxSecurity - Security Articles

Subscribe to LinuxSecurity - Security Articles’s news feed.

Click on “Follow” and decide if you want to get news from LinuxSecurity - Security Articles via RSS, as email newsletter, via mobile or on your personal news page.

Subscription to LinuxSecurity - Security Articles comes without risk as you can unsubscribe instantly at any time.

You can also filter the feed to your needs via topics and keywords so that you only receive the news from LinuxSecurity - Security Articles which you are really interested in. Click on the blue “Filter” button below to get started.

Website title: Top Linux News, Advisories, How-tos, and Feature Releases

Is this your feed? Claim it!

Publisher:  Unclaimed!
Message frequency:  2 / day

Message History

Linux virtualization lets a physical host run guest virtual machines. A fix in vhost, the Linux component that helps those guests exchange data with virtual devices, limits memory consumed by repeated requests for a missing memory mapping.

Read full story
Confidential computing can protect a virtual machine’s memory from the host that runs it. A remote client still needs to check that its connection reaches the protected machine. Transport Layer Security, or TLS, encrypts the connection and checks the service’s identity, but does not by itself verify the machine’s software environment.

Read full story
A file descriptor is the numbered handle a running program uses to access an open file or similar resource. Linux can mark it to close automatically when the program replaces itself through exec(). That cleanup can involve waiting for a filesystem, which makes its timing important.

Read full story
A Linux sandbox restricts which files a program can access. Landlock, a kernel facility that lets programs apply those restrictions to themselves, had a bug in the code checking file locations. A concurrent directory move could leave the check reading memory that had already been released.

Read full story
Adobe has released an emergency fix for a Magento vulnerability that attackers are already using against online stores. Someone exploiting the flaw can make an affected store run code without first signing in. Adobe confirmed the attacks on Sep 8, 2026, one day after releasing the urgent hotfix.

Read full story