Linux 7.4-rc1 is out after the 7.4 feature-submission window opened. The cycle includes nearly 20,000 contributions, up from the roughly 15,000 typical for a release. Linus Torvalds says AI-assisted work is increasingly arriving during the regular merge window instead of surfacing mainly as fixes during stabilization.

Source

Une nouvelle faille critique dans le noyau Linux (CVE-2026-98432) : RHEL, Debian, SUSE et Proxmox sont patchés, pas Ubuntu. Quel noyau installer ?

Le post CVE-2026-98432 : la faille critique du noyau Linux qui peut offrir un accès root à distance a été publié sur IT-Connect.

Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise. [...]

Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners. [...]

Ubuntu and Red Hat Enterprise Linux still had no fixed kernel for CVE-2026-98432 on October 30, despite a demonstration of remote root access on Linux servers with a multipath TCP (MPTCP) listener. Anthropic said its AI model wrote the exploit; Go 1.24 enables MPTCP by default for listening sockets. The kernel team rates the flaw 9.8, though vendors give it lower scores.

Source

Ubuntu Core Desktop is Canonical’s immutable, Snap-based Linux desktop, designed to make the system harder to modify or break. Canonical plans to prepare infrastructure for daily image builds in the coming weeks, as development ramps up ahead of the Ubuntu 27.04 cycle. The team is targeting browser-focused PCs, developer workstations, and gaming systems.

Source

Systemd, the Linux system and service manager, has merged infrastructure for building new components in Rust. The change is expected in systemd 263, currently anticipated in December 2026, but it does not start a rewrite of systemd’s existing C code.

Source

CachyOS prépare un noyau optionnel pour Easy Anti-Cheat Linux v2. Compatibilité des pilotes, Secure Boot et restrictions : bilan pour les joueurs

Cet article CachyOS prépare Easy Anti-Cheat Linux v2, avec un noyau optionnel a été publié en premier par GinjFo.

CISA has added the Linux kernel flaw Fragnesia (CVE-2026-46300) to its Known Exploited Vulnerabilities catalog and ordered federal agencies to patch it. The move follows reports that attackers chained it with PHP2Shell to root 25 servers, including three in a government-affiliated environment, as detailed in the reported 25-server campaign.

Source

Le fondateur de CentOS et Rocky Linux dévoile Ginux, un noyau en Rust compatible Linux (mais qui n'est pas Linux), développé avec l'aide de l'IA en 11 jours.

Le post Ginux : avec l’IA, le fondateur de CentOS crée en 11 jours un noyau Rust compatible Linux a été publié sur IT-Connect.

After millions of PHP2Shell exploit attempts drew attention while no successful compromises had been confirmed, researchers now report 25 rooted servers, including three in a U.S. government-affiliated environment. The suspected China-linked attackers chained PHP2Shell with Fragnesia, a Linux kernel privilege-escalation flaw, and used a custom exploit tailored to firewall software.

Source

Kali Linux is a penetration-testing distribution available as an installable or live system, with Android support through NetHunter. Its 2026.3 release, published October 26, adds six security tools, upgrades the kernel to 7.1.5, and refreshes image-building scripts with Docker and Podman support.

Source

L'utilitaire Arc-Rebar permet à une Arc B580 de retrouver un accès complet à sa mémoire vidéo sur une ancienne carte mère. Les gains sont importants.

Cet article Arc B580, un outil Linux active le Resizable BAR sur certaines anciennes cartes mères a été publié en premier par GinjFo.

Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more. [...]

Tailscale SSH lets approved devices connect across a Tailscale network without relying on conventional SSH passwords or keys. A new report says that, with port forwarding enabled, an attacker who already controls an approved device could exploit the feature to gain root access on reachable servers. The findings come from lab tests, and Tailscale has not confirmed the specific claims.

Source

Trend Micro’s Zero Day Initiative (ZDI) accidentally sent six unpatched vulnerability reports to the public Linux kernel mailing list instead of its private security list. Two critical KSMBD flaws, including remote-code-execution issues already disclosed, are part of the batch; four other reports affect different kernel components and ConnMan. Maintainer Greg Kroah-Hartman challenged the submissions, asking why they were posted publicly without patches.

Source

Two remote-code-execution flaws in KSMBD, Linux’s built-in SMB file server, have been disclosed publicly, each with a CVSS score of 9.0. One can be triggered without authentication; the other requires SMB Direct and an RDMA-capable network interface. Neither had a fix in the mainline kernel when reported.

Source

AMD propose un pilote Linux pour régler les limites de puissance des Ryzen. Ce projet encore en examen utilise l’interface firmware de Ryzen Master.

Cet article Ryzen sous Linux, AMD déploie un pilote pour l’overclocking a été publié en premier par GinjFo.

Créez un timer systemd sur Debian pour planifier vos tâches : service, timer, syntaxe OnCalendar, rattrapage et logs. Avec un comparatif complet face à cron.

Le post Linux : planifier des tâches avec les timers systemd sur Debian a été publié sur IT-Connect.