Trend Micro’s Zero Day Initiative (ZDI) accidentally sent six unpatched vulnerability reports to the public Linux kernel mailing list instead of its private security list. Two critical KSMBD flaws, including remote-code-execution issues already disclosed, are part of the batch; four other reports affect different kernel components and ConnMan. Maintainer Greg Kroah-Hartman challenged the submissions, asking why they were posted publicly without patches.

Source

Two remote-code-execution flaws in KSMBD, Linux’s built-in SMB file server, have been disclosed publicly, each with a CVSS score of 9.0. One can be triggered without authentication; the other requires SMB Direct and an RDMA-capable network interface. Neither had a fix in the mainline kernel when reported.

Source

AMD propose un pilote Linux pour régler les limites de puissance des Ryzen. Ce projet encore en examen utilise l’interface firmware de Ryzen Master.

Cet article Ryzen sous Linux, AMD déploie un pilote pour l’overclocking a été publié en premier par GinjFo.

Nvidia OpenShell is a sandbox runtime that limits what autonomous AI agents can do. Red Hat plans to integrate Nvidia’s OpenShell Reference Architecture into its AI platforms, pairing agent controls with inference tools and support for Nvidia’s upcoming Vera Rubin systems. The broader design runs on Linux and Kubernetes—including Red Hat’s platforms—and can also use Windows execution containers.

Source

Créez un timer systemd sur Debian pour planifier vos tâches : service, timer, syntaxe OnCalendar, rattrapage et logs. Avec un comparatif complet face à cron.

Le post Linux : planifier des tâches avec les timers systemd sur Debian a été publié sur IT-Connect.

Le hotfix communautaire GE-Proton 11-11 corrige une erreur Easy Anti-Cheat signalée dans Star Citizen et plusieurs problèmes vidéo sous Linux.

Cet article Le Hotfix GE-Proton 11-11 débarque, quoi de neuf ? a été publié en premier par GinjFo.

Le noyau Linux 7.3 est sorti avec un record de 18 765 commits signés par 3 021 développeurs. Mais alors, quelles sont les nouveautés à retenir ?

Le post Linux 7.3 : record historique de commits pour le noyau, voici les nouveautés a été publié sur IT-Connect.

Linux 7.4 is accepting feature submissions, but Linus Torvalds’ vacation could extend the merge window and delay the release by up to two weeks. The cycle follows Linux 7.3, which brought new kernel features and is now available for distributions to test and package.

Source

Linux kernel 7.3 arrived with new features spanning graphics, scheduling, filesystems, security, and hardware support. The release is especially notable for smarter memory handling on low-VRAM AMD GPUs, faster storage workloads, and broader support for newer hardware and sandboxing features.

Source

PwnEscape, the critical Linux KVM guest-to-host flaw, may point to a wider weakness in how Linux handles network packets. Researcher Paulos Yibelo says the issue—previously reported as a way for a guest to leak host memory or escape its VM—shows how untrusted checksum metadata can alter packet fields after validation. The vulnerability is rated 9.3 and can be triggered with malformed IPv4 packets.

Source

Valve lance une bêta 64 bits de son client Steam pour Linux. Elle propose également une nouvelle organisation des succès et des optimisations du démarrage.

Cet article Steam passe enfin au 64 bits sur Linux : une première bêta est disponible a été publié en premier par GinjFo.

PwnEscape (CVE-2026-99999), faille critique du noyau Linux, fait fuir la mémoire de l'hôte depuis une VM, jusqu'à l'évasion. Voici comment se protéger.

Le post PwnEscape : une faille Linux permet de s’évader d’une VM KVM a été publié sur IT-Connect.

Public preview extends Microsoft Defender for Endpoint to Linux desktops with the same agent that already guards Linux servers. This guide covers licensing, system requirements, and how Defender classifies a Linux machine as a workstation or a server. It also walks through installing and onboarding the agent with the Defender deployment tool, checking antivirus and endpoint detection and response (EDR), and managing the agent from a central console. 4sysops reported the announcement in Microsoft Defender brings its Linux server agent to desktops.

Source

Microsoft Defender for Endpoint protège désormais les postes de travail Linux, en préversion publique. Compatibilité, licence... Voici l'essentiel à savoir.

Le post Microsoft Defender for Endpoint prend désormais en charge les postes de travail Linux a été publié sur IT-Connect.

The KVM guest-to-host escape Vercel had confirmed while its technical details were unknown is now identified as PwnEscape, CVE-2026-99999. The Linux networking flaw can leak host memory, crash a host or—in researcher-controlled tests—execute code on it. The fix must be applied to the host kernel, not just guest systems.

Source

Ubuntu 26.10 “Stonking Stingray” is now available, and Myna’s local speech-to-text preview can also be tested on Ubuntu 24.04 LTS and 26.04 LTS. The 26.10 beta introduced Myna as an optional feature; the preview’s availability now extends to earlier releases.

Source

Ubuntu 26.10 is now available, replacing the last GNU coreutils holdouts with Rust-based alternatives. The beta had introduced Rust-based OpenPGP and GNOME 51; the final release completes the command-line tools migration and adds a way to check Ubuntu hardware certification.

Source

KDE has released Plasma 6.8, ending native X11 desktop sessions and making Wayland the only supported session. The change, which KDE had flagged as planned for Plasma 6.8, doesn’t prevent X11 applications from running: they can still use XWayland.

Source

A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]