A high-severity Linux kernel vulnerability (CVE-2026-23111) in nf_tables allows unprivileged users to escalate to root. Discovered by Exodus Intelligence, the bug stems from a single misplaced exclamation mark causing a use-after-free memory corruption.
Linux kernel's private security list is overwhelmed by duplicate bug reports from AI tools. Linus Torvalds announced a policy change requiring AI-found vulnerabilities to be treated as public disclosures, with reports sent directly to maintainers and human developers taking full legal responsibility for AI-generated code.
Eine neue Sicherheitslücke im Linux-Kernel erlaubt durch eine Race Condition die Ausweitung von Privilegien. Der Fehler ermöglicht den Zugriff auf geschützte Dateien wie SSH-Keys und /etc/shadow. Ein Patch wurde in Version 7.0.8 veröffentlicht.
Vietnam-based security startup Calif claims to have developed the first public macOS kernel memory corruption exploit against Apple's M5 chip protections using Anthropic's AI-powered Mythos Preview, achieving root access in under a week.
Eine Sicherheitslücke im Linux-Kernel und die Unzulänglichkeiten künstlicher Intelligenz sind die Hauptthemen des aktuellen Podcasts von heise security.
Die Copy-Fail-Lücke erlaubt den Hosts einen Abstecher in die Gefilde des Linuxkernels, KI löscht Unternehmensdaten und CAs machen mal wieder einen Rückzieher.
Security researchers from Theori released exploit code for CVE-2026-31431, a critical Linux kernel vulnerability allowing unprivileged users to gain root access. The flaw, named CopyFail, affects virtually all Linux distributions and works with a single Python script across Ubuntu 22.04, Amazon Linux 2023, SUSE 15.6, and Debian 12. The vulnerability stems from a logic flaw in the kernel's crypto API, not race conditions or memory corruption, making it highly reliable. Private disclosure occurred five weeks prior, but most distributions had not patched when the exploit went public.
Mit Version 4.2 des Proxmox Backup Servers lassen sich unter anderem Pull-/Push-Sync-Jobs serverseitig ver- und entschlüsseln sowie parallel abarbeiten.
Die Entdecker haben die root-Lücke im Linux-Kernel „Copy Fail“ getauft. Alle größeren Distributionen seit 2017 sind betroffen.
Vincent Kompany’s team demand more of themselves than ever before. Next up: a huge test against PSG“You’re hopelessly behind, you know there’s a big game in Paris on Tuesday. But that doesn’t matter. This game in Mainz is what counts. The coach finds the right words and the team reacts.” Bayern Munich hope that there will be games to come which define their campaign more than a straightforward win – statistically speaking – in a Bundesliga game with the title of champions already done and dusted.Yet Max Eberl was right. In terms of finding the kernel of what has already made Bayern’s season an extraordinary one, of what might yet make it an exceptional one, this really meant something. Absorbed on paper, from a distance, it could be mistaken for more grist to the mill of uncommon numbers; keeping alive the possibility of a joint best-ever Bundesliga season in terms of points, and extending the record goalscoring season in the league campaign to a barely-believable 113 from 31 matches. Continue reading...
