The Linux PwnEscape vulnerability allows guest VMs to escape isolation and execute root commands on host servers across cloud and virtualization stacks.
XFEDI
ActivityPub#linux
Public posts with this hashtag.
📧 Email w codziennej komunikacji? Potrzymaj mi klawiaturę. Moja przygoda z Delta Chat.
Michał Narecki (@michal), nauczyciel akademicki i hobbysta-sysadmin, opowie o kilkuletniej przygodzie z DeltaChat — zdecentralizowanym komunikatorze opartym na #Email. Od zwykłych skrzynek po ekosystem #chatmail.
📍 Gdzie? Hotel Kolna, Kraków
📅 Kiedy? 23–25 października 2026
🔗 Zapisy: https://jesien.org/2026
Jesień Linuksowa 2026Jesień Linuksowa 2026 – konferencja Wolnego Oprogramowania i systemu GNU/LinuxSpotkanie miłośników Wolnego Oprogramowania i GNU/Linuksa | 23-25 października 2026, Kraków
The GNOME OS preview is now public with GNOME 51.1, offering x64 and Arm64 images for a real PC or a virtual machine.
#GNOME #GNOMEOS #Linux #GNOME511 #Flatpak #systemd #OpenSource #LinuxDesktop
https://securityonline.info/gnome-os-preview/?utm_source=mastodon&utm_medium=jetpack_social
Inside PH4NTXM: #57 PH4NTXM Session Guard
Your session identity should stay consistent throughout your session.
Session Guard checks generated identity consistency and protection readiness every 10 seconds. If it detects a mismatch, a protection failure, or a monitored MAC change, it warns you and shows what changed.
Monitoring is optional. Enabling or disabling it requires your session password, and closing the window keeps monitoring running.
You stay in control. Review the findings and choose whether to enable Lockdown. Session Guard never activates it automatically.
#ph4ntxm #linux #debian #os #live #privacy #security #opsec #infosec #research #tech #technology
Want to host the #openSUSE.Asia Summit 2027? The deadline is now November 30! Join us at this year's summit in #Yogyakarta to present your community's vision and meet the organizing committee in person. #Linux https://news.opensuse.org/2026/09/28/osas-cfh-extended/
openSUSE NewsDeadline Extended Call for Host openSUSE Asia Summit 2027The openSUSE.Asia Summit Organizing Committee has extended the deadline for the Call for Host to submit proposals for the 2027 Summit. Communities now have u...
https://github.com/0xmfbk/ebpf-container-escape-framework
Audit only eBPF EDR for Linux 5.15+ LTS: 14 kernel hooks, 15 actions (13 MITRE techniques), process lineage, SIEM export, K8s/Docker ready.
A new #Linux release is a great reason to get together. Whether your local #community favors a traditional gathering or something more immutable, if you plan to host an #openSUSE #release party, please list it on the https://en.opensuse.org/openSUSE:Launch_parties so others can find and join you.
I still believe eBPF, if not managed correctly, is a big security issue. Containers isolate processes, not the kernel. eBPF runs in the kernel.
Netfilter was fixed for this: a container's firewall rules only apply to its own network namespace. Scoped by design.
eBPF tracing hooks weren't. A kprobe loaded from one container sees every process on the host. CAP_BPF in a container is really a host-wide grant.
Anyway, my 2 cents.
Fake Arch Linux packages posing as yay and paru ran root-level malware from the AUR. Learn how to check and respond.
#ArchLinux #AUR #yay #paru #Malware #SupplyChainAttack #Linux #DirtyBlanket
https://meterpreter.org/fake-arch-linux-packages/?utm_source=mastodon&utm_medium=jetpack_social
Emote 5.0 has officially been released. It's quite a big upgrade and modernization.
It had been about 4 years since I'd last worked on Emote in anger, so this was a long time coming!
Release notes: https://github.com/tom-james-watson/Emote/releases/tag/v5.0.0
The Linux Assisted-by tag is going away after maintainers agreed it misreports AI use, but human accountability stays.
#Linux #LinuxKernel #AssistedBy #AIAssistedCoding #OpenSource #LinusTorvalds #KernelDevelopment #Checkpatch
https://securityonline.info/linux-assisted-by-tag/?utm_source=mastodon&utm_medium=jetpack_social
https://akawashiro.com/articles/procinsh-en
Do you like Ghost in the Shell? In Linux?
GitHub - noboruma/ebpfexplorer · GitHub
https://github.com/noboruma/ebpfexplorer
🚀 @ONLYOFFICE Desktop Editors 10.0 released!
Νέο AI Chat & AI Tools ως προαιρετικό module (beta), επανασχεδιασμένο start window, Odoo ως cloud provider και βελτιώσεις σε Linux & macOS. Το AI δεν είναι προεγκατεστημένο — το ενεργοποιείτε μόνο αν θέλετε.
Διαβάστε: https://www.onlyoffice.com/blog/el/2026/10/onlyoffice-desktop-editors-10
#ONLYOFFICE #OpenSource #Linux #macOS #AI #Odoo #DesktopEditors #FOSS #Productivity #Tech
ONLYOFFICE BlogONLYOFFICE Desktop 10.0: Νέα ΤΝ & Odoo! | ONLYOFFICE BlogΤο ONLYOFFICE Desktop Editors 10.0 έρχεται με νέα εργαλεία ΤΝ, AI Chat, επανασχεδιασμένο παράθυρο εκκίνησης, Odoo και νέο UI στο desktop. Δείτε τι νέο υπάρχει.
theregisterLinux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networkingParty like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape
The Ubuntu 26.10 release delivers GNOME 51, Rust-powered uutils core tools, local Myna voice AI, and expanded TPM hardware encryption.
"BleachBit 6.0.6 released with fixes for admin cleaning on Linux"
"BleachBit 6.0.6 introduces cleaners for the Helium browser and Docker Desktop (including its AI assistant). BleachBit, the free, open-source and cross-platform system cleaning utility has a new maintenance release out – with support for Ubuntu 26.10."
https://www.omgubuntu.co.uk/2026/10/bleachbit-606-update-speed-boost
OMG! UbuntuBleachBit 6.0.6 released with fixes for admin cleaning on Linux - OMG! UbuntuBleachBit, the free, open-source and cross-platform system cleaning utility has a new maintenance release out – with support for Ubuntu 26.10. BleachBit
Welcoming Myna, and where EasySpeak fits in
(Link has details for what's next)
https://github.com/ctsdownloads/easyspeak/discussions/244
#Linux #Accessibility #OpenSource #VoiceControl #Ubuntu #GNOME #Myna
🐧 SIGINT // Linux Watch — 2026-10-20
A critical KVM guest-to-host escape is working its way into Debian, RHEL, and Ubuntu — if you run multi-tenant VMs on bare metal, this is the patch Tuesday that actually matters.
theregisterLinux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networkingParty like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape
Packaging week paid off. Seven of my little Linux apps now ship an AppImage, so they run on Ubuntu, Fedora, openSUSE and the rest, not just Omarchy: Repokase, Jubako, Dogear, omaforge, Rune, Bahá'í Reader and Hyprfall. Python and Qt (or Quickshell) ride along inside, and --install-desktop-entry puts the app in your menu with proper icons. Bahá'í Reader has a Flatpak bundle too. Omarchy is still home.
https://blog.ninepointlabs.com/2026/10/appimages-for-every-linux/
The Word from Nine Point LabsSeven Nine Point Labs apps now run on any Linux, with AppImagesNine Point Labs apps are made for Omarchy first, and that isn’t changing. But they shouldn’t stop at Omarchy. As of today, seven of them also run on Ubuntu, Fedora, openSUSE and most other Linux distributions: every release now comes with an AppImage that runs on most x86_64 Linux systems and fits…
For when you really need root... #Linux
(Yeah, there's dozen of ways to make a joke here.. I'm just going with the lawyers' advice)
🐧 SIGINT // Ubuntu Watch — 2026-10-20
Kernel escape vuln with real patching urgency. This roundup gives actual check commands and per-distro fix status for Ubuntu, Debian, RHEL, Proxmox - more actionable than the bare CVE entry for patching your fleet tonight.
🔗 https://smartscope.blog/en/blog/cve-2026-99999-pwnescape-linux-kernel-vulnerability-affected-2026/
SmartScopeCVE-2026-99999 (PwnEscape): Am I affected? Fix status for RHEL, Ubuntu, Debian, Amazon Linux and ProxmoxAm I affected by CVE-2026-99999 (PwnEscape)? Check commands and OS fix status for RHEL, Ubuntu, Debian, Amazon Linux, Proxmox VE and SUSE, including confirmed Debian, Amazon Linux and Proxmox kernels, unconfirmed fixes, and host update and reboot steps.
Working on qZypper, a Qt 6 / QML package manager GUI for openSUSE (Leap 16 / Tumbleweed), built on libzypp.
• Updates tab with one-click update / dist-upgrade
• RPM Groups & Languages views
• Multi-select + single-key status changes (+ - > < ! *)
• Search modes: wildcards, regex, exact, file lists
• Update Unconditionally (reinstall / downgrade)
Root ops go through a D-Bus backend + Polkit, with a bundled SELinux policy.
Είπα, γιατί μου σπάει το tcp_rmem, ε κάποια μαλακία θα έκανα, τι πείραξα πάλι πανάθεμα 'μαι;
E ή πιωμένος θα ήμουν; ΜΠΑ δε τα κάνω γω τέτοια λάθη δε πάνε μαζί, ε μετά απο το κλασικό κρυφτό και jourrnalctl με τα στάνταρ Χριστουγεννιάτικα λαμπάκια μου που άναψαν μιας και πλησιάζουν, τελικά ο Kernel αποφάσισε να ανεβάσει το buffer 4096, ρίχνω test τον παλιό περνάει, στον καινούριο "πιστόλι", μέχρι το 4096, καθίστε βρε παιδιά, μη βιάζεστεεεε, να προλαβαίνουμε το spoofing maintenance. Ένας είμαι δεν έχω λόχο πίσω μου.
Σιγά βρε...
Σε λίγο θα χρειάζομαι το μεγάλο πεύκο να σας προλάβω, μην τα κάνετε έτσι απότομα αυτά, έχουμε ευαισθησίες ναούμ, μη μας ρίχνετε τέτοια καρδιακά, δεν έχουμε και υποδομές.
@torvalds βρε σάτηρε, θες να μας πεθάνεις; Κανόνισε γιατί τα έξοδα τα αναλαμβάνεις.
Θα σου βάλω Madonna, πρόσεχε.
#Greek #Jokes #IT #Linux #Fun #Breaking #Hacking #Bullshitting #LinusTorvalds #Technology #Privacy #Kernel #ΚάτσεΚαλάΒρεΑδερφέ
Gentoo-Based MocaccinoOS 26.10 Released with COSMIC 1.10 and KDE Plasma 6.7.5 https://9to5linux.com/gentoo-based-mocaccinoos-26-10-released-with-cosmic-1-10-and-kde-plasma-6-7-5 #9to5linux #linux
I swear 90% of my home server problems boil down to permissions issues.
I was the 9-th most active Linux kernel v7.3 developer [1] in terms of the number of commits. This is my first time to be in the top ten!
I was also the 30-th most active Linux kerne v7.3l code reviewer [2] in terms of the number of Reviewed-by: tags. This must be my first time to be in the list!
Numbers are just numbers, don’t get me wrong. Those just help my memory of the moments, though.
[1] https://lwn.net/Articles/1100241/
[2] https://lwn.net/ksdb/releases/v7.3/by_tags
#linux #kernel
I was also the 30-th most active Linux kerne v7.3l code reviewer [2] in terms of the number of Reviewed-by: tags. This must be my first time to be in the list!
Numbers are just numbers, don’t get me wrong. Those just help my memory of the moments, though.
[1] https://lwn.net/Articles/1100241/
[2] https://lwn.net/ksdb/releases/v7.3/by_tags
#linux #kernel
Linux phones: could they finally become a real alternative to Android and iOS?
After years of stagnation, Linux phones may be approaching a turning point.
In a recent article, Amos Batto explains how new hardware options, more mature interfaces like Phosh and Plasma Mobile, and tools such as Waydroid could make Linux phones more practical.
But better technology alone won’t be enough.
Projects like PINE64 and Purism have faced serious challenges. Building a phone is one thing; funding software development, maintaining hardware support and keeping a company afloat are much harder.
Jolla’s latest phone also suggests there is a market for alternatives, particularly among people who want more control over their devices.
Linux phones don’t need to replace Android or iOS to matter. They need to become a practical option for people who value privacy, software freedom and digital sovereignty.
Would you consider switching to a Linux phone if it supported the apps and features you rely on every day?
https://amosbbatto.wordpress.com/2026/10/05/linux-phones-alternative/
Random thoughts, conocimiento no conocido, yachay mana yachasqachuWill Linux phones become a viable alternative to the Android/iOS duopoly?Linux phones now have the hardware and software to succeed, but it is an open question whether they will become a viable alternative to the Android/iOS duopoly.