LinuxSecurity.com

Public exploit code is now available for SCTPhantom, a Linux kernel flaw that researchers used to escape an unprivileged container and take control of the underlying host. 

Modern Linux kernel hardening has made many traditional exploit techniques harder to use, but new research from IBM Research Europe and Vrije Universiteit Amsterdam suggests attackers may have a much larger set of alternatives than defenders realized.

A Linux vulnerability scan can create almost as many questions as it answers. The scan may identify dozens of affected packages, several CVEs marked High or Critical, and a mix of fixes that are available now or still working through a distribution's update process.

If you manage Linux boxes long enough, you hit this exact wall. You spot a weird process eating CPU, kill it, wipe the script, and reset the user password. You grab a coffee, check things over, and come back five minutes later. The process is running again.

This week’s most important Linux security updates arrived through vendor advisories rather than major headline-making disclosures.

Kubernetes maintainers patched two path-traversal vulnerabilities in the NFS and SMB CSI drivers earlier this year. But repository histories show that the security work did not end with those fixes.