linux security

The Go runtime’s handling of Unix setuid/setgid binaries contained a dangerous blind spot: when privileged Go programs were started with standard I/O file descriptors closed or when they crashed, the runtime did not take the usual, protective steps other runtimes or C programs take to sanitize...

ClamAV’s core daemon contains a deceptively simple bug that, when chained with local access and the ability to restart services, can let an attacker overwrite critical system files by abusing log handling — a privilege-handling flaw tracked as CVE-2024-20506 that was patched by the ClamAV...

A surprisingly small parsing bug in a widely used cryptography library has forced cloud operators and Linux admins to ask a blunt question: when Microsoft says “Azure Linux includes this open‑source library and is therefore potentially affected,” does that mean Azure Linux is the only Microsoft...

A newly disclosed GnuTLS vulnerability tracked as CVE‑2024‑28835 can crash applications during certificate chain building and verification — a denial‑of‑service (DoS) weakness that has been fixed upstream but has required careful distro-level backports and coordinated patching across Linux...

Microsoft’s short MSRC note — that “Azure Linux includes this open‑source library and is therefore potentially affected” — is accurate for the Azure Linux inventory Microsoft has completed, but it is not a categorical guarantee that no other Microsoft product can include the same vulnerable...

The short answer is: No — Azure Linux is not necessarily the only Microsoft product that could include the vulnerable open‑source code, but it is the only Microsoft product Microsoft has publicly attested (so far) to contain the specific cpupower/bench component covered by CVE‑2025‑37841...

Microsoft’s public advisory for CVE-2025-38422 confirms that Azure Linux images include the upstream Linux kernel code that required a fix in the lan743x Ethernet driver, but that product-level attestation is not an automatic guarantee that no other Microsoft-distributed artifacts contain the...

A logic ordering bug in the Smack Linux Security Module (LSM) has been assigned CVE-2025-68733 after maintainers corrected a code path that allowed unprivileged processes — under specific Smack configurations — to create new Smack labels by writing names into their own process attribute files...

Microsoft Azure now includes the official Center for Internet Security (CIS) Linux Benchmarks as a built‑in, CIS‑certified capability inside Azure Policy’s Machine Configuration — a preview feature powered by the new azure‑osconfig compliance engine that delivers continuous, audit‑grade...

Microsoft and the Center for Internet Security (CIS) have made the official CIS Linux Benchmarks available as a built‑in, CIS‑certified capability in Microsoft Azure’s Azure Policy → Machine Configuration experience, powered by the new azure‑osconfig compliance engine — a preview feature that...

Microsoft Azure has added official, CIS‑certified Linux benchmarks as a built‑in Azure Policy Machine Configuration capability, allowing organizations to run continuous, audit‑grade assessments of Linux hosts across cloud, on‑premises, and Azure Arc‑connected fleets using the new azure‑osconfig...

Microsoft and the Center for Internet Security (CIS) have made official CIS Linux security benchmarks available natively on Microsoft Azure, delivered as a built‑in Azure Policy Machine Configuration capability powered by the new azure‑osconfig compliance engine — a move that brings...

A newly disclosed use‑after‑free bug in the GRUB2 bootloader — tracked as CVE‑2025‑61663 — arises from a missing unregister call in the normal command module and can cause a local attacker who can invoke GRUB commands to crash the bootloader or the host, prompting immediate patching from...

A critical null-pointer dereference in the AMD Linux display driver (tracked as CVE-2025-39705) has been fixed upstream, and Microsoft’s public attestation names Azure Linux as a known, potentially affected Microsoft product — but that attestation covers only the inventory Microsoft has...

A timeout missing from a low-level SPI polling loop has a surprisingly large consequence: it lets an attacker or a buggy driver sequence force a sustained or persistent loss of availability in affected Linux systems, turning a small, technical omission into a practical denial‑of‑service that can...

Microsoft has published an advisory for CVE-2025-59497, a time-of-check time-of-use (TOCTOU) race condition in Microsoft Defender for Endpoint on Linux that can be triggered by an authorized local actor to produce a denial-of-service (DoS) condition; a security update was released on October 14...

Winux arrives wrapped in sleek Windows 11 styling, a glossy demo video and a promise of a familiar desktop — but beneath the theme and the marketing, this distro resurrects the same trust issues, questionable licensing and security baggage that followed its predecessors LinuxFX and Wubuntu, and...

Linuxfx’s latest “NOBLE” refresh promises a fast, Windows‑like desktop that can breathe new life into older PCs — but the story is more complicated than a single download button. The distro’s recent update is reported to be built on Ubuntu’s Noble series with the newer hardware enablement...

Microsoft’s latest update to the Windows Subsystem for Linux, version 2.5.10, has landed with little fanfare but significant impact, quietly delivering a targeted security fix for users running Linux binaries on Windows 11. This release underscores an evolving strategy at Microsoft, where rapid...

A hush has fallen over the Windows and Linux communities as Microsoft issues a highly targeted update for Windows Subsystem for Linux (WSL), addressing a critical security vulnerability that, as of now, remains shrouded in secrecy. With only a vague clue—CVE-2025-53788—disclosed ahead of...