… It was 13 years ago that a security researcher noted the X.Org security disaster and "it's worse than it looks" and all these years later new security issues continue to come to light in the aging and little-maintained codebase. …
Dirty Frag Vulnerability Made Public Early: Root Privilege On All Distributions Written by Michael Larabel in Linux Security on 7 May 2026 at 08:08 PM EDT. 13 Comments One week after the Copy Fail vulnerability, a new Linux local privilege escalation bug has been made public. …
… Announced today on the open-source security mailing list by V12 Security is Fragnesia as a local privilege escalation exploit that is of the same vulnerability class as Dirty Frag. …
GNOME's Help Viewer Updated Due To Flatpak Sandbox Escape Vulnerability Written by Michael Larabel in GNOME on 11 May 2026 at 10:36 AM EDT. Add A Comment GNOME's help viewer, Yelp, last year was impacted by a serious security issue for arbitrary file reads . …
… Torvalds: AI Tools Great When Not Causing Unnecessary Pain & Pointless Make-Believe Work Linux 7.1-rc4 Released With Many Fixes, New Documentation For Security/AI Topics Linux Kernel Adds Documentation For What Qualifies As A Security Bug, Responsible AI Use Linux 7.0.8 Released & LTS Kernels Updat…
… Linux Kernel Adds Documentation For What Qualifies As A Security Bug, Responsible AI Use Linux 7.0.8 Released & LTS Kernels Updated For ssh-keysign-pwn Linux's Latest Vulnerability Allows Reading Root-Owned Files By Unprivileged Users Fragnesia Made Public As Latest Linux Local Privilege Escalation…
… Linux Kernel Adds Documentation For What Qualifies As A Security Bug, Responsible AI Use Linux 7.0.8 Released & LTS Kernels Updated For ssh-keysign-pwn Linux's Latest Vulnerability Allows Reading Root-Owned Files By Unprivileged Users Fragnesia Made Public As Latest Linux Local Privilege Escalation…
… The AMD security bulletin with the details on this FP-DSS/FPDSS security vulnerability can be found via AMD.com . …
… AMD also acknowledged new security research of TDXRay as a side-channel analysis of Intel TDX. AMD's SEV-SNP though isn't impacted by TDXRay. More details on today's AMD disclosures can be found via the AMD product security center . …
… CVE-2026-35094 was also made public as a use-after-free vulnerability for libinput plug-ins. More details on these libinput security issues via today's advisory . As a result of these disclosures, libinput 1.31.1 and libinput 1.30.3 have been released with security fixes for these vulnerabilities. …