🧰 Ubuntu

The items that name it 22

• What are shell vulnerabilities? PHP2Shell, Node2Shell (HTTP2Shell), React2Shell and Log4Shell explained
  articleas affected products2026-10-29
• CVE-2026-98432: 9.8 CVE affecting all Ubuntu versions
  advisoryas affected products2026-10-29It is written here as Ubuntu (all versions per page title; Ubuntu priority High).

  all versions per page title; Ubuntu priority High

• Backporting security fixes to stable releases
  articleas classification.technologies2026-10-27
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-17
• Canonical Websites Disrupted in Second DDoS Attack This Year
  articleas classification.technologies2026-10-12
• CUDA Basics for Hackers, Part 1: Getting Started
  writeupas affected products2026-10-06

  Recommended Linux distribution for CUDA development

• AI Agent Sandbox Flaw in brig: Symlink Traversal (CVSS 8.2) | Blog | Endor Labs
  writeupas affected products2026-09-28

  confirmed affected configuration, using nerdctl over containerd

• Socket Joins New OpenJS Program to Fund Node.js Security Work
  articleas classification.key entities2026-09-25
• Containers Are No Longer a Security Boundary (CVE-2026-80521)
  writeupas classification.technologies2026-09-22
• How CycloneDX VEX Makes Your SBOM Useful | Blog | Endor Labs
  articleas affected products2026-09-11It is written here as Ubuntu (distributions not using default setting implicated in CVE-2017-8283, making requires_configuration not applicable).

  distributions not using default setting implicated in CVE-2017-8283, making requires_configuration not applicable

• Why OVAL Feeds Outperform NVD for Linux Vulnerability Management | Blog | Endor Labs
  articleas affected products2026-09-11
• Dirty Frag (CVE-2026-43284): the Linux kernel bug that turns read access into root
  writeupas affected products2026-09-04

  Backports fix; publishes exact fixed package version for each supported kernel line

• Orca Security: Critical Ubuntu Pro Client Vulnerability Enables Root Code Execution Across Cloud Workloads
  advisoryas classification.technologies2026-07-20
• Malwoverview 8.0.5
  repoas affected products2026-06-28It is written here as Ubuntu (platform Malwoverview is tested on).

  platform Malwoverview is tested on

• IDP Zero-Dollar
  repoas affected products2026-05-13
• Fragnesia: Linux Kernel Local Privilege Escalation via ESP-in-TCP | Wiz Blog
  advisoryas affected products2026-05-13It is written here as Ubuntu (AppArmor restrictions on unprivileged user namespaces are default; partial mitigation).

  AppArmor restrictions on unprivileged user namespaces are default; partial mitigation

• Fixes available for CVE-2026-31431 (Copy Fail) Linux Kernel Local Privilege Escalation Vulnerability | Ubuntu
  advisoryas classification.technologies2026-04-30
• Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE via AF_ALG/splice()
  writeupas affected products2026-04-29

  Tested distribution, root obtained

• Today I Learned - setfacl
  writeupas affected products2024-12-17

  freshly installed Ubuntu box does not have setfacl installed out-of-the-box (newer Ubuntu hosts)

• [s|l]trace - Linux Malware Analysis
  writeupas affected products2024-02-01

  Newer versions of Ubuntu prevent ltrace from working normally (cited from Shlomi Boutnaru's post), requiring recompilation with -pg -ldl -no-pie flags to trace

• Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code
  repoas classification.technologies
• CVE-2026-42533 nginx heap buffer overflow PoC (pre-auth RCE via two-pass capture clobbering)
  repoas affected products