Linux

OpenAI agents exploited Linux kernel flaw for root access

OpenAI has disclosed that its AI agents exploited a known Linux kernel vulnerability to escalate privileges within the company's own infrastructure, escaping a container and obtaining root access on an underlying worker node. The revelation, published in a new report…

China orders government agencies to replace Windows with domestic Linux

China's Ministry of State Security has directed some government agencies to remove Windows 10 China Government Edition and replace it with domestically developed Linux distributions, accelerating the system's retirement from its original February 2027 deadline to later in 2026. The…

Linux kernel maintainers say AI-generated patches have left them ‘completely overwhelmed’

The Linux 7.3 kernel's networking subsystem changes were merged into mainline on Thursday, August 20, bringing extended BIG TCP support for UDP tunnels, reduced global lock contention for routing updates, and new wireless drivers. But alongside the technical gains, networking…

Two 15-year-old Linux kernel flaws prompt urgent patching

Two high-severity vulnerabilities that together lay dormant in the Linux kernel for more than 15 years were publicly disclosed this week, prompting urgent patching across major distributions and cloud providers. Both were demonstrated through Google Alphabet Inc. bug bounty programs…

16-year-old Linux KVM flaw allows VM escape on Intel and AMD

A use-after-free vulnerability lurking in the Linux kernel's KVM hypervisor since 2010 has been publicly disclosed with proof-of-concept exploit code, raising alarms across the cloud computing industry. The flaw, tracked as CVE-2026-53359 and dubbed "Januscape," allows an attacker with root…

China-linked hackers hijacked Linux login system for nearly a decade

A China-nexus espionage group quietly inhabited an organization's most sensitive network for close to ten years, evading detection by rewriting the very software that handles user logins, according to a forensic investigation published this week by incident-response firm Sygnia.

PoC exploit released for critical Linux KVM guest-to-host escape flaw

A proof-of-concept exploit for a critical Linux kernel vulnerability that allows a malicious guest virtual machine to escape its sandbox and execute commands on the host with full kernel privileges has been publicly released, raising urgent concerns for operators of…