432 Linux CVEs published in the last 24 hours

Comments

• totally_not_banned Member

  July 20

  Yawn.
• Fubuki Member

  July 20

  who?
• forest Member

  July 20

  Looks like most of these are DoS vectors, require privileges, or involve obscure drivers. Still a good idea to patch, but nothing really out of the ordinary in the "Linux is its own CNA also LLMs are a thing now" age.

  Thanked by 7totally_not_banned MikeA glueckself WyvernCo buggedout tentor zGato
• totally_not_banned Member

  July 20

  @forest said:
  Looks like most of these are DoS vectors, require privileges, or involve obscure drivers. Still a good idea to patch, but nothing really out of the ordinary in the "Linux is its own CNA also LLMs are a thing now" age.

  There's nothing server admins fear more than NULL pointer derefences in ALSA PCM code on RISC-V

  Thanked by 5forest WyvernCo tentor zGato tzuli
• glueckself Member

  July 20

  Linux CVEs, nginx CVEs, dnsmasq CVEs... oh well, this must be Tuesday.
• WyvernCo Member

  July 21

  @totally_not_banned said:

  @forest said:
  Looks like most of these are DoS vectors, require privileges, or involve obscure drivers. Still a good idea to patch, but nothing really out of the ordinary in the "Linux is its own CNA also LLMs are a thing now" age.

  There's nothing server admins fear more than NULL pointer derefences in ALSA PCM code on RISC-V

  datacenter rave is OVER
• rpqu Member

  July 21

  Fuck
• MannDude Patron Provider, Veteran

  July 21 edited July 21

  Just apt update && apt upgrade && reboot set on a cron every 6hrs just to be safe.

  Soon we'll stop comparing uptime as a metric of a good host and start comparing how often our hosts reboot for critical vuln patching.

  "STAY AWAY! UPTIME THREE YEARS, HOST NO GOOD!"

  /s

  Guess kernelcare and alike is probably seeing a jump in sales. I'm still considering deployment fleet-wide.

  Thanked by 9rpqu TimboJones buggedout zGato Nekopara concept themew BasToTheMax tux
• raindog308 Administrator, Veteran

  July 21

  I've abandoned Linux and just have Claude vibe-code me an OS whenever I need to use a computer.

  Thanked by 8nghialele rpqu TimboJones buggedout zGato yoursunny Noct BasToTheMax
• rpqu Member

  July 21

  @MannDude said:
  "STAY AWAY! UPTIME THREE YEARS, HOST NO GOOD!"

  /s

  Guess kernelcare and alike is probably seeing a jump in sales. I'm still considering deployment fleet-wide.

  Perhaps it's an inside job?
• bobert Member

  July 21 edited July 21

  @MannDude said: Guess kernelcare and alike is probably seeing a jump in sales. I'm still considering deployment fleet-wide.

  If you don't want to pay, you can do it yourself. Probably with AI too if you're not too technically inclined.

  I did some research and it seems like all you need to do is install something called kpatch and then feed it a diff that you can find yourself when the linux kernel gets patched. It is not dark magic anymore. Hope every provider starts having no downtime reboots.
• JasonM Member

  July 21

  holy moly! once again
• yoursunny Member, IPv6 Advocate

  July 21

  @bobert said:
  lore
• wii747 Member

  July 21

  AI slop finding CVE no need to get worried
• PuDLeZ Member

  July 21

  @Fubuki said:
  who?

  
• tentor Member, Host Rep

  July 21

  @bobert said:

  @MannDude said: Guess kernelcare and alike is probably seeing a jump in sales. I'm still considering deployment fleet-wide.

  If you don't want to pay, you can do it yourself. Probably with AI too if you're not too technically inclined.

  I did some research and it seems like all you need to do is install something called kpatch and then feed it a diff that you can find yourself when the linux kernel gets patched. It is not dark magic anymore. Hope every provider starts having no downtime reboots.

  Surprisingly, OVH ruled out live patching completely and decided to just reboot their fleet https://blog.ovhcloud.com/en/posts/cve-2026-53359-kvm-patching-lessons-learned/