home.social

#ubuntu2404 — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #ubuntu2404, aggregated by home.social.

  1. NERDS.xyz – Real Tech News for Real Nerds [Unofficial] @[email protected] ·

    TUXEDO InfinityBook Max 16 brings Ryzen AI 9, GeForce RTX 5070 to Linux in a 4.4 lb chassis

    fed.brid.gy/r/https://nerds.xy

    #linux #laptop #amdryzenai300 #amdryzenai9hx370 #gaminglaptoplinux #infinitybookmax16
  2. Fossery Tech :debian: :gnome: @[email protected] ·

    This week's Linux and FOSS news:

    LINUX NEWS

    Debian's Challenge When Its Developers Quietly Drift Away:
    phoronix.com/news/Debian-Devel

    Debian's CI Data No Longer Publicly Browseable Due To LLM Scrapers / Bot Traffic:
    phoronix.com/news/Debian-CI-LL

    Ubuntu 24.04 LTS Users Get Linux 6.17 and Mesa 25.2 Ahead of Ubuntu 24.04.4 LTS:
    9to5linux.com/ubuntu-24-04-lts

    Ubuntu To Support The SpacemiT K3 As One Of The First RISC-V RVA23 SoCs:
    phoronix.com/news/Ubuntu-Space

    Dank Fedora MiracleWM & Other Fedora 44 Changes Approved:
    phoronix.com/news/Fedora-44-Da

    KDE Linux To Provide Better Hardware Support & Better Performance:
    phoronix.com/news/KDE-Linux-Pe

    openSUSE Tumbleweed brings transactional-update 6.0.6 and Ruby 4.0 updates:
    alternativeto.net/news/2026/2/

    Linux Lite 7.8 releases 12 rewritten apps and expands software selection:
    alternativeto.net/news/2026/2/

    Linux From Scratch Abandoning SysVinit Support:
    phoronix.com/news/LFS-Dropping

    TrueNAS 26 Looks Toward OpenZFS 2.4, Linux 6.18 LTS & LXC Container Support:
    phoronix.com/news/TrueNAS-26-P

    GNOME Shell & Mutter 50 Beta Releases Bring Stable VRR, Improved Frame Scheduling:
    phoronix.com/news/GNOME-Shell-

    GNOME's Glycin 2.1 Beta Enables JPEG 2000 Support By Default:
    phoronix.com/news/Glycin-2.1-B

    Papers adds handwriting & text annotations in latest Nightly builds:
    omgubuntu.co.uk/2026/02/papers

    KDE Plasma 6.6 Fixing Significant Issues With Fingerprint Authentication:
    phoronix.com/news/Plasma-6.6-F

    KDE Gear 25.12.2 Brings Improvements to Dolphin, NeoChat, Kate, and Other Apps:
    9to5linux.com/kde-gear-25-12-2

    System76 plans for COSMIC include Vulkan, HDR, gaming improvements and more:
    gamingonlinux.com/2026/02/syst

    Steam Survey Results For January 2026:
    phoronix.com/news/Steam-Survey

    (more Linux and FOSS news in comment)

    #WeeklyNews #Linux #LinuxNews #Debian #Ubuntu #Fedora #MiracleWM #KDE #KDELinux #openSUSE #LinuxLite #LinuxFromScratch #TrueNAS #GNOME #KDEPlasma #KDEGear #COSMIC #SteamSurvey #Steam #COSMICDesktop #Ubuntu2404 #openSUSETumbleweed #GNOMEShell #LinuxDesktop #DesktopLinux #DistroRelease #DistributionRelease #DesktopEnvironment #DE #LinuxDistro #FosseryTech

    #weeklynews #linux #linuxnews #debian #ubuntu #fedora
  3. 🛡 [email protected]/:~# :blinking_cursor:​ @[email protected] ·

    PoC released for Critical Privilege Escalation Vulnerability in Linux Kernel

    Date: June 5, 2024

    CVE: CVE-2023-3390

    Vulnerability Type: Use-After-Free

    CWE: [[CWE-416]]

    Sources: SSD-disclosure NVD, Debian Security Tracker, Snyk

    Synopsis

    A PoC Exploit has been released for Linux Kernel use-after-free vulnerability, identified as CVE-2023-3390, has been discovered in the Linux kernel's netfilter subsystem. This flaw, present in the nf_tables_api.c file, can allow a local attacker with the ability to execute low-privileged code on the target system to escalate privileges due to mishandled error handling. The vulnerability has been patched.

    Issue Summary

    CVE-2023-3390 is a critical vulnerability found in the Linux kernel's netfilter subsystem. The issue arises from a use-after-free error in the NFT_MSG_NEWRULE handling, potentially allowing attackers to exploit a dangling pointer within the same transaction. This flaw enables local attackers to gain elevated privileges on affected systems.

    Technical Key Findings

    The root cause of CVE-2023-3390, a critical privilege escalation vulnerability in the Linux kernel, lies in the improper management of integer values within the nft_parse_register_store function of the Netfilter subsystem. Specifically, this vulnerability is due to an integer overflow issue within the nft_validate_register_store function, which fails to correctly handle certain large values for register indices.

    The CVE-2023-3390 vulnerability arises from an integer overflow in the validation logic of the Netfilter subsystem, which fails to properly handle large register values, allowing an attacker to perform out-of-bounds writes to kernel memory. This leads to potential privilege escalation, compromising the affected system. It is crucial to apply patches that correct this validation flaw to mitigate the risk.

    For details, see the detailed root cause analysis at SSD Secure Disclosure

    Vulnerable Products

    The vulnerability affects Debian 11 (Linux Kernel 5.10)

    Impact Assessment

    Exploiting this vulnerability allows a local attacker to gain root access, which can lead to severe consequences such as system compromise, data breaches, and service disruptions.

    Patches or Workaround

    Patches for CVE-2023-3390 have been released. Administrators are advised to update their Linux kernel to versions that include the commit 1240eb93f0616b21c675416516ff3d74798fdc97.  an updated kernel in July 2023: https://tracker.debian.org/news/1449040/accepted-linux-510179-3-source-into-oldstable-security

    Tags

    #CVE-2023-3390 #LinuxKernel #PrivilegeEscalation #UseAfterFree #Netfilter #SecurityPatch #Debian #AlmaLinux #Ubuntu2404

    #cve #linuxkernel #privilegeescalation #useafterfree #netfilter #securitypatch