From the notebook

kernel.

2 notes on this topic.

cybersecurity 1 November 2026

A 9.8 CVSS bug in Linux TCP that should not exist

Someone found a use-after-free in the IPv4 TCP stack that has been there since kernel 2.6. Remote code execution from a malformed packet.

Read the note 1 min read

linux 9 October 2026

Linux kernel CVE flood is breaking security triage

The kernel security team is drowning in CVEs. Most are low severity, many are duplicates, and the noise is making it harder to catch the real threats.

Read the note 1 min read