tldrdailynews.com logo
Tag

Ubuntu

All articles tagged with #ubuntu

Ubuntu patches timer-based root access (CVE-2026-3888)
security23 days ago

Ubuntu patches timer-based root access (CVE-2026-3888)

Ubuntu Desktop 24.04+ is patched for CVE-2026-3888, a high-severity local privilege-escalation that can occur via a timing window in systemd-tmpfiles cleanup interacting with snap-confine. An unprivileged attacker could wait for the cleanup to delete /tmp/.snap, recreate it with a payload, and have it bound as root on the next sandbox initialization. Patches are available through updated snapd versions across Ubuntu 24.04.x, 25.10.x, 26.04.x, and upstream; exploitation requires a 10–30 day window and no user interaction. The report also notes a separate race-condition in uutils coreutils that could enable root-level file operations during cron, mitigated by reverting rm to GNU coreutils in Ubuntu 25.10 and applying upstream uutils fixes. Users should apply the patched snapd updates to mitigate risk.

via The Hacker News|
#cve-2026-3888#security#snap-confine
technology23 days ago

Ubuntu Snap Local Privilege Escalation CVE-2026-3888 Prompts Patch Rollout

A high-severity local privilege escalation in Ubuntu's snapd (CVE-2026-3888) could let a local user recreate the snap private /tmp directory when systemd-tmpfiles runs, enabling root access. Qualys-discovered flaw has prompted patches across Ubuntu releases, with 24.04 LTS and 25.10 affected out-of-the-box; Ubuntu 22.04 LTS and older are only impacted in non-default configurations.

via Phoronix|
#cve-2026-3888#linux#privilege-escalation
security28 days ago

Ubuntu AppArmor Flaws Could Enable Local Privilege Escalation

Qualys disclosed multiple vulnerabilities in Ubuntu’s AppArmor kernel security module (CrackArmor) that can cause memory leaks and DoS, and, when combined with a sudo discovery, may enable local privilege escalation. Canonical is rolling out fixes across affected Ubuntu releases, addressing issues from DFA state bounds and memory leaks to policy namespace limits and race conditions. The advisory also notes unsafe su behavior prompting hardening, with the sudo flaw affecting releases back to 22.04 LTS and su hardening traced to 20.04 LTS; more details are available in Qualys’ advisory.

via Phoronix|
#apparmor#linux#privilege-escalation
technology1 month ago

Linux 7.0-rc3 Brings Big Fixes and New Hardware Support Ahead of 7.0

Linux 7.0-rc3 is out as the latest weekly test candidate ahead of the mid-April 7.0 stable release, delivering bug and regression fixes plus notable changes: a slab performance fix for a severe regression, broader hardware support via x86 platform drivers (Dell/ASUS/OneXPlayer/Lenovo), a ~1.5% network performance improvement on AMD Zen 2 with scoped user access, a battery reporting fix for the Apple Magic Trackpad 2, and security/topology updates including IBPB-On-Entry for SEV-SNP guest VMs and Sub-NUMA Clustering fixes for newer Intel CPUs. Linus Torvalds notes rc3 is big but not scary, helped by selftests making up a sizable portion of the patch, and he urges continued testing as the release cycle proceeds and Ubuntu 26.04 LTS timing factors in.

via Phoronix|
#amd-sev-snp#hardware-support#kernel
technology2 months ago

Linux 6.20/7.0 Preview: Major Kernel Upgrades on the Horizon

Phoronix previews the Linux 6.20 (likely 7.0) merge window, outlining a broad slate of changes—from AMD graphics and Intel TSX defaults to security/container hardening (OPEN_TREE_NAMESPACE), revocable resource management, IO_uring and batch I/O improvements, and various driver and build enhancements—plus Canonical aiming to ship the new kernel with Ubuntu 26.04 LTS.

via Phoronix|
#amd#intel#kernel
Linux: powerful, but not practical for everyday work
report2 months ago

Linux: powerful, but not practical for everyday work

Terrence O’Brien revisits Linux on a 2019 Dell XPS 15, finding that while Linux has improved for gaming, photo editing, and music software, it remains a fiddly, fragmented ecosystem with EFI issues, driver quirks, and a heavy reliance on terminal tweaks; even when things work, Steam, MIDI controllers, and DAWs can be finicky, leading him to conclude Linux is powerful but still more of a hobby than a ready-to-work OS—he ultimately needs an OS that “just works” for his workflow.

via theverge.com|
#gaming#hardware#linux
technology2 months ago

Rust Coreutils Pushes Toward Full GNU Compatibility Amid Ubuntu Adoption

Rust Coreutils is advancing toward full GNU Coreutils compatibility, with FOSDEM 2026 highlighting Ubuntu 25.10’s adoption, rapid bug fixes, and ongoing cross‑platform improvements; the project aims to mirror Rust‑based success for other Linux tools, supported by growing contributions and a slide deck/video from the talk available at fosdem.org.

via Phoronix|
#coreutils#fosdem#gnu-coreutils
One year in Linux, Windows feels like a distant memory
features2 months ago

One year in Linux, Windows feels like a distant memory

A Verge writer spends a year living on Linux—two distros across several desktop environments—learning to troubleshoot, customize everything, and rely on open-source tools. He grows to love Linux’s flexibility and community support, enjoys gaming via Proton, and replaces most Windows workflows, while acknowledging some downsides (anti-cheat games and certain apps). The piece argues Linux isn’t for everyone, but for those willing to tinker, it can truly fit “everything you want and nothing you don’t.”

via The Verge|
#customization#features#fedora
technology9 months ago

Disabling Intel Graphics Security Mitigations Enhances GPU Performance by 20%

Disabling Intel graphics security mitigations can improve GPU compute performance by up to 20%, and Canonical, in collaboration with Intel, plans to disable these mitigations in Ubuntu packages to enhance performance, with the change expected to be included in Ubuntu 25.10. This move is based on the understanding that the security risks are minimal, as Intel and Canonical have approved the change, and Intel's own builds already disable these mitigations for better performance.

via Phoronix|
#compute-runtime#gpu-performance#intel-graphics
"Microsoft Announces Ubuntu Promotion for Windows 10 Users"
technology2 years ago

"Microsoft Announces Ubuntu Promotion for Windows 10 Users"

Microsoft, in a playful April Fools' Day move, has added a "Try Ubuntu" button for Windows 10 users who are ineligible for the Windows 11 upgrade, acknowledging that maintaining older systems can be costly. This lighthearted suggestion comes amidst ongoing notifications and requirements for Windows 11 upgrades, prompting users to consider switching to Ubuntu if they cannot upgrade. While the move is in jest, it reflects the growing interest in Linux as an alternative operating system for users facing Windows upgrade challenges.

via It's FOSS News|
#linux#microsoft#technology