Attackers exploit SiteGuard WAF flaw for root and SYSTEM commands
Published 7:01 AM · 120 articles from 13 sources · about 6 min to read in full
IT & infrastructure
Linux 7.3 shipped and the 7.4 queue shows kernel hygiene work: a new taint flag, removal of dead ARM64 code, and a new file system proposal. Outside the kernel, timekeeping and domain registrar policies drew attention.
What happened
Linus Torvalds released Linux 7.3, which opens the 7.4 merge window the following day. Pending 7.4 changes include TAINT_FORCED_BIND and removal of big-endian ARM64 kernel build support, which Phoronix describes as rarely used and poorly maintained. LWN.net ↗
Timekeeping bodies have decided to stop adding leap seconds, citing the difficulty of updating IoT devices. The Register frames the change as heading off a new Y2K-style bug. The Register ↗
An RFC patch series proposes BeamFS, a new Linux file system that uses Reed-Solomon protection. It is only a proposal and has not been merged. Phoronix ↗
A Reddit sysadmin thread reports that Namecheap suspended and seized a user's domains without clear warning. This is one account, not a confirmed pattern, but it is a reminder of registrar concentration risk. Hacker News (front page) ↗
Linux kernel developers are cutting excessive cache flushing in Intel TDX when switching memory KeyIDs under MKTME, because the flushing proved unnecessary. Phoronix ↗
Mesa's RADV Vulkan driver now enables VK_EXT_host_image_copy by default on RDNA1 GPUs and experimentally on GFX9 hardware. Phoronix ↗
Jeff Pele's conference talk examines the challenges of building real-time software on Linux. The summary gives no detail beyond the topic. Lobsters ↗
Articles the model saw · 12
Microsoft confirmed October Windows Server security updates break OWA sign-in and mail flow on some Exchange servers.
BleepingComputermicrosoftexchangewindows-serverpatch-regressionFeed excerpt
Microsoft has confirmed that this month's Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems. [...]
Linux 7.3 kernel has been released, shared via Lobsters.
LobsterslinuxkernelreleaseFeed excerpt
Comments
Linus Torvalds releases Linux 7.3, opening the 7.4 merge window the following day.
LWN.netlinuxkernelreleaseFeed excerpt
Linus Torvalds has released the 7.3 kernel, as expected. It's Sunday afternoon, and this week I somehow kept my wits together long enough to keep track of the day of the week, so the release isn't randomly delayed. Will wonders never cease? Anyway, nothing very special seems to have happened this last week, so as expected the final 7.3 is out, and thus tomorrow the merge window for 7.4 opens. Except I'm on my annual family vacation, so instead of merging anything first thing in the morning, I'll spend most of the day on a boat and under water. I'll get back to merging in the afternoon, but I expect my schedule to be a bit unusual for a while. This release is a record-breaker on all fronts; it brought in 18,765 non-merge commits from 3,021 developers, 807 of whom were first-time kernel developers. Significant changes in this release include some significant binfmt_misc extensions, some group-scheduling work aimed at improving performance on large systems, the new failfs filesystem that fails all operations, the fchroot() system call, global per-CPU data for BPF programs, the completion of the sched_ext subscheduler feature, working-set tracking for virtual machines, alternative data…
Timekeeping bodies have decided to stop adding leap seconds, citing the difficulty of updating IoT devices.
The RegistertimestandardsiotFeed excerpt
Cite difficulty of updating IoT devices as major reason to stop adding time
An RFC patch series proposes BeamFS, a new Linux file system using Reed-Solomon protection.
Phoronixlinuxfilesystemopen-sourceFeed excerpt
There is yet-another-Linux-file-system attempt... An initial request for comments (RFC) patch series was sent out this morning for BeamFS. The proposed BeamFS is a Reed-Solomon protected file-system...
Linux 7.4 driver core pull request adds TAINT_FORCED_BIND to flag forced driver bindings amid AI-driven fuzzing of odd driver and hardware combinations.
PhoronixlinuxkernelfuzzingFeed excerpt
Among the early pull requests sent out in advance of the Linux 7.4 kernel merge window opening were the driver core updates. Standing out here is the new TAINT_FORCED_BIND for dealing with the recent major fuzzing "attack" by AI agents/bots testing impractical driver/hardware combinations...
A Reddit sysadmin thread reports Namecheap suspended and seized a user's domains without clear warning.
Hacker News (front page)domainsdnsregistrarFeed excerpt
Article URL: https://www.reddit.com/r/sysadmin/comments/1x8cycd/namecheap_just_seized_and_disabled_all_my_domains/ Comments URL: https://news.ycombinator.com/item?id=50142866 Points: 22 # Comments: 2
Linux kernel developers are reducing excessive cache flushing in Intel TDX when switching memory KeyIDs under MKTME, since the flushing proved unnecessary.
Phoronixlinuxintelconfidential-computingkernelFeed excerpt
Intel Trust Domain Extensions (TDX) for confidential computing with VMs has assumed the need to perform cache flushing when transitioning memory between KeyIDs used by the total memory encryption (MKTME) for unique AES encryption keys. But it's turned out to be unneeded and the Linux kernel is working now to reduce the excessive cache flushing...
Linux 7.4 removes big-endian kernel build support for 64-bit ARM, dropping rarely used and poorly maintained code.
Phoronixlinuxarm64kernelFeed excerpt
The ARM64 code for Linux 7.4 is stripping away its support for big-endian kernel builds for 64-bit ARM...
Mesa's RADV Vulkan driver now enables VK_EXT_host_image_copy by default on RDNA1 GPUs and experimentally on GFX9 hardware.
PhoronixlinuxvulkangpumesaFeed excerpt
Going back to July 2025 the open-source Radeon RADV Vulkan driver has offered experimental host image copy support with the API's VK_EXT_host_image_copy extension. This has been for RDNA1 and newer GPUs while now GFX10 RDNA 1 GPUs have this extension enabled by default while also enabling experimental support for prior GFX9 era GPUs too...
Paper proposes attested gateway provenance so clients can verify provider routing and fallback decisions for third-party LLM inference.
arXiv cs.CR (Cryptography & Security)llm-gatewayprovenanceattestationFeed excerpt
arXiv:2606.22560v2 Announce Type: replace Abstract: Third-party LLM gateways select providers, models, endpoints, and fallback paths while also authoring the records used to explain and bill those decisions. We present evidence-bound gateway-path provenance, which makes these decisions subject to client-verifiable request contracts. An attested mediation runtime intersects a signed service policy with the client's authorization, constructs provider-facing calls, and protects streamed responses. The contract distinguishes initial routes from fallback destinations and admits each transition only after an authorized failure. A signed close-out binds the execution trace, provider-reported usage, authorized pricing, and complete response. We formalize the protocol state machine and establish authorization preservation, execution and stream binding, charge integrity, and channel confidentiality relative to the public receipt metadata. The analysis also characterizes replay, runtime replacement, and the information disclosed by public payload commitments. Controlled software-path measurements show 0.442 ms paired p95 latency overhead at concurrency one, peak throughput of 10.65 thousand r…
Jeff Pele's conference talk examines the challenges of building real-time software on Linux.
Lobsterslinuxreal-timetalkFeed excerpt
Presentation by Jeff Pele at Software You Can Love Vancouver 2026 Comments