1.18.0-6.1+deb11u6
1.22.1-9+deb12u7
1.26.3-3+deb13u5

haveged 1.9.21 fixes a local root exploit

Fix privilege escalation via command socket (CVE-2026-41054) - the uid check sent a NAK to non-root callers but did not exit the function, allowing unprivileged local users to send commands to the root-running daemon via the abstract UNIX socket.

Problem was found by Gemini Pro, operated by Dirk Mueller of SUSE.
https://bugzilla.suse.com/show_bug.cgi?id=1264086

https://www.openwall.com/lists/oss-security/2026/05/19/3

V12Sec: PinTheft is a Linux local privilege escalation exploit for an RDS zerocopy double-free that can be turned into a page-cache overwrite through io_uring fixed buffers.

The bug lived in the RDS zerocopy send path. rds_message_zcopy_from_user() pins user pages one at a time. If a later page faults, the error path drops the pages it already pinned, and later RDS message cleanup drops them again because the scatterlist entries and entry count remain live after the zcopy notifier is cleared. Each failed zerocopy send can steal one reference from the first page.

The PoC uses io_uring to make that refcount bug useful. It registers an anonymous page as a fixed buffer, giving the page a FOLL_PIN bias of 1024 references. It then steals those references with failing RDS zerocopy sends, frees the page, reclaims it as page cache for a SUID-root binary, and uses the stale io_uring fixed-buffer page pointer to overwrite that page cache with a small ELF payload. Executing the SUID binary drops into a root shell.

Sadly, the RDS kernel module this requires is only default on Arch Linux among the common distributions we tested.

https://github.com/v12-security/pocs/tree/main/pintheft
https://x.com/v12sec/status/2056730095658959061

bullseye's linux-6.1: 6.1.172-1~deb11u1

Google I/O 2026：反正 2026 年的科技公司发布会就是 AI 和模型发布会罢。

- Gemini 3.5 Flash 模型发布。Google 说它很强，Simon 说它很贵 [1]。有多贵？差不多是 Gemini 3.1 Pro 那么贵。
- 所谓全模态但现在是生成视频的 Gemini Omni 模型；YouTube Shorts/YouTube Create app 上可以免费用。
- WebMCP 标准发布；开发者现可使用 chrome://flags 的 enable-webmcp-testing 启用该特性，并使用 Inspector 插件基于网页提供的 MCP 与 LLM 进行对话和操作（需自带 Gemini API key）。
- Chrome DevTools for agents 发布。
- 以及大家都知道的玩意儿：Google AI 搜索、AI 图片暗水印 C2PA、
- 喔对了，Gemini CLI 会在 6/18 停止服务；Google 建议换用 Antigravity CLI。 [2]

blog.google/~

1. https://simonwillison.net/2026/May/19/gemini-35-flash/
2. developers.googleblog.com/~

#Google

Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately.

Our current assessment is that the activity involved exfiltration of GitHub-internal repositories only. The attacker’s current claims of ~3,800 repositories are directionally consistent with our investigation so far.

https://fixupx.com/i/status/2056949168208552080

Introducing nginx-poolslip, a fresh RCE for the the latest nginx release 1.31.0.

https://x.com/i/status/2057071579876753643

Fedora 移除深度桌面环境包

2026-05-20 18:43 by 基因先知者

在 openSUSE 之后，Fedora 发行版移除了深度桌面环境包（Deepin Desktop）。2025 年初 SUSE 安全团队在一次例行审查中发现深度桌面环境有名叫 deepin-feature-enable 的软件包，该软件包是在 2021 年 4 月加入的，并没有咨询或通知 SUSE，它包含了一个“许可协议对话框（license agreement dialog）”，基本上说讲因为 openSUSE 的安全规定，它禁用了 deepin-api 和 deepin-daemon 需要的所有 dbus 和 polkit 功能，这可能导致 Deepin Desktop 不能正常工作，部分功能无效。如果用户不在意这些安全问题，可选择点击确认，之后会自动安装缺少的 dbus 和 polkit。安全团队的调查发现，deepin-daemon 中的核心组件从未递交进行安全审查，它们被悄悄的引入到了 openSUSE 中。鉴于 Deepin 社区过去几年多次违规，openSUSE 决定移除 Deepin Desktop。Fedora 项目随后也对深度桌面环境包展开安全审查，期间开发者发现难以联系部分深度软件包的维护者，因为安全担忧和软件包缺乏维护，它最终决定移除深度桌面环境。

https://pagure.io/fesco/issue/3409
https://www.phoronix.com/news/Fedora-Removing-Deepin

#Redhat

PinTheft is CVE-2026-43494

GET http://foo/ HTTP/1.1 <- Used for virtual host routing
User-Agent: UA
Host: bar <- Used for $http_host

Debian's proxy_param file used to use $http_host:

proxy_set_header Host $http_host;

https://bugs.debian.org/1126960
https://seclists.org/oss-sec/2026/q2/645

Single-Click Code Execution Exploit for Evince, Atril, and Xreader

CVE-2026-46529 is an argument injection vulnerability in Evince, Atril, and Xreader caused by missing shell quoting when composing a command line.

The vulnerability is fixed in:

Evince 48.4 (fix commit) (I originally reported that it is fixed in 48.2, but there was no successful release for that tag)
Atril 1.28.4 and 1.26.3 (fix commit)
Xreader 4.6.4 and 3.6.7 (fix commit)

https://blogs.gnome.org/mcatanzaro/2026/05/21/single-click-code-execution-exploit-for-evince-atril-and-xreader/
https://medeiros.zip/posts/CVE-2026-46529-evince

Cloudflare 针对 Mythos 模型发布了评测报告，提出了他们自己的一些使用大模型进行安全审查的 Harness 思考，可以空闲的时候当阅读材料看一看：
https://blog.cloudflare.com/cyber-frontier-models/

这篇文章好像有点 PR 的感觉了
xbow 的这篇更中性一点: https://xbow.com/blog/mythos-offensive-security-xbow-evaluation

It passes
Hand touch

https://fxtwitter.com/i/status/2057487876183760945

To: oss-security@lists.openwall.com                                                                                                                            
Subject: [oss-security] CVE-2026-45250: FreeBSD setcred(2) stack overflow -> local privilege escalation (FatGid)                                               
User-Agent: Mozilla Thunderbird                                                                                                                                
                                                                                                                                                               
A kernel stack buffer overflow exists in the setcred(2) system call                                                                                            
introduced in FreeBSD 14.x.  The overflow occurs before any privilege                                                                                          
check, allowing any unprivileged local user to trigger anything from a                                                                                         
kernel panic to full local privilege escalation.                                                                                                               
                                                                                                                                                               
Working LPE exploits have been developed and verified end-to-end                                                                                               
against amd64 GENERIC, both with and without SMAP/SMEP enabled.  The                                                                                           
SMAP/SMEP-safe variant requires no kernel info-leak; it only requires                                                                                          
that zfs.ko be loaded -- the typical case on any FreeBSD installation                                                                                          
with a ZFS pool.  

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:18.setcred.asc
https://www.openwall.com/lists/oss-security/2026/05/21/3

在 FreeBSD 14.4-RELEASE 可造成提权，FreeBSD 15.0 可造成 panic 但无法提权。FreeBSD main 已由 commit 4cd93df95e (2025-11-14) 修复，FreeBSD 13.x 及更早的版本不存在 setcred(2)，不受影响。