devtake.dev
AI Security Hardware Open Source Policy Apple
Company

Canonical

RSS
4 articles First covered Apr 23, 2026, latest May 10, 2026
Wiz Research's disclosure page for the Dirty Frag Linux kernel privilege escalation vulnerability
Security·

A nine-year-old Linux kernel bug gives root in one command. No patch exists yet.

Dirty Frag chains two page-cache flaws in the ESP and RxRPC subsystems into a deterministic privilege escalation that hits every major distro. A PoC exploit is public.

Canonical Ubuntu logo on the canonical.com homepage, illustrating the company affected by the May 2026 DDoS attack.
Security·

A DDoS knocked Ubuntu's update servers offline. The Copy Fail patch landed in the same 24-hour window.

The 313 Team flooded Canonical's infrastructure starting May 1, blocking apt updates and the Ubuntu security API just as admins needed both.

The Copy Fail launch graphic showing a stylized terminal prompt and the title text on a dark background.
Security·

'Copy Fail' lets a 732-byte script grab root on Ubuntu, RHEL, and SUSE. Patched April 29.

CVE-2026-31431 chains AF_ALG and splice() to write into the page cache of /usr/bin/su. Xint Code disclosed it on April 29, nine years after the bug shipped.

Ubuntu 26.04 LTS Resolute Raccoon desktop with GNOME 50
Open Source·

Ubuntu 26.04 LTS ships Wayland-only, Rust coreutils, and post-quantum SSH by default

Canonical released Ubuntu 26.04 'Resolute Raccoon' on April 23. It's the first LTS without X11, ships kernel 7.0 and GNOME 50, and sets post-quantum SSH on by default.