Linux

Обход изоляции памяти на системах с CPU AMD через манипуляции с контроллером памяти

На конференции Black Hat 2026 продемонстрирован метод атаки, использующий swizzle-режим контроллеров памяти AMD для обхода изоляции памяти и чтения или записи произвольных данных из памяти, включая области с микрокодом CPU и память, выделенную PSP-процессору (Platform Security Processor). Метод позволяет обойти встроенные механизмы шифрования памяти (AMD SME/SEV), нарушить изоляцию виртуальных машин и перезаписать микрокод процессора. Для манипуляций с контроллером памяти требуется выполнение кода на уровне ядра, что снижает опасность представленной техники атаки.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66079

📰 The Beneficial Performance Gains Running The Framework Laptop Pro 13 / Core Ultra X9 388H With Linux 7.1+

The recently launched Framework Laptop 13 Pro powered by Intel Core Ultra Series 3 "Panther Lake" runs well on Ubuntu 26.04 LTS and other modern Linux distributions. In the case of Ubuntu 26.04 with Linux 7.0, while everything works, if upgrading to Linux 7.1 or the upcoming Linux 7.2 kernel is even better performance. Here are benchmarks of the Framework Laptop 13 Pro with Core Ultra X9 388H across the Linux 7.0, 7.1, and 7.2 kernels.

🔗 Source:

#intel #kernel #linux #ubuntu

👉@sysadminoff

https://www.phoronix.com/review/framework-13-pro-linux-71-72

Для KDE Plasma 6.6 обеспечено сопровождение в течение 3 лет

Организация KDE e.V., совместно компаниями Kubuntu Focus и Techpaladin Software, представила инициативу по обеспечению LTS-поддержки ветки KDE Plasma 6.6, подразумевающую формирование исправлений в течение как минимум трёх лет.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66078

📰 NVIDIA GeForce NOW cloud gaming for Linux levels up and leaves Beta

Cloud gaming on Linux levels up officially today with the full release of the NVIDIA GeForce NOW app for Linux after being in Beta since January.Read the full article on GamingOnLinux.

🔗 Source:

#linux

👉@sysadminoff

https://www.gamingonlinux.com/2026/08/nvidia-geforce-now-cloud-gaming-for-linux-levels-up-and-leaves-beta/

Grok 4.6 turns xAI into a serious coding-model contender

Matthew Berman says Grok 4.6 is xAI’s biggest step forward yet, combining strong coding and knowledge-work performance with lower pricing than leading competitors. The model is available through Cursor, Grok Build, its API, OpenRouter, Vercel, and Cloudflare, while Grok 4.7 is reportedly only weeks away.
Source

👉@sysadminoff

https://4sysops.com/archives/grok-4-6-turns-xai-into-a-serious-coding-model-contender/

NVIDIA опубликовала стабильный выпуск Linux-клиента для игрового сервиса GeForce NOW

Компания NVIDIA представила первый стабильный выпуск приложения для платформы Linux, позволяющего подключаться к облачному сервису GeForce NOW, обеспечивающему запуск игр на серверах NVIDIA с трансляцией ввода/вывода на систему пользователя. При помощи приложения пользователь получает доступ в виртуальному игровому компьютеру с видеокартой NVIDIA RTX 5080, поддерживающему удалённый доступ с разрешениями 1440p и 4K и частотой кадров 60 или 120 FPS.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66077

📰 MSI Claw Gamepad Driver Set To Be Merged For Linux 7.3

The MSI Claw Gamepad driver is set to be merged for the upcoming Linux 7.3 kernel for enabling RGB lighting and controller configuration support with the mainline kernel...

🔗 Source:

#kernel #linux

👉@sysadminoff

https://www.phoronix.com/news/MSI-Claw-Gamepad-Linux-7.3

Выпуск музыкального проигрывателя Qmmp 2.4

Опубликован выпуск музыкального проигрывателя Qmmp 2.4. В состав плеера входит два интерфейса: "простой", с использованием стандартных элементов, и "классический", который копирует интерфейс Xmms/Winamp/Audacious. Для вывода звука могут использоваться OSS4 (FreeBSD), ALSA (Linux), Pulse Audio, JACK, QtMultimedia, Icecast, WaveOut (Win32), DirectSound (Win32) и WASAPI (Win32). Код написан на языке C++ с использованием библиотеки Qt и распространяется под лицензией GPLv2. Готовые пакеты сформированы для Ubuntu.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66076

📰 Omarchy Bets Its Future on AI Agents While the Linux World Stays Cautious

While some open source projects are locking AI out of their codebases, Omarchy's upcoming v4 release treats AI as part of the system.

🔗 Source:

#linux #opensource

👉@sysadminoff

https://feed.itsfoss.com/link/24361/17417194/omarchy-ai-agent-focus

Configure Azure Private Link over IPv6

Azure Private Link over IPv6 is a public preview that lets an IPv6 client reach selected Azure platform-as-a-service (PaaS) resources through a private endpoint. A private endpoint is a network interface with a private address in your Azure virtual network that represents a specific service resource. This article explains what PaaS means, how private access worked before this preview, the practical benefits of IPv6, and the configuration requirements and preview limitations you need to consider.
Source

👉@sysadminoff

https://4sysops.com/archives/configure-azure-private-link-over-ipv6/

📰 Linux Patches Enable Apple M4 NVMe Support

While the Apple M4 SoCs aren't yet supported by the mainline Linux kernel and the Apple M3 series hardware isn't yet ready for end-users, there are some early elements of the Apple M4 support beginning to come together by open-source developers working on the Apple Silicon support. Sent out to the Linux kernel mailing list were patches for enabling NVMe solid state drive support with the M4...

🔗 Source:

#kernel #linux #opensource

👉@sysadminoff

https://www.phoronix.com/news/Linux-Apple-M4-NVMe-Patches

DeepSeek V4-Pro launches as a cheaper GPT-5.6 Sol alternative with open Harness

Our earlier analysis of DeepSeek V4-Flash 0731 examined the company’s low-cost model alongside OpenAI’s GPT-5.6 Luna. DeepSeek has now released the new V4-Pro-0813, an upgraded flagship that delivers slightly lower performance than OpenAI’s GPT-5.6 Sol on broad intelligence benchmarks while costing substantially less. The release also introduces the MIT-licensed DeepSeek Harness agent framework.
Source

👉@sysadminoff

https://4sysops.com/archives/deepseek-v4-pro-launches-as-a-cheaper-gpt-5-6-sol-alternative-with-open-harness/

Azure IoT gets TLS 1.3, passwordless provisioning, and secure updates

Microsoft is rolling out three Azure IoT security changes with different readiness levels: TLS 1.3 for IoT Hub and managed-identity authentication between Device Provisioning Service and IoT Hub are in public preview, while HTTPS downloads for Device Update are generally available. The earlier Microsoft security overhaul focused on Cloud Solution Providers; this previous coverage addresses a separate Azure IoT security update.
Source

👉@sysadminoff

https://4sysops.com/archives/azure-iot-gets-tls-1-3-passwordless-provisioning-and-secure-updates/

📰 Make sure your Flatpak is up to date due to security issues

Version 1.18.1 and 1.19.0 pre-release rolled out for Flatpak, due to some security issues that were found so it's an essential update for all Linux systems.Read the full article on GamingOnLinux.

🔗 Source:

#flatpak #linux

👉@sysadminoff

https://www.gamingonlinux.com/2026/08/make-sure-your-flatpak-is-up-to-date-due-to-security-issues/

Zoom patches ‘Zoomsday’ flaw after AI-built exploit takes over meeting devices

A critical Zoom annotation flaw let any meeting participant silently take over other attendees’ devices, and researchers built a working exploit with fewer than 20 AI prompts in less than a day. Earlier Zoom security coverage focused on a separate Windows account-takeover bug in an earlier vulnerability.
Source

👉@sysadminoff

https://4sysops.com/archives/zoom-patches-zoomsday-flaw-after-ai-built-exploit-takes-over-meeting-devices/

📰 Microsoft's Azure Linux 3.0.20260809 Ships With 233+ CVE Fixes

While Microsoft continues working on Azure Linux 4.0 as its overhauled Linux distribution built atop Fedora, Azure Linux 3.0 remains the current stable production series. Released overnight was Azure Linux 3.0.20260809 and it comes with more than 233 security patches for recent CVEs in the AI era...

🔗 Source:

#fedora #linux

👉@sysadminoff

https://www.phoronix.com/news/Azure-Linux-3.0.20260809

VMware vCenter compromised through critical CVE-2026-59310 path-traversal flaw

VMware vCenter systems are being actively compromised through the critical CVE-2026-59310 path-traversal flaw, with 361 victim IP addresses identified across 47 countries. Attackers are installing cron jobs, SSH keys, and the reverse_ssh tool to maintain access after exploiting the vCenter Syslog Server.
Source

👉@sysadminoff

https://4sysops.com/archives/vmware-vcenter-compromised-through-critical-cve-2026-59310-path-traversal-flaw/

GeForce Now’s Linux app drops its beta tag, gets Flatpak repo

GeForce Now’s native Linux app has exited beta after seven months of testing, with official support for Ubuntu 24.04 LTS and later. The app is a frontend for Nvidia’s game streaming service, with over 4,500 PC titles running in the cloud on Nvidia servers. Users get GeForce RTX-class performance, ray tracing and DLSS without the need to own the relevant hardware. In a blog post to announce its ‘graduation’ from beta, Nvidia say GeForce NOW for Linux has picked up “performance, stability and polish” improvements thanks to community feedback during the beta test period. The company also touches on some […]
You're reading GeForce Now’s Linux app drops its beta tag, gets Flatpak repo, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

👉@sysadminoff

https://www.omgubuntu.co.uk/2026/08/nvidia-geforce-now-linux-stable

‍В процессорах Loongson для Linux-систем обнаружили аппаратную утечку данных из L1-кеша

Исследователи из немецкого Центра информационной безопасности имени Гельмгольца CISPA представили на конференции USENIX Security 2026 аппаратную уязвимость LoongLeak, обнаруженную в китайских процессорах Loongson 3A5000 и Loongson 3A6000. Непривилегированная программа может использовать её для извлечения оставшихся в кеше первого уровня данных других процессов, ядра операционной системы и гипервизора. Атака также возможна из контейнера или гостевой виртуальной машины.
Практическое значение уязвимости связано прежде всего с Linux и другим свободным ПО. Для LoongArch существует отдельный порт в основном ядре Linux, а Debian уже включил loong64 в число официальных архитектур с планом выпуска в составе Debian 14. Поддержку архитектуры также развивают другие Linux-дистрибутивы и проекты открытого системного ПО.
( читать дальше... )



 cve, loongson, безопасность

👉@sysadminoff

https://www.linux.org.ru/news/security/18358706

📰 Intel’s Linux Vulkan Driver Adds AV1 Video Encoding for Arc Alchemist GPUs

by George WhittakerIntel’s open-source Linux graphics stack has taken another step forward with hardware-accelerated AV1 encoding through Vulkan Video. New code merged for Mesa’s ANV Vulkan driver enables the VK_KHR_video_encode_av1 extension on Intel’s DG2/Alchemist graphics hardware, including Arc A-Series GPUs.The development expands Intel’s Vulkan Video capabilities on Linux and gives applications another standardized way to access the...

🔗 Source:

#intel #linux #opensource

👉@sysadminoff

https://www.linuxjournal.com/content/intels-linux-vulkan-driver-adds-av1-video-encoding-arc-alchemist-gpus