GoKawiil
Tech News
CISA added CVE-2026-46300, a Linux kernel privilege-escalation bug dubbed Fragnesia, to its Known Exploited Vulnerabilities catalog and ordered federal agencies to patch by Saturday. The flaw, found in the XFRM ESP-in-TCP subsystem, grants root access and can reportedly be chained with two critical PHP vulnerabilities known as PHP2Shell to install webshells on unpatched systems.
Alpine Linux said an attacker tried to exploit a critical GitLab vulnerability (CVE-2026-97229, CVSS 10.0) against its gitlab.alpinelinux.org instance on October 20-21, a week after a fix was released but before the instance was patched. The attempts crashed worker processes eight times and came close to succeeding, though the team found no confirmed evidence of a successful breach. As a precaution, the instance was rebuilt from scratch, all user passwords were reset, and the service is being tested before reopening to the public.
A new operating system called AlpineBSD has been introduced, pairing the NetBSD kernel and core utilities with a userspace inspired by Alpine Linux's apk-tools package manager and busybox. The project explicitly aims to avoid AI-generated code in its base system and main package repository, and currently has no installer, offering only a high-level manual installation guide. It uses the s6 init system rather than Alpine's OpenRC, with OpenRC support planned as an alternative.
Emacs, one of the earliest full-screen text editors, began running on video terminals at the MIT Artificial Intelligence Laboratory in 1976 and remains in active use today. It grew out of the TECO editing language created by Dan Murphy in 1962 and Carl Mikkelsen's 1971 Control-R extension, which let programmers see live edits on screen rather than reprinting lines. The software was later ported to many operating systems, including a version Apple shipped with Mac OS X.
A hacker using the handle Jordy on X found a hypervisor flaw that enabled running Linux on PlayStation 5 consoles using an AI LLM, reported it to Sony, and received a $50,000 bug bounty. Jordy had reportedly agreed to hold off reporting until after GTA VI's release, but submitted the report early after someone else discovered the same bug. Sony subsequently released firmware 14.20 on October 21, 2026, closing the exploit used by the ps5-linux-loader project.
Reddit's r/opensource community introduced new rules on October 24 requiring submitted projects to be at least a year old, have multiple contributors, and not be made by or intended for AI. Moderators argued that AI 'as it exists today' conflicts with open-source values, prompting an influx of critical comments and the creation of at least four rival subreddits, including r/OpenSourceAIAllowed and r/TrueOpenSource.
Offensive Security released Kali Linux 2026.3, the distribution's third update this year, adding six security tools including dalfox, katana, rustscan and snaffler-ng. The release also updates 126 packages, upgrades the kernel to 7.1.5, and bundles KDE Plasma 6.7 with new icons and refreshed build scripts.
A new Linux Foundation Research study found that 59% of open-source maintainers report rising contribution volumes since generative AI tools became widespread, with about 25% of incoming pull requests judged low-quality or 'AI slop.' On larger projects the figures were higher, with 69% seeing growth in contributions and 31% deemed low-quality. The survey of 234 contributors and maintainers also found 64% saying reviews now take longer, with burnout and declining contribution quality cited as top concerns.
Aurelien Desbrieres has submitted an 18-patch proposal for BeamFS, a new Linux filesystem that embeds Reed-Solomon error-correcting codes into every data block rather than relying on redundant copies like Btrfs or ZFS. He is seeking feedback, not a merge, after earlier proposing a related filesystem called FTRFS in April. Desbrieres has also disclosed that he used Anthropic's Claude AI to write the code, patch-checking tool, and cover letter.
Aging Chromebooks that no longer perform well can still serve useful purposes rather than being discarded. By installing Linux, users can turn them into file or media servers running apps like Plex or Jellyfin, or into dedicated retro gaming machines using the Batocera emulator suite. Alternatively, ChromeOS's built-in Linux feature, Crostini, lets users run a Linux virtual machine without replacing the operating system, though with more limited performance.
Moderators of the Reddit community r/opensource issued new submission rules Saturday prohibiting any project that uses AI, is built by AI, or is intended for AI use. The rules also require submitted projects to be at least a year old, actively maintained, and have multiple contributors, and state that non-English speakers should find another community since moderators cannot verify translations.
SpeedCrunch, a free and open-source high-precision scientific calculator, has released version 1.1. The software is available for download on Windows, macOS, and Linux, along with a user manual, and is aimed at STEM professionals, students, and teachers.