Linux News Digest (Sept 22, 2026): Dangerous KVM Guest Escape Vulnerability, Cache-Aware Scheduling Fixes, and VRR Limiter Proposed

 Grab whatever cold food you have left, pull up your terminal, and let's run through the absolute biggest technical dramas and system updates that broke the internet over the past 24 hours.

1. New KVM Exploit Allows Complete Virtual Machine Escape on ARM64
Let’s start with a massive security disaster that has enterprise sysadmins and cloud engineers losing their minds. A security researcher just officially disclosed CVE-2026-89775, a severe vulnerability in the Linux kernel’s KVM (Kernel-based Virtual Machine) subsystem for ARM64 architectures. [1]
  • The Nightmare Scenario: If you are running nested virtualization, an attacker inside a guest virtual machine can exploit a missed invalidation bug to completely escape to the host operating system and run arbitrary code on the underlying metal. [1]
  • The Local Root Path: Even worse for local users, on systems where any local user can access /dev/kvm (which Red Hat Enterprise Linux 10 does by default), a basic user can spawn a guest and abuse the same bug to trigger local privilege escalation to full root access. [1]
  • Who is Vulnerable: The bug affects mainline kernels starting from version 6.17. Ubuntu 26.04 AWS/GCP instances are vulnerable, alongside Red Hat Enterprise Linux 10. Mainline patches have been rolled out in Linux 7.3-rc1, 7.2.5, and 6.18.51. If you are hosting local VMs on ARM64, update your kernel immediately before your environment gets pwned. [1]
2. Cache-Aware Scheduling Bugs Panic-Fixed for Linux 7.3 and 7.2
For the system performance purists, Intel engineers have been frantically patching bugs in the kernel scheduler. The upcoming Linux 7.3 kernel cycle (and stable Linux 7.2 backports) just pulled in urgent fixes for Cache-Aware Scheduling (CAS). [1]
  • Why this matters: Cache-Aware Scheduling is supposed to group related execution tasks together on CPU cores that share the same Last Level Cache (LLC), preventing massive latency hits and "cache bouncing". [1]
  • The Bug: The implementation in 7.2 was buggy, causing erratic thread migrations and breaking multi-threaded workloads on hybrid CPUs. The new urgent patches force the scheduler to properly keep tracking domains runnable, refresh cache capacity across CPU hotplugs, and skip unnecessary kernel threads. If you want your CPU to actually perform at its spec limits without random latency spikes, you’ll need these patches backported to your distro soon. [1]
3. Variable Refresh Rate (VRR) Target Limiter Proposed for Linux Graphics Drivers
Gamers and display elitists, listen up. An official Request for Comments (RFC) was submitted to the Linux kernel graphics development mailing list, proposing a standardized Variable Refresh Rate (VRR) Target Limiter and Quick Media Switching (QMS) API. [1]
  • The Problem: In the real world, letting VRR run completely unlocked across a display's entire frequency range causes visible, highly annoying brightness flicker when frame rates drop too drastically or spike suddenly.
  • The Solution: The new patches implement a "Game Mode" VRR helper that constrains the refresh rate to a specific fixed target or a strict, tight range. This gives you judder-free, low-latency rendering without the hardware-induced flickering mess. Initial implementations are targeted at HDMI state helpers and the Rockchip RK3588 driver, with code already being pushed to Wayland's Weston compositor reference branch. [1]
Quick Hits from the Underground:
  • YSERVER 1.6 Released: The Rust-based X11 server project, famously built with the assistance of AI coding agents, just dropped version 1.6. It brings full XDMCP support for multi-user shared high-performance computing (HPC) desktop environments, allowing remote logins over TCP. Still no IPv6 support, but a massive win for legacy thin-client setups running on modern Rust code.
  • Mozilla Firefox 156.0.1 Out Now: A minor bugfix release dropped today, specifically fixing a massive annoyance for Linux and macOS users where double-clicking the title bar would cause maximized windows to immediately glitch out

Comments

Post a Comment

Popular posts from this blog

SME Server 11 Alpha 1 Released – A New Update for Small and Medium Enterprises

Terry Fage has announced the availability of the SME Server 11 Alpha 1 snapshot, marking a significant update for the Rocky Linux-based server distribution, specifically designed for small and medium-sized enterprises . The Koozali development team is excited to introduce this major release, which is built on Rocky Linux 8.10 . Key Features and Updates in SME Server 11 Alpha 1: Updated System : The system now includes several enhancements, including a shift to Mojolicious for the management interface and the integration of Roundcube for webmail. Longstanding Templating System : SME Server continues to offer the easy-to-use and robust templating system that has long been a staple of the platform. Numerous Improvements : Various updates and optimizations have been made to improve functionality and performance. SME Server 11 is developed and maintained by the Koozali Foundation, Inc. , a non-profit organization that provides marketing and legal support for SME Server. This update is st...
Read more

Lenovo ThinkPad X1 Carbon Review: Is this overhyped corporate garbage actually the ultimate Linux machine for basement dwellers?

  My desk is covered in empty energy drink cans, my hair hasn't seen shampoo in a week, and my terminal is the only light source in this room. Let’s talk about the absolute holy grail of imageboard technology: the Lenovo ThinkPad. If you spend more than five minutes on any anonymous tech forum, you’ll see normies and corporate wagies drooling over this specific laptop line. They call it the ultimate business machine. Gross. But we, the intellectual elite of the internet, only care about one crucial question: What is the best Linux distro for ThinkPad X1 Carbon, and does it actually work out of the box? I bought a refurbished model with my lunch money, completely wiped the disgusting Windows partition, and spent a month testing it in my natural habitat (a pitch-black basement). Here is the unhinged, completely unfiltered ThinkPad X1 Carbon Linux hardware compatibility review you actually need. Lenovo ThinkPad X1 Carbon Linux Compatibility: The Honest Truth Let's debunk the corpo...
Read more

EndeavourOS 2025.02.08 "Mercury"

Image
Bryan Poerwo has announced the release of EndeavourOS 2025.02.08 , code-named "Mercury" , bringing a host of exciting updates and improvements to the Arch Linux-based desktop distribution. This significant update introduces several key features and enhancements to the ISO image, which is available for both live environments and offline installations . New Features and Improvements: Calamares 25.02.1.4 : The installer is updated to the latest version, ensuring a smoother installation process. Firefox 135.0 : The latest version of the popular web browser, bringing security and performance improvements. Linux Kernel 6.13.1 : Updated kernel offering improved hardware support and overall system performance. Mesa 24.3.4 : This update brings enhancements to graphics performance and compatibility. X.Org Server 21.1.15-1 : A new version of the X server, improving graphical stability and performance. NVIDIA 570.86.16 : Updated drivers for NVIDIA graphics cards, ensuring optimal perfor...
Read more