440 CVEs dropped to kernel cve-announce in the last 24 hrs?!?!?!?
Whoa, calm thy horses! It looks like a backlog dump of resolved issues all sequentially numbered. No RCEs and all resolved.

#minimalist #Linux #Selfhosting #selfhosted #selfhost #InfoSec #Exploit

I'm not running Gitea, but Forgejo. Here is a write up of the Gitea CVE's that are still embargoed for Forgejo. Regardless, they need to be patched! Make it a priority.
https://hivesecurity.gitlab.io/blog/gitea-forgejo-nine-cves-1263-security-release-2026/ #minimalist
#Linux #Selfhosting #selfhosted #selfhost #InfoSec
#Exploit

The "weaponization watch" script pulled up two Debian-13 kernel root exploits with public PoCs that the KEV list doesn't include:
CVE-2026-46331 "pedit COW" weaponized sometime around 6/16, unprivileged user to root on Debian 13 trixie (the user namespaces is open by default).
RHEL 10 is also in scope (again, local priv escalation not remote.)
CVE-2026-46333: ptrace logic flaw, local root + credential disclosure, exploits circulating.
Then from yesterday:
DirtyClone (CVE-2026-43503) confirmed against Debian.

#minimalist #Linux #Selfhosting #selfhosted #selfhost #InfoSec

This one seems interesting.
Podman CVE-2026-57231
A malicious container image with a malformed Env entry (a key with no value) can trick podman run into leaking the host environment variables into the container. The wildcard glob makes it worse, it can return all host env vars from the launching session without knowing their names.
#minimalist
#Linux #Selfhosting #selfhosted #selfhost #InfoSec
#Exploit

I was chatting with a red teamer friend recently about Windows exploitation by process injection.
My knowledge is probably very dated compared to what is current.
I'd had a couple classes on the topic, but it wasn't an area that I show great skill in.
But, the recent dialogue had me thinking about my entire personal infrastructure is Linux and I do not have commercial enterprise endpoint detections enabled on them.
As I said, personal infrastructure.
For Exploitation.. In Windows, I'd fire up vmmap/rammap from Sysinternals and look for processes with vulnerable memory.
How do I do the same on Linux? It's all listed in /proc somewhere. Wow this lead me down a rabbit hole.

The results of testing my local Linux daily driver are concerning!

#0-day #exploit #minimalist #Linux #Selfhosting #selfhosted #selfhost #InfoSec #injection #memory