Linux - 1

2026 (7)

May (3)

k8s: Kubernetes v1.36: PSI Metrics for Kubernetes Graduates to GA

Kubernetes Official Blog

2026-05-12

Kubernetes v1.36 graduates PSI metrics to GA for observing CPU, memory, and I/O pressure at node, pod, and container levels. The update also improves metric handling by suppressing zero-valued PSI output when the underlying Linux node does not support PSI.

security: Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

Microsoft Security Blog

2026-05-08

Dirty Frag is a Linux local privilege escalation vulnerability in kernel networking and memory-fragment handling paths such as esp4, esp6, and rxrpc. Microsoft says it has seen limited in-the-wild exploitation and that Defender provides detection coverage.

security: CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments

Microsoft Security Blog

2026-05-02

Microsoft says CVE-2026-31431 (“Copy Fail”) is a high-severity Linux vulnerability that can be used for root privilege escalation across cloud and Kubernetes environments. The post says a working exploit is already in the wild and urges organizations to detect and mitigate quickly.

April (4)

k8s: Kubernetes v1.36: In-Place Vertical Scaling for Pod-Level Resources Graduates to Beta

Kubernetes Official Blog

2026-04-30

Kubernetes v1.36 graduates in-place vertical scaling for Pod-level resources to Beta. Running Pods can now have their aggregate .spec.resources updated, with Kubelet deciding per-container whether to apply cgroup changes in place or restart containers based on resizePolicy.

k8s: Kubernetes v1.36: User Namespaces in Kubernetes are finally GA

Kubernetes Official Blog

2026-04-23

Kubernetes v1.36 makes User Namespaces GA on Linux, allowing Pods to run with hostUsers: false so container root is isolated from host root. The release also relies on ID-mapped mounts to avoid recursive chown on volumes, improving startup performance and preserving on-disk ownership.

dotnet: What’s new for .NET in Ubuntu 26.04

.NET

2026-04-23

Ubuntu 26.04 ships with .NET 10. The post explains how to install .NET 10 from the Ubuntu archive, use the new `-resolute` container tags, build Native AOT apps, and install .NET 8 and 9 from the `dotnet-backports` PPA.

security: Cookie-controlled PHP webshells: A stealthy tradecraft in Linux hosting environments

Microsoft Security Blog

2026-04-02

Microsoft describes a Linux-hosting intrusion technique where PHP webshells are triggered by specially crafted HTTP cookies. The post covers obfuscation, php-fpm execution, and cron-based persistence used to hide activity and maintain access.