Anderson Nascimento

perf/core: Prevent VMA split of buffer mappings · torvalds/linux@b024d7b The perf mmap code is careful about mmap()'ing the user page with the ringbuffer and additionally the auxiliary buffer, when the event supports it. Once the first mapping is established, subseq...

perf/core: Prevent VMA split of buffer mappings

github.com/torvalds/lin...

[PATCH RFC] help: Add 'help -l' to show memory layout

lists.crash-utility.osci.io/archives/lis...

oss-sec: Linux kernel: eBPF vulnerabilities

Linux kernel: eBPF vulnerabilities

seclists.org/oss-sec/2025...

Taint Me Like One of Your fetch cURLs

Discovering IoT CVEs at scale with binary pointer alias analysis and compiler theory

raw.githubusercontent.com/attilaszia/s...

hashcat v7.0.0

hashcat.net/forum/thread...

The Thermodynamics of Trading with Daniel Pontecorvo | Signals and Threads Daniel Pontecorvo runs the “physical engineering” team at Jane Street. This group blends architecture, mechanical engineering, electrical engineering, and construction management to build functional p...

The Thermodynamics of Trading with Daniel Pontecorvo

signals-threads.simplecast.com/episodes/the...

📲 Debugging the Pixel 8 kernel via KGDB Instructions for getting kernel log, building custom kernel, and enabling KGDB on Pixel 8

Documented instructions for setting up KGDB on Pixel 8.

Including getting kernel log over UART via USB-Cereal, building/flashing custom kernel, breaking into KGDB via /proc/sysrq-trigger or by sending SysRq-G over serial, dealing with watchdogs, etc.

xairy.io/articles/pix...

Go Assembly Mutation Testing Test coverage of delicate Go cryptographic assembly through a new mutation testing framework.

Go Assembly Mutation Testing

words.filippo.io/assembly-mut...

#357 ‒ A new era of longevity science: models of aging, human trials of rapamycin, biological clocks, promising compounds, and lifestyle interventions | Brian Kennedy, Ph.D. “I really think that all of these interventions that we're looking at are restoring dynamic range…We're restoring things that happened when you were young.” —Brian Kennedy

#357 ‒ A new era of longevity science: models of aging, human trials of rapamycin, biological clocks, promising compounds, and lifestyle interventions | Brian Kennedy, Ph.D.

peterattiamd.com/briankennedy/

323 | Jacob Barandes on Indivisible Stochastic Quantum Mechanics

www.preposterousuniverse.com/podcast/2025...

Increased reports since 6.15.3 of corruption within the log tree

lore.kernel.org/linux-btrfs/...

Linux 6.16

lore.kernel.org/lkml/CAHk-=w...

The Joy of Why Most cosmologists agree that our universe had a beginning. But the finer details about the Big Bang remain a mystery. A history of everything would explain all, or so theoretical physicists hoped. In ...

The Joy of Why | Why Did The Universe Begin?

play.prx.org/listen?ge=pr...

Train brake hack, GRU sanctions, Wagner war crimes, Microsoft's Chinese ‘digital escorts’ - Security Conversations Three Buddy Problem – Episode 54: Europol busted pro‑Russian hacktivist crew NoName 057(16), the Brits announce sanctions on Russia’s GRU cyber units, Wagner‑linked “war influencers” streamed atrociti...

Train brake hack, GRU sanctions, Wagner war crimes, Microsoft’s Chinese ‘digital escorts

securityconversations.com/episode/trai...

XFS - Atomic File Content Exchange in UEK8

blogs.oracle.com/linux/post/x...

posix: Fix double-free after allocation failure in regcomp

sourceware.org/pipermail/li...

[RFC v3] fuse: use fs-iomap for better performance so we can containerize ext4

lore.kernel.org/all/20250717...

[RFC] New codectl(2) system call for sframe registration

lore.kernel.org/all/2fa31347...

Triaging CVEs for the Linux Kernel

Automating the assessment of Kernel Vulnerabilities

Slides: opensource.siemens.com/events/2025/...

Video: youtu.be/YAJOPgehFT0

New APIs for name lookup and lock for directory operations [LWN.net]

lwn.net/Articles/103...

XFS - Directory Parent Pointers in UEK8

blogs.oracle.com/linux/post/x...

research/CVE-2023-52922 at master · alleleintel/research Research developed by Allele Security Intelligence. - alleleintel/research

For code 1, we replaced the reallocation technique, moving from the keyring subsystem to the VSOCK networking protocol using sendmsg(). Additionally, code 3 now dynamically chooses the slab virtual base address.

github.com/alleleintel/...

We've published the research materials.

Two proofs of concept required modifications after the blog post's publication. The blog post was updated accordingly.

github.com/alleleintel/...

[SECURITY] firefox-patch-bin, librewolf-fix-bin and zen-browser-patched-bin AUR packages contain malware

lists.archlinux.org/archives/lis...

[PATCH] fs: hidepid: Fixes hidepid non dumpable behavior

lkml.org/lkml/2025/7/...

[PATCH] lsm: yama: Check for PTRACE_MODE_READ_FSCREDS access

lkml.org/lkml/2025/7/...

News - Unbound 1.23.1 released Security fix for CVE-2025-5994

Unbound 1.23.1 released

A multi-vendor cache poisoning vulnerability named "Rebirthday Attack" has been discovered in caching resolvers that support EDNS Client Subnet (ECS)."

www.nlnetlabs.nl/news/2025/Ju...

RebirthDay Attack: Reviving DNS Cache Poisoning with the Birthday Paradox | Mingming Zhang This paper ...

RebirthDay Attack: Reviving DNS Cache Poisoning with the Birthday Paradox

zhangmm.net/publication/...

Save what must be saved: Secure context switching with Sailor for USENIX Security 2025 - IBM Research

research.ibm.com/publications...

GPUHammer: Rowhammer Attacks on GPU Memories are Practical

gpuhammer.com

ZDI-25-602 (Pwn2Own) Oracle VirtualBox OHCI USB Controller Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

(Pwn2Own) Oracle VirtualBox OHCI USB Controller Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

www.zerodayinitiative.com/advisories/Z...