grsecurity's profile picture. Foundational security for the Linux kernel.  Solving the most difficult memory unsafety problems.  Created by @opensrcsec

grsecurity

@grsecurity

Foundational security for the Linux kernel. Solving the most difficult memory unsafety problems. Created by @opensrcsec

It's now available!

We expect our 6.17 beta to be available for testing within the next two weeks.



We expect our 6.17 beta to be available for testing within the next two weeks.


grsecurity أعاد

I'm on my way to #LABScon25 @labscon_io : Thanks @binarly_io for making it possible. Hit me up if you wanna chat about vuln research/exp-dev, automated binary analysis and effective mitigations against classes of issues @grsecurity . I am also helping hiring APT hunters…


grsecurity أعاد

rust-gcc.github.io/2025/09/09/202… Short report for the month of August and a recap of the work done this summer - we're full steam ahead working on compiling core and the kernel's crate!


It's now available!

We expect our 6.16 #grsecurity beta to be available within the next week.



We expect our 6.16 #grsecurity beta to be available within the next week.


grsecurity أعاد

Monthly report for July 2025: rust-gcc.github.io/2025/08/05/202…


It's now available!

Currently accelerating our beta schedule. We expect our 6.15 #grsecurity beta to be available within the next two weeks.



Currently accelerating our beta schedule. We expect our 6.15 #grsecurity beta to be available within the next two weeks.


grsecurity أعاد

Our report for the month of June: rust-gcc.github.io/2025/07/17/202… Still making good progress and progressing fast towards testing the kernel's alloc crate


It's now available!

We expect our 6.14 #grsecurity beta to be available within the next two weeks.



We expect our 6.14 #grsecurity beta to be available within the next two weeks.


#grsecurity users are unaffected by CVE-2025-32463 (sudo chroot option privesc) when a feature available since 2021 is enabled. Customers can view our KB article on an earlier vulnerability this year, CVE-2025-4802 for glibc, to see how exploitation is prevented in the same way.


grsecurity أعاد

A bit late, but I just published my blog post on bypassing Ubuntu’s sandbox! Hope you enjoy it! u1f383.github.io/linux/2025/06/…


Quick reminder that our 6.8 short-term stable kernel goes EOL at the end of this month. Some stats: over the period of a year, it included over 1500 security/stability-relevant backports.


grsecurity أعاد

The @Qualys TRU has identified two related local privilege escalation CVEs in openSUSE, SUSE Linux Enterprise, and libblockdev via the udisks daemon. Due to the ease of exploitation, immediate patching is strongly recommended. @saeed4bbasi explains: bit.ly/3SSjho2

qualys's tweet image. The @Qualys TRU has identified two related local privilege escalation CVEs in openSUSE, SUSE Linux Enterprise, and libblockdev via the udisks daemon. Due to the ease of exploitation, immediate patching is strongly recommended. @saeed4bbasi  explains: bit.ly/3SSjho2

grsecurity أعاد

New report for the month of May: rust-gcc.github.io/2025/06/04/202… We are making good progress on core and plan on begin testing the Rust code in the kernel at the end of the summer!


Nice demo: tested a vulnerable Ubuntu 22.04 system for glibc CVE-2025-4802 using @solardiz's PoC adapted to Ubuntu (replace any occurrence of "myhostname" with "mdns4_minimal"). Even an old #grsecurity 5.4.96 kernel from February 8 2021 prevented exploitation

grsecurity's tweet image. Nice demo: tested a vulnerable Ubuntu 22.04 system for glibc CVE-2025-4802 using @solardiz's PoC adapted to Ubuntu (replace any occurrence of "myhostname" with "mdns4_minimal").  Even an old #grsecurity 5.4.96 kernel  from February 8 2021 prevented exploitation

grsecurity أعاد

Monthly report for the month of March: rust-gcc.github.io/2025/04/15/202… Which mentions some of the work done for supporting specialization in `core` :) We've upstreamed 600 commits to GCC this month and will continue to do so until 15.1 releases!


grsecurity أعاد

Thank you @opensrcsec for sponsoring EuroRust in Paris as a Partner 🦀💜 It is great to have you on board! Learn more about OpenSourceSecurity Inc here ➡️ opensrcsec.com #rustlang #EuroRust25

euro_rust's tweet image. Thank you @opensrcsec  for sponsoring EuroRust in Paris as a Partner 🦀💜

It is great to have you on board!

Learn more about OpenSourceSecurity Inc here ➡️ opensrcsec.com

#rustlang #EuroRust25

Loading...

Something went wrong.


Something went wrong.