linux

Cosmos Labs has donated the cross-chain communication protocol IBC to the decentralized trust project under the Linux Foundation (Linux Foundation Decentralized Trust).The initial technical committee established after the transfer of IBC consists of seven members, with Cosmos Labs occupying five seats, and the remaining maintainers coming from Datachain and OpenZeppelin.

Alpine Linux Warning: Under certain configurations, attackers can bypass SSH password authentication. The official recommendation is to update OpenSSH and restart the service.

According to disclosures from OpenAI's official website, the company has established an autonomous security research pipeline covering vulnerability discovery, dynamic verification, exploitability assessment, and patch generation. In a run centered on an upcoming network model, the pipeline completed scanning and verification of targets related to the Linux kernel, generating 948 exploits that can achieve local privilege escalation (LPE) on commonly used Linux distributions, with an API cost of approximately $1.213 million, or about $1,279 per LPE exploit.It was reported that the pipeline identified and analyzed a total of 2,308 candidate discoveries, dynamically reproducing 1,724 vulnerabilities, and producing 291 information leakage proofs of concept (PoC); the target virtual machine ran a standard desktop system with complete protection. The Scout agent initially identified about 5,034 audit targets (approximately 2.8 million lines of code, accounting for about 7% of the kernel), and the Analyst agent produced candidate discoveries in about 12 hours. OpenAI stated that it has prioritized reporting critical vulnerability patches as recommended by the Linux community and continues to advance the remaining reports in collaboration with Patch the Planet partners.OpenAI also mentioned that in the adapted kernelCTF environment, an additional 25 information leakage PoCs and 21 LPEs were obtained; among 166 sampled exploits, the agent reportedly used at least 10 newer Linux exploitation techniques that it deemed more recent. The company emphasized that maintainers are quick to fix: over 100 LPEs have been patched or entered temporary patches within about 10 days of scanning, and approximately 300 others have entered public discussion.

Anthropic disclosed that the exploit program written by Claude can remotely execute commands on specific Linux servers, and the fixes for multiple versions of Ubuntu are still in progress.

According to the latest weekly report released by the Cardano ecosystem governance organization Intersect, a serious Linux kernel vulnerability numbered CVE-2026-98432 may affect multiple Linux distributions, including Ubuntu, with a CVSS security risk score as high as 9.8 (out of a maximum of 10).Intersect warns Cardano stake pool operators (SPO) to immediately check the Linux kernel versions used by their block production nodes and relay nodes, and to update and restart their servers as soon as security patches are released for the corresponding distributions.Currently, some Linux distributions have provided fix patches, but some distributions, including Ubuntu, are still preparing updates. Intersect stated that it will continue to release security guidelines through its official X account and the stake pool operator community.

Anthropic announced that it will donate the Agent Skills standard to the Agentic AI Foundation (AAIF) under the Linux Foundation. This format was designed by Anthropic while developing Claude Code, set to launch in October 2025 and open as a cross-platform standard in December. Currently, over 70 agent platforms, including ChatGPT, Cursor, and GitHub Copilot, have integrated it.Anthropic describes Skills as reusable work manuals prepared for AI agents, where developers can write task steps in SKILL.md and attach scripts and reference materials for different agents to read as needed. MCP is responsible for connecting external tools and data, while Skills explain how agents complete specific tasks. What is being donated includes the standard name, logo, GitHub organization, and official website domain.AAIF was jointly initiated by Anthropic, OpenAI, and Block in 2025 and has previously received MCP. In the future, engineers from Anthropic, OpenAI, and Google will jointly maintain the Skills standard in their personal capacities, no longer solely led by Anthropic. Vercel statistics show that the skills.sh directory has recorded approximately 1 million skills, with nearly 280 million installations. Snyk has confirmed 76 malicious skills in ClawHub's skill samples, and Anthropic has proposed establishing version control, formal proposal processes, and security guidelines.

According to The Block, the Linux Foundation has officially established the x402 Foundation, governed by a structure of 40 member companies, with Coinbase having completed its contribution to the protocol. Founding members include Ripple, Visa, Mastercard, American Express, Stripe, Adyen, Fiserv, Shopify, Google, AWS, Cloudflare, as well as Circle, MoonPay, the Solana Foundation, and the Stellar Foundation.The protocol allows servers to respond to requests with a 402 response and pricing, while clients sign stablecoin transfers (usually USDC) and resend requests for data, without the need for accounts, credit cards, or prior relationships between the parties, making it inherently adaptable for AI agent applications. Previously in April, it was reported that the neutral internet payment protocol x402, incubated by Coinbase, would migrate under the Linux Foundation and operate in the form of an independent foundation called the "x402 Foundation."

The Chief Information Security Officer of Slow Fog, 23pds, disclosed that a privilege escalation vulnerability named Dirty Frag has been exposed in Linux systems, with complete details and exploit code now public. This vulnerability allows any local low-privilege user to directly obtain root privileges on almost all mainstream Linux distributions. It is classified as a deterministic logic flaw, and the attack does not rely on complex race conditions, resulting in a very high success rate without causing kernel crashes, posing significant danger. Linux users are advised to upgrade their systems promptly.

According to CoinDesk, the smart business payment protocol x402 developed by Coinbase has officially joined the Linux Foundation, promoting it as an open, standardized infrastructure.The protocol has established an initial governance body, the x402 Foundation, with Cloudflare and Stripe as founding members. Organizations such as Adyen, Amazon Web Services, American Express, Ant International, Base, Circle, Google, KakaoPay, Mastercard, Microsoft, Polygon Labs, Shopify, Solana Foundation, and Visa have also expressed their intention to participate.Linux Foundation CEO Jim Zemlin stated that the x402 Foundation will promote the development of related capabilities in an open, community-governed manner, ensuring its evolution under the principles of transparency, interoperability, and broad participation.James Tromans, Managing Director of Google Cloud Web3 and Digital Asset Business, also stated that joining the x402 Foundation reflects Google's commitment to supporting interoperable, AI-driven transaction standards.

Vitalik Buterin posted on the X platform that Ethereum can be likened to BitTorrent or Linux: the former represents a coexistence of decentralization and scale, while the latter is a model of open source, credibility, and widespread application.He emphasized that Ethereum L1 should become the foundation of finance, identity, and governance for individuals and organizations pursuing autonomy, capable of unleashing the full potential of the network without relying on intermediaries, and pointed out that the demand from enterprises for open, censorship-resistant systems is highly consistent with "trust minimization."

ChainCatcher message, Ethereum co-founder Vitalik Buterin expressed on social media regarding the removal of a Russian developer that sparked discussions about the Linux kernel, stating, "It is very concerning. Open source is a common wealth of humanity and should be a space for free international cooperation. If such behavior becomes normalized, the consequences look very bad."

ChainCatcher news, the Linux Foundation announced plans to establish the Linux Foundation Decentralized Trust (LF Decentralized Trust), which will be based on existing Linux Foundation blockchain and digital identity projects to support the rapid development of decentralized technologies. In addition, LF Decentralized Trust will encompass the growing Hyperledger project portfolio and host new open-source software, communities, standards, and specifications.

ChainCatcher news, Vitalik Buterin believes that Linux is the perfect solution to the Windows operating system problems faced by Musk, as Linux is open source. He invited Musk to join the desktop Linux community.It is reported that Linux is an operating system that was first released in 1991 and is currently very popular. The source code of open source software is available for anyone to view, modify, and improve. Some have praised Buterin for promoting open source software, while others have pointed out that Linux may not be suitable for Musk's needs.

ChainCatcher news, Circle announced its joining Jack Dorsey's Block subsidiary TBD, which focuses on Bitcoin, and the newly established nonprofit foundation by the Linux Foundation, aimed at building an open-source standard for decentralized identity, credentials, and open payments built on the chain.

ChainCatcher news, according to TechCrunch, the nonprofit entity Linux Foundation Europe has announced the launch of the OpenWallet Foundation to support the development of open-source wallets.It is reported that the main mission of OpenWallet is to develop a secure open-source engine that anyone can use to build an interoperable digital wallet. (Source link)