Linux September 2026
Global headlines curated by our intelligent agents.
Latest News
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
Spectre BTR reuses stale JIT branch targets; Linux PoCs recover the root password hash within minutes on a fully patched Intel system.
Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
MCP Python SDK flaw can let malicious servers redirect OAuth exchanges and steal credentials; fixes are in 1.30.0 and 2.2.0.
The Impact of Digital Sovereignty on Open Source Companies
By Philipp Reisner, CEO LINBIT® Sovereignty is a word borrowed from statecraft. A sovereign country is independent in its decisions. The term “digital sovereignty” is a more recent invention that applies to organizations and even individuals. In this article, I discuss what the push for digital sovereignty implies for Linux-focused, open source developers and companies. …
M6 Mac mini review, Apple fitness band rumors, Apple AI servers
Benjamin and Chance cover the week in Apple news, including hands-on with the new M6 Mac mini and AirPods 5,...
Muse will apparently let you download its entire filesystem
With a little coaxing, Meta’s AI will reveal all its secrets.
Docker Commits to Bringing the Sandbox Kit Spec to the CNCF
Docker and the CNCF will partner on an open spec to make agent permissions portable Docker Sandbox Kits let you package an AI agent together with exactly what it is allowed to do, so anyone can pull the same agent with the same limits, review changes to those limits, and enforce them. Now, Docker has …
Qualcomm is solving Snapdragon X’s Linux problem
Snapdragon X laptops are getting support for some of the most popular Linux distros, and Qualcomm is sharing the timetable.
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Compromised MemTensor npm and PyPI packages deliver sckit, a Go-based stealer targeting cloud, registry, source-code, and developer credentials.
Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape
A Linux AF_UNIX use-after-free can escape containers for host root; exploit code targets Ubuntu 26.04, which remains unpatched.
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers
Unauthenticated attackers are exploiting CVE-2026-94127 in F5 BIG-IP APM to run code on systems acting as OAuth authorization servers.
Rabbit’s new AI agent doesn’t need an R1 to run
Rabbit still isn’t giving up on AI hardware, though.
WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers
WordPress fixes a critical unauthenticated path traversal flaw that can load local PHP files and, on some servers, enable code execution.
Meta patches Muse exploit that let attackers control the AI agent
Local access was required to exploit the bug.
New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory
A Linux KVM flaw on ARM64 can expose host kernel memory to guests and enable guest-to-host escape when nested virtualization is enabled.
Rockstar Games' New Modding Policy Crushes Influencers' Dreams for Monetized GTA 6 RP Servers
Rockstar Games has outlined its policy for modding ahead of Grand Theft Auto 6's release, and it may crush the dreams of some would-be entrepreneurs.
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
CISA added three actively exploited Linux kernel flaws to its KEV catalog, including bugs that can enable local privilege escalation and DoS.
Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
Public exploits for four patched Linux kernel flaws let local users gain root; three require unprivileged user namespaces.
Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
Check Point patched CVE-2026-91843, a critical login stack overflow that can let unauthenticated attackers run code as root on management servers.
This tiny, beloved e-reader is getting a spiritual successor that runs on Android
The company behind the Xteink X4 is launching a new pocket-sized e-reader, but this one will run on Android.
Linux Foundation Newsletter: September 2026
Welcome to the September 2026 edition of the LF Newsletter. Check out the highlights, save the dates, and be sure to register for upcoming events!
Valve's New Hardware Was Meant to Be the Start of Something Great for PC Gaming
All of Valve's new hardware is now out in the wild, and while I've enjoyed everything from the Steam Controller to the Frame, it's hard to recommend any of it to anyone right now. That problem isn't exclusive to Valve either. Across the entire industry, getting any hardware that can run video games is significantly more expensive than it was a year ago, and that's spoiled some otherwise awesome gadgets. But while prohibitively high prices might have lessened the immediate impact of Valve's hardware, its goal of expanding SteamOS support and offering a baseline configuration for developers to target still gives me hope for the future of PC gaming. Everything's ExpensiveBack when Valve revealed its 2026 trifecta of hardware, I was excited to see Valve essentially create its own gaming ecosystem, free from the subscriptions and data harvesting that we've all grown used to on other platforms. That alone is still a pretty good reason to buy into something like the Steam Machine. But its relatively weak performance with a comparitively high price is a huge barrier, and I can't really blame anyone for balking at the idea of spending $1,049 on it – and that's without a controller.Outside of Valve, Intel launched its new handheld chips, led by the Arc G3 Extreme, and it's a force to be reckoned with. When I tested it in the MSI Claw 8 EX AI+, it absolutely trounced handhelds like the Xbox Ally X and the Lenovo Legion Go 2, but it costs $1,899, and for that price you can get a pretty decent gaming laptop, at least until those go up in price too. That's before mentioning graphics cards. The high-end Nvidia GeForce RTX 5090, which first retailed at $1,999, is going for about $8,000 these days due to its huge amount of VRAM and how good it is at powering AI models. Even the RTX 5070 has gone up to $850 when it's supposed to cost $549. There are shaky rumors that Nvidia will release its new graphics cards early next year, but even if it does, who would be able to afford one?The Hope for PC GamingIf prices across the industry were what they were a year ago, Valve's hardware and Intel's handheld chips would have been hugely impactful. I know I'm not the only person in the world who's ready to drop Windows 11 — with all its little bugbears, like needing to be online to get past setup and the pervasiveness of Copilot — altogether. I'd love to adopt SteamOS or another Linux distro full time. Making it easier to play PC games on SteamOS was Valve's primary goal with this wave of hardware. I still believe that the Steam Machine gives game developers a good baseline configuration to target their optimization toward. That's why the Machine has specs that largely line up with what the majority of Steam users already have. The Steam Frame is also all about expanding SteamOS software support to ARM hardware. While the standalone performance of Valve's new VR headset is lackluster, thanks to an aging phone SoC, the company was still able to use Proton and Fex to get Windows games running natively. And, now that Valve has been working on Nvidia driver support, its future vision of SteamOS running on everything is actually in reach.And I think that's the worst part of the high prices on Valve's hardware. If the Steam Machine was able to come out at $750, it might have been more expensive than the PS5, but it would have at least been more affordable than it is now, Valve would have been able to get its hands on more RAM to get more Machines out there, and it may have made more of an impact to Linux gaming support writ large. I don't think that progress has been completely kneecapped, though. Even if buying a Steam Machine is off the table for a lot of people – maybe even most people – the work being done on SteamOS and Bazzite carries over to other hardware. You can still build a relatively decent alternative to the Steam Machine and install the operating system yourself, even on older, used hardware.Ironically, that older, used hardware is the future of PC gaming, at least in the short term. Over the last few years, there's been a huge focus on the most powerful current-generation hardware and its ability to run games on the highest possible settings with ludicrous frame rates. I've contributed to that myself. But, maxing out games is mostly just a way to help justify spending thousands of dollars on a high-end rig. If you're willing to tweak some settings, most PC games will run just fine on 5–10-year-old hardware, and you'd struggle to even notice the difference unless you're zooming in on the images side-by-side. It helps that, for the most part, PC games are getting easier to run, as long as you ignore any game running on Unreal 5. Capcom, for instance, has been on a massive winning streak with its recent games like Pragmata and Onimusha: Way of the Sword, thanks to RE Engine's ability to scale to lower-power hardware. Even Crimson Desert, with its massive open world and ridiculous draw distances, doesn't take a hugely powerful PC to run. As weird as it feels to say, especially with a new console generation on the horizon, I hope that more developers realize how expensive hardware is right now and spend more time optimizing their games. Because at a certain point, more realistic graphics are just going to limit how many people will actually be able to play a game as intended.
Apple might make servers again to cash in on the AI rush
Apple might borrow tech from Nvidia to get into the AI server industry.
Apple Memory Supplier Explores U.S. Manufacturing With Intel
Apple memory supplier SK Hynix is in exploratory talks with Intel about manufacturing memory chips in the United States for the first time, according to Reuters. One option would see the South Korean chipmaker lease part of Intel's planned manufacturing complex in Ohio. Another would involve a joint venture with Intel and major cloud providers seeking to secure memory supplies, people familiar with the discussions said. No decisions have been made, and other arrangements remain possible.
Apple May Return to Server Market With Nvidia Technology
Apple is considering offering an AI server built around "M8" series chips and has discussed incorporating Nvidia networking hardware, The Information reports. The system would be sold to outside customers, potentially bringing Apple back into a business it left behind when it discontinued Xserve in 2011. Apple is reportedly targeting companies that want to run AI models on their own equipment, with a particular focus on inference and generating responses from trained models.