Linux Security

PostGREShell CVE-2026-6471: When Replication Privilege Becomes Server Code Execution

CVE-2026-6471 lets a PostgreSQL role with REPLICATION privilege load an arbitrary logical-decoding plugin. The official severity is high, the prerequisites matter, and supported releases are fixed.

TONTOU: The Interrupt That Reopens Spectre's Closed Door

MIT researchers used precisely timed interrupts to re-poison branch prediction after Spectre v2 defenses ran. The result changes risk decisions for shared Linux compute.

NGINX's Configuration-Dependent Vulnerabilities: Why Version Scanning Is Not Enough

NGINX 1.30.4 and 1.31.3 fixed three new memory-safety flaws, but exposure depends on map, slice, SSI, proxy, and buffering configuration. Here is how to audit the real path.