📰 GitLab CVE-2026-110264, PHP2Shell and Linux 7.4: Digest for October 22, 2026
• Twelve Years of Unchecked Regex Buffers in GitLab
• Node.js and Musl Libc Patch Remote Code Execution Bugs
• LiteLLM Poisoned via Stolen GitHub CLI Tokens
• PHP Foundation Confesses to Months of Decision Paralysis
• PHP2Shell RCE Triggered in the Wild Days Before Disclosure
• Security Vendors Forget How Mailing Lists Work
• Unsafe __get_user and __put_user Finally Evicted in Linux 7.4
• Kernel Shadow Stacks Proposed for Hardware ROP Defense
• Broken QPACK Accounting Enables Massive HTTP/3 DoS
• Railway Environment Variable Breach Drains Crypto Keys
• Linux 7.4 Lands Major Kbuild Performance Cleanups
• KeePassXC 2.8.0 Modernizes with Qt6 and Wayland Auto-Type
• Linux 7.4 Streamlines AES Code into the Crypto Library
• EEVDF Latency Improvements and VM Steal Governor in Linux 7.4
• Linux 7.4 Drops Costly SafeRET Mitigations on AMD Zen 6
https://or1k.net/digests/daily-digest-2026-10-22/
or1k.net
GitLab CVE-2026-110264, PHP2Shell and Linux 7.4: Digest for October 22, 2026
GitLab patches CVSS 10 regex bug CVE-2026-110264, PHP2Shell sees zero-day exploitation across PHP 7 and 8, and Linux 7.4 dumps unsafe uaccess helpers.
1October 22, 2026 590
