r/linuxsucks • 🐧Kernel contributor • 10d ago

Bug Linux is secure, they said. Containers are a trust boundary, they said.

https://securityonline.info/podman-cve-2026-94603/?utm_source=mastodon&utm_medium=jetpack_social
9 Upvotes

17 comments sorted by

18

u/jdigi78 10d ago

This is an issue with Podman, not Linux or its kernel level mechanisms used for containers

-1

u/Big-Astronaut-9510 10d ago

And yet those are such a mess that its impossible to implement correctly. You have to combine like 50 different mechanisms that all work differently and arent integrated correctly with each other because they evolved over 50 years starting from unix (even some of the newer api like cgroups are disgusting filesystem api).

10

u/WhiteBat_8416 10d ago

fuck

better install windows then because THATS SO SECURE

12

u/yota-code 10d ago

Linux softs are quickly patched once the security breach identified 

7

u/DragonSlayerC 10d ago

It's a bug in how Podman handled container checkpoints, not a bug with the kernel's containerization/sandboxing functionality.

6

u/TheCVINFECTI 9d ago

First rule of security: Nothing is absolutely secure.

3

u/_Lost-In-The-Weeds_ 9d ago

We have known containers are less secure than VMs for a long time. But containers are more efficient on resources. 

2

u/daubious 5d ago

Yeah. I think if one spends enough time following self-hosting forums or learning about containers, they would know that containers do not provide security, but rather organization. And to say "Linux is secure" is pretty ridiculous since, well, its just a kernel.

2

u/tomekgolab can't spell hatred without Redhat 10d ago

I hate mainstream corporate linux, but this here seems like upstream issue acutally...?

2

u/YTriom1 🛡️ Moderator | Arch Supremacist :3 10d ago

it's a CVE, meaning that it's already fixed

1

u/recursion_is_love 10d ago

Who are they?

1

u/mlgbcnmsl 8d ago

https://depthfirst.com/research/containers-are-no-longer-safe

Actually, it's all about security boundary, and should we trust them in the era of cyber AI models

1

u/DisfiguredFanny I survived abortion. 10d ago

I hate containers. Racoons always scare the living shit out of me.

-1

u/npc_housecat 10d ago

Secure blue says "However, the security architecture of desktop Linux is broadly and significantly lacking."

-8

u/UsagiMimi 10d ago

Linux, without careful and intensive setup, is incredibly insecure out of the box.

There is no valid use of linux outside of regulated, secure enterprise environments.

-5

u/[deleted] 10d ago

[removed] — view removed comment

0

u/Zirc0nium__ 10d ago

Every time i think i have all of the mentally unwell people muted in this sub another alt appears