A tiny Linux kernel mistake is now a serious local-root risk for systems that have not been updated. CVE-2026-23111 affects nf_tables, the kernel subsystem behind nftables, and public exploit ...

If you appreciate to manage your firewall rules at low level and are used to set your entire infra with ansible, you might have been faced with the following dilemma: how to accommodate the single ...

By the time your sidecar sees it, the kernel already ran it. User-space security is already too late. 0-days don't wait for your maintenance window. Log4Shell. XZ Utils. The next one, you don't even ...

Configuring Calico in nftables mode for a new cluster involves the same Calico CRD-based configuration as iptables mode, with the key addition of ensuring all Felix configuration is compatible with ...

The extension never modifies firewall state. The only external command it ever runs is nft -j list ruleset, invoked with a fixed argument slice — no shell, no string building, no injection surface.