CVE-2026-80668 on CentOS 7: Fixed Kernel for EL7
CVE-2026-80668 is a remote Linux kernel use-after-free in netfilter conntrack, CVSS 9.8. The stock CentOS 7 kernel is affected with no update. The fix…
CVE
Practical CVE guides from the GetPageSpeed engineering team: configuration, performance tuning and security for production Linux servers.
12 articles
Brotli CVE-2026-111497 on CentOS 7, RHEL and Amazon Linux 2: Fix libbrotli
CVE-2026-111497 (HTTP2Shell) is a Brotli decoder bug. ngx_brotli only compresses and is not affected; on CentOS 7 and Amazon Linux 2 the fix is…
PHP2Shell on AlmaLinux, Rocky Linux and RHEL 8/9/10: Check and Patch
PHP2Shell (CVE-2026-109618, CVE-2026-109619) is fixed in every AlmaLinux 8, 9 and 10 PHP stream. How to check your build, the fixed version per stream,…
PHP2Shell on CentOS 6: Patched PHP 5.3, 7.0 and 7.1
PHP2Shell (CVE-2026-109618, CVE-2026-109619) has no distribution or upstream fix on CentOS 6. Here is the in-place fix for the stock PHP 5.3 and Remi…
CVE-2026-98432 on CentOS 7: Fix for ELRepo Kernels
CVE-2026-98432 is a remote Linux kernel use-after-free. CentOS 7's stock kernel is not affected; ELRepo's kernel-lt and kernel-ml are and get no fix. The…
PHP2Shell Mitigation in NGINX: What It Can and Can’t Block
Can NGINX mitigate PHP2Shell (CVE-2026-109618, CVE-2026-109619)? Partly. Tested configs for blocking multipart and filtering uploads with ModSecurity, and why only patched PHP fixes it.
PHP2Shell on Amazon Linux 2: Patched PHP 7.2 and 7.4 (x86_64 + ARM64)
PHP2Shell (CVE-2026-109618, CVE-2026-109619) has no AWS fix for PHP 7.2 or 7.4 on Amazon Linux 2. Upgrade Amazon's php7.2 or Remi's php74 in place…
PHP2Shell on Ubuntu and Debian: Patched PHP 7.2-8.4 Without Ubuntu Pro or ELTS
PHP2Shell (CVE-2026-109618, CVE-2026-109619) is a critical unauthenticated PHP RCE. Fixes for Ubuntu 20.04/18.04 and Debian 10 are Ubuntu Pro or ELTS only, and sury…
PHP2Shell on CentOS 7: Patched PHP 5.4 to 8.4
PHP2Shell (CVE-2026-109618, CVE-2026-109619) is a critical unauthenticated PHP RCE. Here is the free fix for every PHP from the stock 5.4 to 8.4 on…
NGINX Length Hiding Module: Does It Actually Prevent BREACH Attacks?
The NGINX length hiding module is often recommended for BREACH attack mitigation, but security research shows it only slows down attacks, not prevents them.…