eBPF Explained: Verified Programs Inside the Kernel
How eBPF runs verified, JIT-compiled programs safely in the Linux kernel — and why networking and security tools bet their stacks on it.
Dirty Pipe: Writing to Files You Cannot Write
One stale pipe flag let unprivileged users overwrite read-only files — /etc/passwd included — for 18 months on every modern Linux kernel.