Thursday, 29 October 2026
DevOps & Cloud News: 29 Oct 2026
CISA added a Linux kernel flaw (CVE-2026-46300) to KEV that it says can be chained with the PHP flaws from earlier this week to get root, with a due date of 31 Oct. AWS shipped a lot of container news on 28 Oct: EKS Auto Mode Gateway API, ECS Managed Instances consolidation and an EKS CA rotation dashboard.
Linux
CISA KEVAdded on 28 Oct. A missing variable initialization lets a shared-fragment marker get lost during socket buffer coalescing, so ESP input processing decrypts shared fragments in place and can modify page-cache-backed data. CISA notes it can be chained with CVE-2026-109618 and CVE-2026-109619 (the PHP flaws) to implant PHP webshells and run commands as root. The federal due date is only 31 Oct. Check your distro's kernel advisory, and if you run IPsec/ESP or PHP apps on the same hosts, treat them as priority.
Cybersecurity
CISA KEVAdded on 28 Oct, due 11 Nov. An insufficient logging flaw that could let an actor with admin access perform certain operations without being logged. Check the Broadcom advisory, and keep in mind that missing logs also hurt your incident investigation.
Kubernetes
AWS What's NewYou can define application load balancing with Gateway and HTTPRoute resources on EKS Auto Mode, a standard and portable alternative to Ingress annotations. Worth testing if you are planning an Ingress migration.
AWS What's NewThe EKS Dashboard now gives a consolidated view of CA rotation across your clusters, so you do not have to check each cluster separately.
AWS
AWS What's NewTwo infrastructure optimization updates. Cross-instance consolidation looks at tasks spread over multiple underutilized instances so they can be packed together, and Spot consolidation applies the same idea to Spot capacity.
AWS What's NewLambda can now use Seekable OCI so only the files needed at each stage are fetched for container-image functions on Managed Instances. Also on 28 Oct, the IAM Identity Center Identity Store now sends real-time events to EventBridge when users, groups or memberships change (https://aws.amazon.com/about-aws/whats-new/2026/10/aws-identity-store-change-notifications/).
← All daily news
