LoongFire Blog LoongFire 博客
Technical write-ups, porting notes, and field reports from the LoongFire team.
来自 LoongFire 团队的技术文章、移植笔记与实战报告。
-
LoongFire XDP SYNPROXY: An Efficient Stopgap for CVE-2026-98432 LoongFire XDP SYNPROXY：针对 CVE-2026-98432 的高效临时缓解方案
CVE-2026-98432 is a use-after-free in the kernel's IPv4 TCP handling. While the kernel patch is the real fix, LoongFire's XDP SYNPROXY can drop packets with IP options at ingress — before the vulnerable code path is ever reached — covering both local and forwarded traffic with a single check.
CVE-2026-98432 是内核 IPv4 TCP 处理中的释放后使用漏洞。内核补丁才是真正的修复，但 LoongFire 的 XDP SYNPROXY 可以在入口处丢弃带 IP 选项的报文——早于漏洞代码路径被触达——只需一处检查即可同时覆盖本机与转发流量。
-
"LoongArch Has Arrived Around Us" — IPFire Officially Supports LoongArch "龙架构已来到我们身边"——IPFire 正式支持龙架构
IPFire maintainer Michael Tremer has announced official LoongArch support — making LoongArch the 4th architecture IPFire supports, after x86, ARM, and RISC-V. This is an English translation of the original article by Loongson Technology, with a link back to the original Chinese post.
IPFire 维护者 Michael Tremer 已宣布正式支持龙架构——龙架构成为继 x86、ARM、RISC-V 之后 IPFire 支持的第 4 种架构。本文为龙芯中科原文的英文译本，并附中文原文链接。
-
The Bug That Broke the Boot: How a glibc Update Silently Crippled dracut 一个让启动失败的 Bug：glibc 更新如何悄然瘫痪了 dracut
A single glibc 2.44 change to the
ftsimplementation silently broke dracut's module discovery, causing the LoongFire installer to fail to find its own USB medium. This is the story of bisecting 550 commits, discovering the bug was architecture-independent, and the near-miss for IPFire Core Update 205.glibc 2.44 对
fts实现的一次变更悄然破坏了 dracut 的模块发现，导致 LoongFire 安装程序找不到自己的 U 盘介质。这是一个关于二分查找 550 个提交、发现该 bug 与架构无关，以及 IPFire Core Update 205 惊险躲过一劫的故事。