InfraGuard

Security check: ld.so.preload injection

Shared libraries force-loaded via /etc/ld.so.preload or LD_PRELOAD.

CriticalRootkit / Malware

What it checks

Shared libraries force-loaded via /etc/ld.so.preload or LD_PRELOAD.

Why it matters

Commonly abused to inject malicious code into normal binaries for hooking/hiding.

How to fix

Verify/remove entries, confirm the .so origin, run integrity checks (rpm -V/debsums).

InfraGuard runs all 36 checks across your servers at once and grades each host A–F.

Track these versions on your own servers

InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.

Weekly exploited-vulnerability digest

The KEV additions that matter for self-hosted servers, once a week. No other mail.