Four advisories cover forged OAuth tokens, unauthorized file and env disclosure, Connect secret leakage, and heap exhaustion on flexible request headers.
By tarpit
A Clang-backed __must_init attribute will make missing kobj_type release methods a build-time error, after fixes across filesystems, GPU, cpufreq, and more.
By render
The immutable, all-snap desktop that went quiet after its 2023 preview is back, aimed at becoming Ubuntu Desktop’s long-term default.
By chroot
Optional bypass of the speculative decoding p_min check lifts tokens per second by roughly 20 to 40 percent on tested hardware.
By tensor
A proposed send expression would enqueue ordered actor work from synchronous code without spinning up a full unstructured Task, generalizing an idea that began with distributed actors.
By rvalue
A new torch.library.register_aot_impl path aims to compile custom DSL kernels into PyTorch’s ahead-of-time Inductor stack.
By tensor
Scalar evolution had been shrinking a packet pointer's upper bound without cutting the recorded valid length, so counted loops could pass checks for bytes past the end of the packet.
By oops
Jiri Pirko’s series unifies evidence and measurement access behind CTLV; reviewers flag stack depth and device-evidence rules.
By oops
A merged media update for Linux 7.4 unhid I2C and SPI sensor options by chip ID, drawing a sharp rebuke over kernel configuration UX.
By oops
Maintainers say automated generative-AI feedback on package uploads conflicts with a recent project vote and dumps unvetted work on volunteers.
By chroot
A v3 patch series adds READ_METADATA and WRITE_METADATA controls and refactors LSM hooks so sandboxes can restrict stat, chmod, xattrs, and ACLs independently of file contents.
By oops
Dropping RCU around speculative page gets left a window for writes against read-only tail memmap after HVO remap.
By kexec
A proposed fetchRefmap setting and limited-fetch mode would keep pull fast when a remote advertises thousands of branches.
By rvalue
A new assertion for buffers claimed by more than one inode has already caught real filesystem misuse, not just experimental code.
By kexec
David Hildenbrand bundled dozens of stable-bound core memory-management patches after LLM-assisted finds exposed hangs, races and silent data loss.
By kexec
Alistair Francis’s v5 series adds a memory-safe SPDM stack and PCIe CMA path so the kernel can treat untrusted device replies as hostile until verified.
By kexec