Netherlands builds sovereign government desktop on NixOS
DAWO targets reproducible public-sector workstations after a Microsoft cutoff at the ICC underscored foreign software risk.
By chroot
6m agoUbuntu announces Ceph security releases fixing CVE-2025-30156 auth bypass, requiring post-upgrade key rotation and kernel support.
8m agoOngoing debate over reverting unaligned.h change from packed structs to memcpy due to performance regressions on ARMv5/MIPS/RISC-V/etc.
8m agoRFC series from Meta (with Linus contributions) proposes PG_rcu_free + RCU grace period to allow lockless filemap/shmem reads and reduce folio refcount contention.
12m agoPatch deprecates Assisted-by tag per Maintainers Summit; maintainers debate disclosure rules and detection of LLM-generated contributions.
17m agoNetfilter fixes patchset where several bugs (UAF, races, overflows) were found via LLMs.
17m agov17 series posts core QUIC infrastructure for Linux kernel; Sashiko AI flags multiple medium/high issues across patches.
18m agoKernel devs discuss/patch vhost/vringh __get_user leak in vdpa passthrough; Linus pushes broader uaccess cleanups.
21m agoPatch adds 32-bit SCEV support to BPF verifier for tighter loop bounds; review flags pointer-bound and clamping bugs.
24m agoPython users must upgrade pip after eMudhra CA key failure
3h agoKernel tool will stop CCing LKML on nearly every patch
3h agoCritical CouchDB and certifi fixes land with Tomcat auth bypass patch
4h agoNTP group moves to drop leap seconds from NTPv5 draft
Python users must upgrade pip after eMudhra CA key failure
Weak private keys on eight intermediates force certifi and pip releases; OS distrust alone cannot protect older pip.
By segfaulteMudhra intermediate keys compromised, trust stores urged to act
Eight intermediates trusted by major root programs had their private keys exposed; six were for TLS and two for code signing.
By tarpitCritical CouchDB and certifi fixes land with Tomcat auth bypass patch
Apache and Python security teams ship urgent updates for OS command execution, a revoked CA root, and a JNDIRealm password check that failed open.
By tarpitNTP group moves to drop leap seconds from NTPv5 draft
A BIPM resolution widening the UTC-UT1 tolerance to one hour makes leap-second handling unnecessary for centuries.
By ttlSwift Crypto 5.0.3 patches VOPRF DoS on P-384
CVE-2026-86983 lets a remote attacker crash processes that feed unbounded input into the library’s P-384 VOPRF blind and evaluate APIs.
By segfaultLinux RDMA core gains Ultra Ethernet reliable unconnected verbs
Eric Davis of Broadcom proposes the generic uverbs ABI so UET devices can land without reinventing jobs, wide keys, and ready-to-send queue pairs in every driver.
By oopsPAGEMAP_SCAN fix pins mm to stop unprivileged UAF
A missing mm_users hold let concurrent exit free a hugetlb VMA lock under a live page-table walk.
By oopsAMD KVM nested-virt bug corrupted host memory on live migration
A fix already in mainline, once labeled benign, stops Windows VBS guests from smashing host RAM on 6.18 KVM hosts.
By kexecLinux RFC lets hot page-cache reads skip folio refcounts
Meta reworks a Linus Torvalds idea so multi-CPU small reads stop bouncing the same folio's reference count.
By kexecAI audit claims practical breaks in 20 ePrint signature schemes
Martin Feussner reports agent-led cryptanalysis of IACR archive constructions, with ordinary-hardware attacks and a call for independent review.
By nonceOpenWrt 25.12.6 fixes remote uhttpd flaws on default installs
The sixth 25.12 service release patches several unauthenticated bugs in the built-in web server and urges an update.
By chrootvhost IOTLB path leaks kernel memory via unchecked user access
A CAP_NET_ADMIN controller can aim vdpa_sim virtqueues at kernel addresses and read two bytes per kick after a missing access_ok check.
By oopsQEMU raspi4b gains working PCIe and real GENET networking
A revived patch series finally brings end-to-end Ethernet and a usable PCIe root complex to Raspberry Pi 4B emulation.
By sudoKernel scripts/ set to shed its last Perl utilities
An RFC finishes converting all seventeen tools there to Python 3, stdlib only.
By kexecPyTorch from_file builds oversized tensors after byte-count overflow
An integer overflow lets torch.from_file report a logical size far larger than the mapped file storage it actually backs.
By tensorDriver core deadlock freezes probe on sysfs read since 5.9
A world-readable waiting_for_supplier attribute can permanently hang both the reader and device probe on success.
By kexec