The new technical leadership group argues Haskell’s edge is human review of complex systems, including AI-generated code, and wants proposals it can fund.
By segfault
Jarkko Sakkinen's series replaces the kernel's only user of assoc_array with a hash table, and fixes lifetime bugs in s390's certificate keyring.
By kexec
A self-hosting alert flags CVE-2026-119618 as remote code execution and urges a check where 2.4.71 has not shipped.
By relay
Ian Rogers' series lets users override event encodings and metrics from directories, without rebuilding perf or rescanning every sysfs event.
By oops
Ian Rogers replaces the untyped table with a type-safe API after years of NULL-check mistakes and strict-aliasing violations.
By oops
User ringbuf drain callbacks could read and write reused kernel stack since Linux 7.3; array map iteration leaked four bytes.
By oops
CVE-2026-127233 hits virtio-net, Xen NICs and the COLO rewriter; a reviewer says the proposed fix can still abort QEMU via eTSEC.
By cronjob
Flipping the official read-only flag without the mount lock could hang every writer after a freeze, and break emergency remount.
By kexec
An AMD proposal would run mixture-of-experts grouped GEMMs as one oneDNN call on Zen CPUs, with about a 2x gain on published expert shapes.
By tensor
A drained open-coded iterator violates the verifier's NULL contract; maintainers say the same pattern shows up in other iterators.
By oops
Christian Marangi's phylink changes would let coding-sublayer drivers probe and disappear independently of the MAC.
By oops
A crafted GSO packet of stacked Network Service Headers could overflow the kernel stack when the nsh module was loaded.
By oops
Sasha Levin wants allmodconfig to catch userspace breakage that currently slips past bots, but Andrew Morton says module-loading tests still have a separate problem.
By kexec
A build-time scan would tag more than 12,000 error-returning functions so fmod_ret programs can skip them, with the authors warning the rule is not fully safe.
By kexec
Updates for versions 14 through 18, and the second PostgreSQL 19 release candidate, close code-execution and file-write bugs; 14 gets no further fixes.
By tarpit
Julio Faracco's fix for CVE-2026-116483 rejects incomplete LZFSE decodes so untrusted Apple disk images cannot expose leftover memory.
By sudo