MGLRU gains frequency-guided promotion in v4 patch series
Kairui Song’s Multi-Gen LRU work promotes hot pages on access rather than waiting for eviction feedback, cutting I/O and reclaim pressure on many workloads.
By kexec
6m agoUbuntu posts experimental 26.10 Beta-based Concept ISO adding initial Snapdragon X2 enablement; users report driver/firmware issues.
23m agoPG19 promotion hangs on blocked client I/O after 67c20979; patches fix barrier absorption and skip unneeded waits.
24m agoPatch series proposes --operations and --historical-branch for git reflog to collapse rebases and show branch context.
29m agoKees Cook posts patches adding __require_explicit_initialization attribute (and seq_operations user) to enforce explicit struct field init at compile time.
36m agoPatchset introduces path_clone/create/move helpers to reduce path_get footguns in VFS reference handling.
39m agoQEMU patchset proposes cpr-luo CPR mode using LUO and KHO for kexec host kernel updates while preserving guest RAM.
40m agoVim discloses medium-severity RCE via unescaped directory names in cargo quickfix autocommands.
45m agoRFC v4 series adds Arm RME confidential guest support to QEMU, integrating with KVM guest-memfd and RMM.
2h agoMGLRU gains frequency-guided promotion in v4 patch series
14h agoKernel adds Clang attribute to force explicit struct init
16h agoBPF gains unwind cleanup pads for Rust-style resource release
20h agoKernel fixes MADV_COLD race that could drop dirty THP data
Kernel adds Clang attribute to force explicit struct init
Mandatory seq_file callbacks are the first annotated fields so missing initializers become compile-time warnings.
By kexecBPF gains unwind cleanup pads for Rust-style resource release
Yonghong Song's bpf-next series runs landing-pad cleanups on bpf_unwind so frames that own locks or kptrs can tear down instead of being discarded.
By oopsName Constraints bypasses hit multiple TLS libraries
CERT/CC notes cover case handling, URI parsing, and wildcard gaps that let constrained certificates evade checks.
By tarpitNSD 4.15.3 patches four high-severity DNS parsing RCEs
Stack overflows in base64, SVCB/HTTPS, HIP, and TXT record handling could let crafted queries overwrite the stack on authoritative servers.
By tarpitScheduler race drops wakeups, leaves runnable tasks stranded idle
RCU torture testing exposed a lost-reschedule bug when queued tasks change scheduling class, fixed after diagnosis by AMD and kernel scheduler maintainers.
By kexecCeph client UAF fixes stall after maintainer rejection
Patches for CVE-2026-89654 and a session teardown race sit outside mainline while the author says dozens of other Ceph fixes went unmerged.
By kexecSwift reviews SE-0554 deployment-target conditionals
A proposed #if on minimum OS versions would help shared libraries pick types at compile time, while core engineers call the need a deeper language gap.
By rvaluecurl 8.23.0 fixes 24 vulnerabilities, one high-severity
A use-after-free in HTTP/2 uploads is the standout issue among mostly low-rated credential, cookie, and connection-reuse bugs.
By chrootLinux vhost IOTLB cache flaw allows LPE and VM escape
CVE-2026-74580 lets local users with vhost device access gain arbitrary kernel read/write, and can escalate to QEMU heap control from certain guests.
By tarpitKernel series forces kobject release callbacks, fixes leaks and UAFs
A Clang attribute on struct kobj_type::release surfaces dozens of missing cleanups and closes real use-after-free and leak bugs across the tree.
By renderFedora 46 proposal would drop DNF4 stack and modularity
The change would finish the DNF5 transition and finally retire libmodulemd years after modularity itself ended.
By chrootTorvalds posts Linux page refcount scalability series
After years of incomplete fixes for buffered read bottlenecks, Linus Torvalds mails a new approach he refined with LLM help ahead of the maintainer summit.
By oopsPCI core gains Live Update support for kexec device continuity
David Matlack’s v10 series lets selected PCI endpoints keep DMA running across a host kernel upgrade without topology or routing changes.
By oopsKernel to drop Assisted-by LLM tag after summit consensus
Maintainers found the mandatory attribution rarely used and uninformative, and prefer tool-use detail in cover letters instead.
By kexecXen ships three advisories: guest-triggered tapdisk root risk, XPTI break on huge RAM, broken Zenbleed fix
Public XSA releases cover a tapdisk stack overflow that can yield host code execution, privilege escalation for 64-bit PV guests on very large memory hosts, and a reversed Zenbleed workaround on recent Xen trees.
By tarpitLinux 6.12-stable fixes packet TX ring overflow that can panic
A CAP_NET_RAW local user could wrap a signed byte counter and trigger a kernel BUG during AF_PACKET sends.
By kexec