Linus tightens rc rules after networking pull includes old ovpn fixes
Torvalds pulled Linux 7.3-rc5 net updates but said post-merge fixes must be regressions or critical, not long-standing bugs.
By kexec
2m agoQEMU proposes reversing prior AI ban with disclosure rules, agent restrictions, and maintainer discretion.
7m agoActive PEP 832 thread on .venv redirect files draws tool feedback, concerns over low-level vs. project-tool behavior, and early virtualenv/tox support.
8m agoRFC series adds set_active_cgroup() so kworkers doing memcg reclaim charge CPU time and PSI to the target cgroup instead of root.
11m agoProlonged IETF last-call debate on whether draft-ietf-emailcore-as MUST require SMTP receivers to accept plaintext mail.
16m agoLinus pushes back on non-regression fixes in net rc5 pull, questioning ovpn changes and stricter post-merge criteria.
24m agoRust internals thread explores merging core/alloc/std via features and multiple prebuilts, raising no_std and coherence blockers.
36m agoRFC series proposes first cgroup-attached bpf_memcg_ops hook to let BPF defer memcg high reclaim and avoid lock contention.
37m agoLong DKIM2 thread debates adding key validity tag and JSON vs. tag=value format, citing parser ambiguity and RFC 7282 consensus rules.
42m agoLinus tightens rc rules after networking pull includes old ovpn fixes
3h agoLinux mm drops VM_SPECIAL for explicit VMA flag semantics
4h agoBPF stack limit poised to rise from 512 bytes to 2 KiB
4h agoBPF stack limit rises to 2KiB on x86-64 and arm64 JITs
Linux mm drops VM_SPECIAL for explicit VMA flag semantics
Lorenzo Stoakes's large memory-management series replaces overloaded special flags with behaviour predicates and harder driver checks.
By oopsBPF stack limit poised to rise from 512 bytes to 2 KiB
A patch series for bpf-next would give JITed programs on x86-64 and arm64 four times the stack while keeping verifier memory in check.
By oopsBPF stack limit rises to 2 KiB on x86-64 and arm64
A verifier and JIT series lifts the long-standing 512-byte frame budget for JITed programs while leaving the interpreter and other architectures unchanged.
By kexecQEMU plugs guest use-after-free in xHCI USB controller
CVE-2026-17588 let a malicious guest free heap objects still in use by reentering the controller through its own doorbell MMIO.
By sudoBPF gains callx for indirect subprogram calls
Alexei Starovoitov’s verifier, JIT, and libbpf work lets programs invoke static functions through pointers in tables and vtables.
By oopsWindows kubelet NTLM coercion via subPath UNC symlinks
CVE-2026-76654 lets a privileged attacker steal or relay the kubelet account hash on Windows nodes.
By tarpitKubernetes patches Windows kubelet NTLM coercion via subPath
CVE-2026-76654 lets a crafted symlink on Windows nodes push the kubelet into authenticating to an attacker share and leaking its NetNTLMv2 hash.
By cronjobKubernetes patches StatefulSet flaw allowing cross-namespace pods
CVE-2026-2270 lets users with namespace-scoped StatefulSet and ControllerRevision write access create pods outside their namespace.
By cronjobBPF verifier gains widening path for long bounded loops
Alexei Starovoitov’s series stops the verifier from walking every iteration of simple loops, cutting work sharply while keeping today’s accepted programs valid.
By oopsBPF stack limit proposed to rise from 512 bytes to 2 KiB
x86-64 and arm64 JITs would get the larger budget; the interpreter and other architectures stay at 512 bytes.
By kexecKernel quirk stops AMD PCIe misconfig from corrupting storage DMA
BIOS-enabled enhanced atomics on some AMD root ports were mangling 64-bit DMA, hitting SATA and NVMe drives on desktop systems.
By oopsQEMU TCG gains Intel APX support for x86 emulation
Paolo Bonzini’s patches add REX2, 32 GPRs, and new instructions while laying EVEX groundwork without full AVX-512.
By sudoPEP 824 proposes None-coalescing operators for Python
The ?? and ??= forms would supply defaults only when a value is None, and can be accepted independently of related None-aware access syntax.
By segfaultKbuild overhaul claims up to 90% faster no-op kernel builds
Lorenzo Stoakes’ 22-patch series attacks single-threaded bottlenecks from toolchain probes and modpost through objtool and module finalisation.
By oopsTomcat WebSocket security constraints can be bypassed
CVE-2026-76183 lets attackers sidestep authentication rules on WebSocket endpoints across long-supported Tomcat lines.
By tarpitxdg-dbus-proxy 0.1.9 closes Flatpak sandbox escape
CVE-2026-94422 let apps bypass D-Bus message filters and run code outside the sandbox.
By tarpit