Kernel stops treating failed buffer writes as stale memory
A 21-patch series stops clearing BH_Uptodate on metadata write failure so filesystems keep the data they meant to write and report errors via BH_Write_EIO instead.
By oops
37m agov4 patchset adds bpf_ksock kfuncs so LSM programs can create/send on UDP sockets without userspace agents.
37m agoIETF thread on draft for handling LLM text in discussions draws 45 messages seeking policy input.
43m agoPatch series optimizes paint_down_to_common merge-base walk to early-exit when one side exhausts, with tests and doc.
84m agoNew ERC draft defines zero-knowledge spending policies and verifyPolicy hook for contract-held funds.
1h agoPatch series removes write support from debugfs_create_str() after converting two in-tree users, to eliminate double-free races on concurrent writes.
1h agoDisclosure of CVE-2026-64564 UAF in Linux SCTP with LPE and container escape impact; mitigation discussion on oss-security.
2h agoNew EIP proposes partial burn of validator rewards to taper issuance; 72-message thread debates solo staking viability, decentralization risks, and Hegota fork timing.
3h agov3 26-patch series adds ALLOC_UNMAPPED and direct-map management for guest_memfd and ASI use cases.
10h agoKernel stops treating failed buffer writes as stale memory
11h agoZapscape: KVM/x86 use-after-free lets guests escape to host
12h agoPowerDNS patches high-severity DNS packet resource exhaustion bug
12h agoLinux SCTP bug lets local users hit root and escape containers
Zapscape: KVM/x86 use-after-free lets guests escape to host
CVE-2026-64561 corrupts host shadow pages from untrusted guests when nested virtualization is exposed, especially on multi-tenant clouds.
By tarpitLinux SCTP bug lets local users hit root and escape containers
A use-after-free in Dynamic Address Reconfiguration, CVE-2026-64564, has been fixed after more than a decade in the tree.
By tarpitIntel proposes upstreaming PISA GPU backend to LLVM
The virtual ISA would give LLVM a portable, Intel-specific compilation target alongside existing NVIDIA and AMD GPU backends.
By rvalueBPF stack helpers race fixed with preemption disable
A preemptible window let concurrent tasks inflate callchain length and overwrite caller buffers via bpf_get_stack and bpf_get_stackid.
By oopsNixOS stewards clash over Hugging Face The Stack opt-out
A unilateral removal of org repos from the code-training dataset has split contributors over consent, copyright, and who speaks for the project.
By chrootBouncy Castle Java 1.85 closes 32 CVEs in core crypto paths
The July release patches signature, AEAD, keystore, and certificate-validation flaws in a library embedded across countless JVM applications.
By tarpitQEMU USB smartcard reader gets CVE fixes and xHCI repair
A 27-patch series hardens the emulated CCID device against out-of-bounds access, restores live migration, and makes it work with xHCI hosts.
By sudoEmacs will ship AGENTS.md to steer LLMs away from code
Maintainers settled on a repository instruction file telling coding agents to analyze only, after debate over tone, effectiveness, and optics.
By renderSwift reviews macros that can grant self access in property initializers
SE-0539 would let accessor macros promise the compiler that an initializer expression will run only after self is fully available.
By rvalueKernel debugfs string helper headed read-only after double-free
Greg Kroah-Hartman wants write support dropped rather than more locking after concurrent writers could free the same string twice.
By kexecX.Org patches libXfont2 font client flaws that can escalate privileges
Version 2.0.9 closes two heap memory bugs reachable from a malicious font server, one an incomplete fix from 2014.
By tarpitDraft EIP would burn ETH validator rewards to cap stake share
A tapered burn aims to cancel issuance incentives near 50% staked; critics say it would crush solo yields and concentrate operators.
By ledgerBPF gains 16-byte aggregate returns via R0:R2 pair
Kernel verifier and JITs learn LLVM 23's convention so subprograms and kfuncs can return __int128 and small structs by value.
By oopsLinus rejects per-CPU page tables as general MM design
ARM64 this_cpu_* optimization RFC hits a hard architectural wall over divergent kernel page tables.
By oopsKernel fix corrects wrong TLB flush in page table reclaim
Direct reclaim after MADV_DONTNEED could free a page table while leaving a stale paging-structure cache entry.
By oopsDjango patches high-severity spatial lookup file-write flaw
Staff users could trigger disk writes or network requests via GDAL rasters in admin filters; four CVEs land in 5.2.17 and 6.0.8.
By tarpit