Flawed eMudhra P-384 intermediates forced same-week certifi purges and expedited Python, pip, uv, and ssl releases, exposing how package install paths outsource trust to browser-like stores.
By tarpitLLVM, the kernel, and Emacs are fighting the same battle: how to protect scarce maintainer attention without shutting out legitimate help.
By rvalueA Type-C init retry meant for flaky PPM responses spammed every boot until its author narrowed the logic.
By oopsNo patched kernels are available yet for 22.04, 24.04, or 26.04 despite a CVSS 9.8 rating.
By relayDistros can link one shared library instead of two static bundled copies, enabling offline builds and faster security updates.
By tensorA security fix makes torch.export.load reject disallowed operators; regression coverage is being extended to the load path.
By tensorA 23-patch series from Sean Christopherson fixes the uaccess failure mode and hardens VM destruction so guest memory writes cannot hit the wrong mm.
By oopsProposed helpers would let privileged BPF programs allocate anonymous pages, including executable ones, and fault in copies into the current process.
By oopsThe change targets diamond dependency failures that break resolution when transitive requirements conflict on major versions.
By segfaultGWin32AppInfo no longer mangles registry command lines through POSIX shell quoting, closing CVE-2026-102038.
By renderCompromised version 2.1.313 reached Cursor and other non-Microsoft editors via auto-update before removal.
By tarpitA 22-part series replaces immediate per-patch rewrites with a sorted deferred list, turning O(N*M) fixups into a single O(N) commit.
By kexecPatches headed for stable kernels stop stale compressed pages and large swap-ins that could map other files' blocks on zram-style devices.
By kexecSergey Senozhatsky’s zcomp overhaul ends reader/writer priority inversion and trims per-CPU compressor memory, and Andrew Morton has queued it.
By oopsSix high-rated flaws in protocol and TCP handling can exhaust CPU or memory, crash the engine, or let traffic evade inspection.
By nonceTorvalds boots the 7.4 SPARC series to 7.5 and scolds a contributor for teaching how to hide rebase timestamps.
By oopsEight stable-bound fixes stop zonelist rebuilds from causing wrong-zone allocations and NULL pointer crashes.
By kexec