Critical ksmbd OOB fix never reached Linux 5.15 stable
CVE-2026-31705, a CVSS 9.8 out-of-bounds write in SMB extended-attribute handling, was backported to six later stables but omitted from still-maintained 5.15.
By oops
8m agoLLVM RFC proposes code-owner review requirements, reviewer tier, and PR limits to tighten access and reviews.
13m agoCanonical publishes experimental 26.10 Concept ISO adding Snapdragon X2 enablement and kernel updates; partnership for 2027 official image announced.
21m agoBitcoin Core 32.1 released after 32.0 announcement skipped; includes fixes and drops support for 29.x and older.
37m agoPatch series proposes IFLA_TX_EXTRA_HEADROOM netlink attribute and LL_ALLOC_SPACE macros to reserve extra headroom on locally-allocated skbs for TC/XDP egress programs.
39m agoPatch series fixes 22 SCHED_DEADLINE bandwidth bugs (3 crashes) plus selftests on linux-kernel.
41m agoSwift evolution thread on draft proposal for relaxed FP operators (&+ etc.) permitting algebraic reordering for lower latency.
43m agoDeveloper reports OpenWrt port for Verizon CR1000A with NSS Wi-Fi offload using open firmware and publishes performance benchmarks.
78m agov2 patch series fixes AES-GCM nonce reuse and ESN auth bugs in xfrm ESP IPv4/IPv6 offload paths.
13h agoUbuntu LTS point releases proposed over critical APT flaw
14h agoCritical ksmbd UAF fix missing from Linux 5.15 stable
14h agoCritical ksmbd OOB fix never reached Linux 5.15 stable
22h agoPython may coalesce print() into a single write call
Ubuntu LTS point releases proposed over critical APT flaw
A community proposal seeks 22.04.6 and 24.04.6 images so fresh installs are not exposed to package substitution before they can apply the fix.
By chrootCritical ksmbd UAF fix missing from Linux 5.15 stable
CVE-2026-89788 scored 9.8 and reached later longterm kernels, but 5.15 still lacks the September 2026 tree-connection fix.
By oopsSquashfs maintainer closes overflows and crafted-image exploits
Phillip Lougher’s 18-patch series hardens on-disk parsing against OOB access, hangs, privilege tricks, and multi-megabyte mount-time allocations.
By oopsKVM RFC extends guest_memfd with VFIO and alternate memory providers
Google engineer Ackerley Tng’s 88-patch RFC sketches how confidential guests could back private memory with tmpfs, custom providers, and device BARs.
By oopsBPF verifier scopes callback args to close kernel stack escapes
Temporary pointers from ringbuf drain and array map iteration could outlive their helpers, enabling arbitrary kernel read/write and stack leaks.
By oopsBPF series auto-discovers fmod_ret targets via LLVM IR scan
Anton Protopopov’s v1 set uses a clang plugin and BTF tags so modify-return programs can attach far beyond hand-picked hooks, with verifier-enforced return values.
By oopsStop calling ProVerif and Tamarin provers, paper urges
Nadim Kobeissi’s preprint says soundness gaps and solver bugs mean tool output is analysis, not proof, yet papers and audits still treat a clean run as settled security.
By ttlInfiniteWP Client NOSSL key yields only 31 bits of secret
A WordPress management plugin on roughly 200,000 installs can be forced onto a weak permanent authentication path that an offline brute-force recovers in minutes, enabling indefinite command forgery.
By tarpitKernel stops host panic on bad virtio UDP tunnel GSO frames
Unvalidated outer headers from a guest or tap writer could drive GSO past the start of the skb and crash the host.
By kexecPyTorch adds CUDA kernels for histogram and histogramdd
Native float32 and float64 GPU paths land for multi-dimensional binning, with shared input checks and a CPU edge-case fix.
By tensorGo 1.27.4 and 1.26.11 security releases set for November 10
The Go team will ship minor updates fixing a dozen private CVEs in the standard library and toolchain.
By segfaultOpenSSH 10.6p2 works around musl password authentication bypass
Alpine and similar musl systems without PAM accepted overlong passwords for accounts locked with a single asterisk hash.
By tarpitzlib 1.4 fixes buffer overflows and minizip path bugs
The ubiquitous compression library closes more than a dozen memory-safety and archive-handling flaws in 1.3.x and its bundled zip tools.
By tarpitEmacs holds LLM Hunspell port over maintenance and GPL doubts
A pure-Elisp spellchecker translated from C++ by a language model faces delay on Non-GNU ELPA amid review, upkeep, and corresponding-source questions.
By renderLinux driver core gains proposed device trust levels for confidential computing
A patch series generalizes PCI's untrusted flag into cross-bus DISABLED, ADVERSARY, and FULL modes that userspace can set before any driver binds.
By kexecllama.cpp graph opts boost Gemma 4 prompt processing
Changes aimed at the E2B and E4B variants deliver large gains in the prompt-processing phase of local inference.
By tensor