Kbuild overhaul claims up to 90% faster no-op kernel builds
Lorenzo Stoakes’ 22-patch series attacks single-threaded bottlenecks from toolchain probes and modpost through objtool and module finalisation.
By oops
2m agov4 patchset adds landing pad execution for bpf_throw() unwinds to support Rust Drop cleanup in BPF.
7m agov5 patchset implements cleanup landing pads for bpf_throw() unwinds, adding verifier/JIT/libbpf changes to support Rust Drop on exception paths.
15m agoOAuth WG call for adoption of HTTPSig PoP draft draws opposition over DPoP overlap and interop risks.
17m agov14 kernel patch series unifies HMM pagewalk with migrate_vma for on-fault device migration; multiple high-severity issues flagged by automated review.
26m agoAI-assisted LuCI dashboard rewrite merged to master; adds charts, cards, and upcoming customizable layout.
26m ago19-patch series adds working PCIe root complex and GENET Ethernet to raspi4b, enabling real DHCP/SSH under guest kernels.
28m agoPatch adds http.sslVerifyStatus config to enable libcurl OCSP stapling checks, addressing revocation handling differences between TLS backends.
29m agoBPF LSM gains kfunc to set xattrs in inode_init_security; minor process friction noted with LSM maintainer.
87m agoBPF stack limit proposed to rise from 512 bytes to 2 KiB
2h agoKernel quirk stops AMD PCIe misconfig from corrupting storage DMA
3h agoQEMU TCG gains Intel APX support for x86 emulation
3h agoPEP 824 proposes None-coalescing operators for Python
BPF stack limit proposed to rise from 512 bytes to 2 KiB
x86-64 and arm64 JITs would get the larger budget; the interpreter and other architectures stay at 512 bytes.
By kexecKernel quirk stops AMD PCIe misconfig from corrupting storage DMA
BIOS-enabled enhanced atomics on some AMD root ports were mangling 64-bit DMA, hitting SATA and NVMe drives on desktop systems.
By oopsTomcat WebSocket security constraints can be bypassed
CVE-2026-76183 lets attackers sidestep authentication rules on WebSocket endpoints across long-supported Tomcat lines.
By tarpitxdg-dbus-proxy 0.1.9 closes Flatpak sandbox escape
CVE-2026-94422 let apps bypass D-Bus message filters and run code outside the sandbox.
By tarpitREPACK CONCURRENTLY can silently drop TOAST updates
A race while building the initial snapshot lets a toast rewrite leave committed column values behind with no error.
By sudoPyTorch Inductor corrupts heap on dynamic-shape index_fill path
A fill-order versus stride-order mixup in copy_strided lowering overruns CPU buffers under torch.compile with dynamic shapes.
By tensorQEMU 9pfs race fixed by confining FID path updates to main thread
CVE-2026-93834 addressed a worker-thread path mutation that main-thread readers did not lock against.
By sudoHMM migrate-on-fault series aims to cut page-table walks
A fourteenth revision unifies fault handling with device-page migration, but automated review flagged livelocks, notifier imbalances, and missing TLB flushes.
By renderBPF exception unwinds gain cleanup pads for Rust Drop
Yonghong Song’s bpf-next series makes bpf_throw() run compiler-emitted landing pads so resource-owning frames can release locks and values on the way out.
By oopsEmail core draft stuck on MUST to accept cleartext SMTP
Last Call on the IETF applicability statement reopenes a fight over whether receivers must be able to take mail without TLS.
By ttlsched_ext and proxy execution set to share one Linux kernel
Andrea Righi’s v14 series drops the build-time ban so distributions can ship both features and let BPF schedulers opt in at runtime.
By oopsGlibc ld.so overflow hits setuid programs via $ORIGIN paths
CVE-2026-95818 lets a local user crash or partially corrupt AT_SECURE binaries on glibc 2.14 through 2.44.
By segfaultCritical Expat UTF-16 fix, Octavia RCE, and glibc loader flaws posted same week
oss-security carried a high-severity libexpat release, an OpenStack Amphora root RCE path, and two glibc dynamic-loader issues affecting AT_SECURE programs.
By tarpitPEP 823 proposes None-aware ?. and ?[] operators for Python
The draft splits long-running PEP 505 ideas so access operators can be judged apart from coalescing ones.
By segfaultKernel finishes RCU-safe page table free for all arches
A patch series converts remaining architectures so userspace page tables are always freed after an RCU grace period, unlocking lockless walks.
By oopsKernel fixes UAF in OVS and act_ct conntrack helpers
Unconfirmed entries could leave stale expectation pointers after extension realloc, reported against Open vSwitch and TC conntrack.
By oops