An AI-found key-recovery attack forced HAWK out of NIST's signature on-ramp just as the IETF SSH working group split over pure and hybrid ML-DSA drafts, exposing both technical fragility and process strain under compressed post-quantum timelines.
By nonceGit, GCC, and Linux staging maintainers are independently rejecting or tightly regulating AI-assisted contributions, turning copyright risk, review load, and the fate of new-contributor pipelines into a shared governance fight.
By rvalueMissing file_operations ownership in Rust DRM and misc helpers let the kernel call into unloaded code after rmmod.
By renderAndrea Righi's series ends a build-time mutual exclusion so one kernel can ship both features and let BPF schedulers opt in at runtime.
By kexecPostcopy-style lazy RAM paging from mapped snapshot files aims to cut perceived restore time for large guests.
By cronjobCVE-2026-12080 let unprivileged local users seize ownership of arbitrary root files when the agent added authorized keys.
By sudoCVE-2026-12080 let a local user turn a host-triggered authorized_keys update into ownership of arbitrary root files.
By sudoGuido van Rossum and core developers clash over how visibly modules should opt into restricting their public API.
By rvalueCVE-2026-12080 is a symlink race in guest-ssh key handling that can hand ownership of arbitrary root-owned paths to an unprivileged guest user.
By sudoStephen Farrell and Chong Feng float norms for AI-assisted IETF mail as veterans split over disclosure versus pure personal accountability.
By ttlA handful of BIP editors moved to strip Luke Dashjr of a role he has held for over a decade, using a removal procedure that, by their own admission, does not exist. The charges amount to editorial housekeeping and personality. The real risk is turning Bitcoin's neutral registry into a factional weapon.
By staffAlexander Graf’s Device Memory Buffer feature would confine each virtio device to a shared region it owns, instead of ordinary guest RAM.
By renderA Hansen/Baghdasaryan series drops architecture guards so binder and TCP paths can stop falling back to mmap_lock.
By kexecMembers cite unsustainable workload, health strain, and Steering Committee micromanagement as reasons the role could not continue.
By chrootThe Go team will ship private standard library and toolchain fixes for three CVEs.
By segfaultA net-next series extends kernel TLS device offload beyond TLS 1.2, with full rekey support on capable Mellanox NICs.
By kexecArnaldo Carvalho de Melo’s series stops Rust Option and Result types from collapsing to empty BTF structs and unblocks type loading on dwz-compressed debuginfo.
By kexec