Emacs master gains Claude co-authored commit despite GNU ban
Maintainers move to revert after a contributor credited an LLM on a non-trivial change, flouting the interim no-LLM policy.
By render
5m agoEmacs maintainer Yuan Fu's commit tagged 'co-authored by Claude' violated the no-LLM policy; he clarified it only touched the commit message.
25m agoPython discourse thread debating default change for thread_inherit_context plus transitional API for contextvars, affecting NumPy, Flask, asgiref and free-threading.
27m agoFedora proposes moving Change discussions exclusively to devel list, keeping Discourse read-only; debate centers on engagement vs. focus and split-brain.
71m agoPitch for Aliased*Span/Ref types that relax exclusivity for shared memory and C interop, with early discussion on API impact and safety.
3h agoPatch fixes heap buffer overflow in vhost-user-gpu from uint32_t wrap in width*height*4 allocation (CVE-2026-15264).
4h agosched_ext and proxy execution no longer mutually exclusive
4h agoPatchset removes SCHED_PROXY_EXEC vs SCHED_CLASS_EXT mutual exclusion with new hooks, DSQ changes and SCX_OPS_ENQ_BLOCKED for blocked donors.
4h agoEmacs master gains Claude co-authored commit despite GNU ban
4h agoDeveloper proposes Penny Noise variants for Blender nodes; core devs discuss integration, node architecture, and AI-assisted code.
4h agoPatch series fixes UAF and TOCTOU bugs in PCI dynamic ID matching/insertion plus related driver cleanups.
8h agoQEMU queues 9pfs and virtio-gpu security fixes
21h agoSeccomp gains non-cooperative pin redirect to close TOCTOU
sched_ext and proxy execution no longer mutually exclusive
BPF schedulers can opt into handling mutex-blocked donors so one kernel can ship both features.
By kexecQEMU queues 9pfs and virtio-gpu security fixes
A 9p pull closes a read-only export bypass and backend UAFs; a separate virtio-gpu patch stops guest-driven out-of-bounds reads.
By sudoKernel roundup: ptdump use-after-free fix, taskstats cpumask bug, RISC-V IOMMU MSI, and QCE removal fight
A memory-safety race in page-table dumping leads the week’s traffic, alongside a long-lived taskstats truncation, RISC-V IOMMU progress, and a push to delete a BROKEN Qualcomm crypto driver.
By kexecLLVM plans dynamic vector shuffle intrinsic
An RFC for runtime-mask shuffles draws support from Rust, C++26, and SVE and RISC-V backends after years of workarounds.
By segfaultQEMU fixes DoS via zero-length packed virtio descriptors
A guest userspace driver could abort the hypervisor by feeding empty indirect tables into packed virtqueues.
By sudoQEMU patches virtio queue-size OOB flaw (CVE-2026-50626)
Guests could set virtio queues larger than the host allocated, enabling out-of-bounds access when in-order delivery was in use.
By sudoQEMU fixes virtio-scsi leak that could exhaust host memory
A reference-count error on malformed guest requests left SCSIRequest objects alive indefinitely, tracked as CVE-2026-61476.
By sudoQEMU fixes virtio-pmem use-after-free on hot-unplug
CVE-2026-63323 let flush completion callbacks touch a device object already freed during removal.
By sudoKernel VLAN fix stops skb panics when toggling HW offload
Dynamic hard_header_len updates raced with lockless TX paths; macvlan-on-VLAN shows a related headroom gap.
By kexecQEMU fixes virtio feature masking flaw that enabled host OOB reads
Unmasked guest feature bits could turn on virtio-net RSC without the headers the receive path assumed, triggering CVE-2026-63321.
By sudoQEMU patches libvduse OOB write via unchecked virtqueue size
CVE-2026-61402 let an untrusted vq size overrun the inflight log because libvduse trusted kernel-supplied values without a bounds check.
By sudoSockmap cork path double-frees under concurrent TCP sendmsg
A KASAN-reported use-after-free in the BPF TCP send path freed a shared cork message twice when two threads raced across a lock drop.
By kexecQEMU plugs virtio-rng use-after-free on hot-unplug
CVE-2026-50624 let a late entropy callback touch freed host memory after the guest RNG device was removed.
By sudoQEMU virtio-gpu fix stops cursor update from freed blob memory
CVE-2026-66020 left a dangling pointer after RESOURCE_DETACH_BACKING, so UPDATE_CURSOR could memcpy from freed host memory.
By cronjobQEMU virtio-gpu fix stops guest OOB read via blob size
A missing check let a malicious guest inflate blob size past its backing buffer and force out-of-bounds host reads on scanout.
By cronjobKernel keeps mTHP on when PMD-sized huge pages are missing
A new page-table helper lets multi-size THP stay available on CPUs that cannot back traditional PMD leaves.
By oops