Netherlands builds sovereign government desktop on NixOS
DAWO targets reproducible public-sector workstations after a Microsoft cutoff at the ICC underscored foreign software risk.
By chroot
6m agov4 MGLRU series adds frequency-guided promotion, fixes LRU/PSI inconsistencies, claims 10-40% gains across platforms.
12m agoQEMU v7 series of 65 patches replaces free-form property types with formal QAPI schema links for QOM/qdev introspection.
17m agoSwift forum discusses whether noncopyable resource types like FileHandle should close in deinit, seeking LSG guidance for swift-system consistency.
18m agoPatch fixes per-node proactive reclaim to scan all zones incl. ZONE_MOVABLE on movable-only nodes.
21m agoPatch series adds lockdep_unregister_key_nosync() to remove redundant expedited RCU waits when destroying mq qdiscs under PROVE_LOCKING.
27m agoStable backport of fix for slab-out-of-bounds read in cls_u32 u32_bind_class when fh is a hash node.
31m agoPHP team pre-announces critical security release covering two CVSS 9.2 vulnerabilities.
32m agoPatchset adds ingress validation and hardening for virtio_net_hdr CHECKSUM_PARTIAL to close packet edit inconsistency bugs.
2h agoKernel tool will stop CCing LKML on nearly every patch
3h agoCritical CouchDB and certifi fixes land with Tomcat auth bypass patch
3h agoNTP group moves to drop leap seconds from NTPv5 draft
4h agoeMudhra intermediate keys compromised, trust stores urged to act
eMudhra intermediate keys compromised, trust stores urged to act
Eight intermediates trusted by major root programs had their private keys exposed; six were for TLS and two for code signing.
By tarpitGo 1.27.3 ships unannounced for first urgent-track CVE
Damien Neil confirmed the quiet release distrusts intermediate certificates and fixes CVE-2026-111943.
By segfaultNTP group moves to drop leap seconds from NTPv5 draft
A BIPM resolution widening the UTC-UT1 tolerance to one hour makes leap-second handling unnecessary for centuries.
By ttlSwift Crypto 5.0.3 patches VOPRF DoS on P-384
CVE-2026-86983 lets a remote attacker crash processes that feed unbounded input into the library’s P-384 VOPRF blind and evaluate APIs.
By segfaultLinux RDMA core gains Ultra Ethernet reliable unconnected verbs
Eric Davis of Broadcom proposes the generic uverbs ABI so UET devices can land without reinventing jobs, wide keys, and ready-to-send queue pairs in every driver.
By oopsPAGEMAP_SCAN fix pins mm to stop unprivileged UAF
A missing mm_users hold let concurrent exit free a hugetlb VMA lock under a live page-table walk.
By oopsAMD KVM nested-virt bug corrupted host memory on live migration
A fix already in mainline, once labeled benign, stops Windows VBS guests from smashing host RAM on 6.18 KVM hosts.
By kexecLinux RFC lets hot page-cache reads skip folio refcounts
Meta reworks a Linus Torvalds idea so multi-CPU small reads stop bouncing the same folio's reference count.
By kexecAI audit claims practical breaks in 20 ePrint signature schemes
Martin Feussner reports agent-led cryptanalysis of IACR archive constructions, with ordinary-hardware attacks and a call for independent review.
By nonceOpenWrt 25.12.6 fixes remote uhttpd flaws on default installs
The sixth 25.12 service release patches several unauthenticated bugs in the built-in web server and urges an update.
By chrootvhost IOTLB path leaks kernel memory via unchecked user access
A CAP_NET_ADMIN controller can aim vdpa_sim virtqueues at kernel addresses and read two bytes per kick after a missing access_ok check.
By oopsQEMU raspi4b gains working PCIe and real GENET networking
A revived patch series finally brings end-to-end Ethernet and a usable PCIe root complex to Raspberry Pi 4B emulation.
By sudoKernel scripts/ set to shed its last Perl utilities
An RFC finishes converting all seventeen tools there to Python 3, stdlib only.
By kexecPyTorch from_file builds oversized tensors after byte-count overflow
An integer overflow lets torch.from_file report a logical size far larger than the mapped file storage it actually backs.
By tensorDriver core deadlock freezes probe on sysfs read since 5.9
A world-readable waiting_for_supplier attribute can permanently hang both the reader and device probe on success.
By kexecllama.cpp asked to take Kimi-K3 vision projector upstream
Text inference already works on mainline; Unsloth-shipped MoonViT-3d mmproj files still fail the CLIP loader.
By tensor