Untrusted csum_start and offset values can no longer leave CHECKSUM_PARTIAL pointing at arbitrary packet bytes after protocol decisions have been made.
By kexec
An opt-in incremental verifier aims to make fetch and push checks scale with incoming changes instead of full boundary size.
By rvalue
Programs compiled against kernel type information lack a stable ABI, so systemd joins ZFS and NVIDIA in linuxPackages.
By chroot
After a public report, the kernel will only trust CHECKSUM_PARTIAL when offsets match real TCP or UDP headers, or complete the checksum before protocol processing.
By oops
Emacs archive maintainers push back, saying NonGNU ELPA exists precisely so packages need not follow GNU legal policies.
By render
Alexei Starovoitov fixes production lock contention that left fork stuck for minutes while probes attached to shared binaries.
By kexec
A barrier wait added for safer promotion has no upper bound when a backend is blocked sending to a paused or dead client, stalling failover and related operations.
By sudo
An ITP for the C-based Nordstjernen engine stalls on whether its authors can validly claim and GPL code they largely did not write or review.
By chroot
2026 Contributor Summit notes also sketch a spring 2027 path to Git 3.0, security triage overload, and other open problems.
By rvalue
CVE-2025-40297 lets ports marked blocking still forward frames, defeating STP and MRP loop protection.
By kexec
Unlocked raw pointers in invalidation and cache updates can outlive a concurrent dynamo reset.
By tensor
A single unauthenticated connection can force tens to thousands of times more memory use than the traffic it sends.
By tarpit
SE-0556 would add Cell, ConstCell, and Volatile primitives, with early debate on naming, library placement, and safety under concurrency and C interop.
By rvalue
Implementers say varying q, rings, and ranks independently would raise hardware and multi-level code costs more than it gains.
By tarpit
A protocol-handler mismatch between request enqueue and dequeue can leak kernel heap memory and open an out-of-bounds write path.
By oops
Releases 4.0.14, 4.2.5, and 5.0.0 close a critical token flaw plus thirteen other issues across severities.
By tarpit