Expedited Python, pip, and uv releases after the eMudhra incident expose how vendored trust roots turn one CA failure into an ecosystem-wide MITM crisis.
By rvalue
Sleepable helpers would let programs create executable anonymous mappings and write into the current task without the no-fault limits of probe_write_user.
By kexec
A v2 series adds negotiated buffer mapping types so exporters can hand importers physical addresses, P2P paths, and private interconnects without abusing dma_addr_t.
By render
Exponential call-chain walks that could take minutes now finish in milliseconds, clearing a path for deeper Rust BPF programs.
By oops
A man-in-the-middle attacker could replace a package after verification and run code as root when HTTP retries were enabled.
By tarpit
The cap aims to cut open-PR volume by nearly 30 percent and ease maintainer load from AI-era submissions.
By segfault
Expression indexes that 18 rejected are accepted in 19, then silently disagree with sequential scans after ALTER TYPE, cast changes, or output GUCs.
By sudo
Writing down the shared compression contract exposed a display path that treated compressed framebuffers as linear and could read past their end.
By render
Christian Brauner ships old /proc handler bugs found while aligning procfs with kernfs, aimed at stable kernels ahead of the larger conversion.
By kexec
Lorenzo Stoakes targets single-threaded kbuild, modpost, and objtool bottlenecks that dominate full, incremental, and no-op rebuilds.
By kexec
A GIJS-style key recovery fully breaks round-one RLCE faster than Classic McEliece, on laptop hardware.
By tarpit
Eight accounting bugs could crash Linux or leave deadline scheduling unable to admit tasks or offline CPUs.
By oops
A proposed patch rejects oversized cfg80211 key sequence counters that could overrun a fixed buffer in the Realtek SDIO driver.
By kexec
A change to serialize cold-cache downloads in torch.hub still needs packaging, docs, and timeout work before merge.
By tensor
Critical Active Storage bugs allow arbitrary file write and remote code execution; 8.0 security support ends in days.
By nonce
Plain sm_120 targets alone leave NVFP4 and block-scaled MMA unavailable on new NVIDIA GPUs.
By tensor