A one-line assembly amendment now treats an undefined category of software as presumptively toxic on a major free-software forge, after years of campaigning and a rationale page that returns 404.
By ledgerA challenge to whether a long-career former NSA cryptographer can neutrally steward pure-ML-KEM standardization was answered mainly with character defenses and a chair's formal warning, not a structural debate.
By tarpitAfter citing a 7/10 figure among pre-existing participants to advance pure ML-KEM, the chairs told the European Commission's PQC lead they would not disclose numbers, weights, or methods.
By tarpitA 98-patch series would retire the TCG Makefile stack, but dropping host --cross-cc options has maintainers split on containers versus local toolchains.
By sudoNon-movable allocations no longer thrash swap when defrag_mode cannot claim free pages from movable blocks.
By oopsCore SMP call and x86 TLB flush paths no longer pin the caller for the full remote completion wait, cutting real-time scheduling latency.
By kexecUnder-allocation when growing the buffer for the %mc and %mC conversions left a user-controlled write past the end of the heap block.
By rvalueA new draft pairs ML-DSA with elliptic-curve operations for smaller hybrid signatures, drawing scrutiny over strong unforgeability, code size, and hedging.
By ttlTwo heap out-of-bounds writes in fragment-boundary handling are exploitable for privilege escalation, and public exploits are out.
By tarpitA kernel race, two major resolver security releases, and an Exim privilege fix were disclosed the same day.
By tarpitGreg Kroah-Hartman and Jonathan Corbet say even non-generative AI code review of the xillybus driver must be credited.
By kexecGregory Price's v5 patchset flips device-backed memory from fully fungible to opt-in kernel services.
By kexecLarge data folios dirtied via GUP without subpage bits leave writeback holding a lock forever, stalling guests and host flushers.
By kexecBernstein objects to multiple combiners as needless complexity; MLS implementers plan immediate use of the concrete hybrids.
By ttlCVE-2026-53090 addressed incomplete failure-path analysis that could let unsafe programs pass verification.
By kexecA 24-patch series replaces type-specific DSI, DP, and HDMI helpers and cached connectors with a shared callback interface and common connector setup.
By renderA flood of kernel CVE IDs renews debate over whether individual triage is still a workable security practice.
By nonce