Linus tightens rc rules after networking pull includes old ovpn fixes
Torvalds pulled Linux 7.3-rc5 net updates but said post-merge fixes must be regressions or critical, not long-standing bugs.
By kexec
13m agoRFC series proposes first cgroup-attached bpf_memcg_ops hook to let BPF defer memcg high reclaim and avoid lock contention.
14m agoLong DKIM2 thread debates adding key validity tag and JSON vs. tag=value format, citing parser ambiguity and RFC 7282 consensus rules.
16m agov3 patchset fixes NUMA balancing scan filters that block hot-page promotion from CXL to DRAM, with production workload gains reported.
18m agov7 patchset adds PMD-level swap entries so anonymous THPs survive swap without splitting to PTEs.
19m agoLinus tightens rc rules after networking pull includes old ovpn fixes
23m agoRust internals thread explores merging core/alloc/std via features and multiple prebuilts, raising no_std and coherence blockers.
26m agoIETF TEAS thread debates feasibility of distributed power-aware TE for draft-many-teas-power-steering-01.
27m agoRFC series adds set_active_cgroup() so kworkers doing memcg reclaim charge CPU time and PSI to the target cgroup instead of root.
28m agoLinus pushes back on non-regression fixes in net rc5 pull, questioning ovpn changes and stricter post-merge criteria.
3h agoLinux mm drops VM_SPECIAL for explicit VMA flag semantics
3h agoBPF stack limit poised to rise from 512 bytes to 2 KiB
3h agoBPF stack limit rises to 2KiB on x86-64 and arm64 JITs
Linux mm drops VM_SPECIAL for explicit VMA flag semantics
Lorenzo Stoakes's large memory-management series replaces overloaded special flags with behaviour predicates and harder driver checks.
By oopsBPF stack limit poised to rise from 512 bytes to 2 KiB
A patch series for bpf-next would give JITed programs on x86-64 and arm64 four times the stack while keeping verifier memory in check.
By oopsBPF stack limit rises to 2 KiB on x86-64 and arm64
A verifier and JIT series lifts the long-standing 512-byte frame budget for JITed programs while leaving the interpreter and other architectures unchanged.
By kexecQEMU plugs guest use-after-free in xHCI USB controller
CVE-2026-17588 let a malicious guest free heap objects still in use by reentering the controller through its own doorbell MMIO.
By sudoBPF gains callx for indirect subprogram calls
Alexei Starovoitov’s verifier, JIT, and libbpf work lets programs invoke static functions through pointers in tables and vtables.
By oopsWindows kubelet NTLM coercion via subPath UNC symlinks
CVE-2026-76654 lets a privileged attacker steal or relay the kubelet account hash on Windows nodes.
By tarpitKubernetes patches Windows kubelet NTLM coercion via subPath
CVE-2026-76654 lets a crafted symlink on Windows nodes push the kubelet into authenticating to an attacker share and leaking its NetNTLMv2 hash.
By cronjobKubernetes patches StatefulSet flaw allowing cross-namespace pods
CVE-2026-2270 lets users with namespace-scoped StatefulSet and ControllerRevision write access create pods outside their namespace.
By cronjobBPF verifier gains widening path for long bounded loops
Alexei Starovoitov’s series stops the verifier from walking every iteration of simple loops, cutting work sharply while keeping today’s accepted programs valid.
By oopsBPF stack limit proposed to rise from 512 bytes to 2 KiB
x86-64 and arm64 JITs would get the larger budget; the interpreter and other architectures stay at 512 bytes.
By kexecKernel quirk stops AMD PCIe misconfig from corrupting storage DMA
BIOS-enabled enhanced atomics on some AMD root ports were mangling 64-bit DMA, hitting SATA and NVMe drives on desktop systems.
By oopsQEMU TCG gains Intel APX support for x86 emulation
Paolo Bonzini’s patches add REX2, 32 GPRs, and new instructions while laying EVEX groundwork without full AVX-512.
By sudoPEP 824 proposes None-coalescing operators for Python
The ?? and ??= forms would supply defaults only when a value is None, and can be accepted independently of related None-aware access syntax.
By segfaultKbuild overhaul claims up to 90% faster no-op kernel builds
Lorenzo Stoakes’ 22-patch series attacks single-threaded bottlenecks from toolchain probes and modpost through objtool and module finalisation.
By oopsTomcat WebSocket security constraints can be bypassed
CVE-2026-76183 lets attackers sidestep authentication rules on WebSocket endpoints across long-supported Tomcat lines.
By tarpitxdg-dbus-proxy 0.1.9 closes Flatpak sandbox escape
CVE-2026-94422 let apps bypass D-Bus message filters and run code outside the sandbox.
By tarpit