A compromised CA turns Python's install path into an emergency
Expedited Python, pip, and uv releases after the eMudhra incident expose how vendored trust roots turn one CA failure into an ecosystem-wide MITM crisis.
By rvalue
2m agoJiri Olsa posts v3 adding sleepable kfuncs bpf_user_anon_mmap, bpf_copy_to_user and bpf_user_munmap plus verifier and selftest changes.
2m agov2 patch series with 17 SCHED_DEADLINE bandwidth accounting fixes plus selftests, addressing crashes and hotplug/PI interactions.
6m agoRFC proposes static key for sys_call_table dispatch on x86 when Spectre/BHI mitigations off; Linus and PeterZ discuss perf vs. hijacking tradeoffs.
12m agoAuthor released iterative versions of luci-app-traffic-chart and is debugging install/theme/offload compatibility with testers on the forum.
31m agoNew draft proposes embedding DNS answers in HTTP to cut resolution time; thread debates formats, trust, and CDN steering.
31m agoRFC v5 proposes batching follow_page_mask GUP walks for large folios/mTHP, with 5-12x benchmark gains.
33m agoChristian Brauner posted RFC series to refactor procfs (modeled on kernfs) to eliminate page-fault stalls on entry removal; Linus commented with alternative approach.
38m agov7 patch series adding RTL8367S-VB (family D) support to rtl8365mb DSA driver; reviewer and author iterating on per-family abstractions.
2h agoPostgreSQL hackers brace for 1,000-plus AI-found bugs
3h agoDMA-buf gains mapping types beyond scatterlists
12h agoBPF verifier adopts call graphs, lifts frame limit to 32
12h agoDebian patches apt RCE that let MITM swap verified packages
PostgreSQL hackers brace for 1,000-plus AI-found bugs
A developer with a large private catalog of crashes, corruption, and MVCC flaws asks how to report them without drowning the project, and core contributors outline triage, security, and repro rules.
By sudoOpen source draws hard lines on AI text and AI tooling
LLVM moves to ban AI-written PR and RFC prose, Emacs argues over LLM-assisted packages, and a poisoned coding extension turns assistant workflows into a maintainer supply-chain risk.
By segfaultBPF verifier adopts call graphs, lifts frame limit to 32
Exponential call-chain walks that could take minutes now finish in milliseconds, clearing a path for deeper Rust BPF programs.
By oopsLLVM proposes two-PR limit for non-committers
The cap aims to cut open-PR volume by nearly 30 percent and ease maintainer load from AI-era submissions.
By segfaultPostgreSQL 19 JSON_ARRAY indexes can go stale after type changes
Expression indexes that 18 rejected are accepted in 19, then silently disagree with sequential scans after ALTER TYPE, cast changes, or output GUCs.
By sudoQualcomm UBWC layout documented; msm stops undersized buffers
Writing down the shared compression contract exposed a display path that treated compressed framebuffers as linear and could read past their end.
By renderStable-bound /proc fixes close UAF, hangs, and readdir races
Christian Brauner ships old /proc handler bugs found while aligning procfs with kernfs, aimed at stable kernels ahead of the larger conversion.
By kexecKernel build series cuts allmodconfig times by up to 36%
Lorenzo Stoakes targets single-threaded kbuild, modpost, and objtool bottlenecks that dominate full, incremental, and no-op rebuilds.
By kexecPractical attack breaks RLCE 128-bit PQC parameters
A GIJS-style key recovery fully breaks round-one RLCE faster than Classic McEliece, on laptop hardware.
By tarpitSCHED_DEADLINE fixes stop crashes and bandwidth leaks
Eight accounting bugs could crash Linux or leave deadline scheduling unable to admit tasks or offline CPUs.
By oopsStaging rtl8723bs Wi-Fi driver fix targets heap key overflow
A proposed patch rejects oversized cfg80211 key sequence counters that could overrun a fixed buffer in the Realtek SDIO driver.
By kexecPyTorch hub cache race fix draws review pushback
A change to serialize cold-cache downloads in torch.hub still needs packaging, docs, and timeout work before merge.
By tensorRails 8.0.5.2 and 8.1.4.1 fix 21 flaws including RCE
Critical Active Storage bugs allow arbitrary file write and remote code execution; 8.0 security support ends in days.
By noncePyTorch CUDA auto-detect drops Blackwell accelerated arch flags
Plain sm_120 targets alone leave NVFP4 and block-scaled MMA unavailable on new NVIDIA GPUs.
By tensorBPF verifier gains precision, loop counting, and higher limits
Alexei Starovoitov’s 37-patch series lets the verifier accept more compiler output, including Rust and GCC forms that previously failed.
By oopsLinux fixes zswap stale-data corruption and swap-in PSI bugs
A critical zswap path could return old pages instead of written zeroes, while batched swap reads hid zram and async stalls from pressure and delay accounting.
By kexec