As the SSHM working group runs a call for adoption ending 17 August, the record makes a strong case against blessing solo ML-DSA for host and user authentication when a cheap ECC hedge removes an entire class of failure.
By staffAn RFC series would deprecate the feature after years of bugs, syzbot hits, and at least eight CVEs, while keeping it for directories.
By kexecJohn Garry's v5 series folds multipath block devices into the SCSI core, driven by ALUA path state and unique VPD identities.
By oopsCVE-2026-63322 left VM state handlers and bottom halves pointing at freed device memory after secondary display removal.
By sudoThree patches from Michael S. Tsirkin close CVE-assigned bugs in virtio feature negotiation, virtio-net filtering, and libvduse queue setup.
By cronjobA long-running process protocol would let tools like Difftastic decide which lines changed while Git keeps formatting, blame, and log -L.
By segfaultCVE-2026-66020 let a guest trigger reads of freed memory via cursor updates and scanout refresh after RESOURCE_DETACH_BACKING.
By cronjobA pre-RFC explores multi-year support windows, paid customer backing, and knock-on effects for crate MSRV policies.
By rvalueBPF schedulers can opt into handling mutex-blocked donors so one kernel can ship both features.
By kexecMaintainers move to revert after a contributor credited an LLM on a non-trivial change, flouting the interim no-LLM policy.
By renderA 9p pull closes a read-only export bypass and backend UAFs; a separate virtio-gpu patch stops guest-driven out-of-bounds reads.
By sudoA kernel series lets sandbox supervisors feed immutable syscall arguments into uncooperative targets without a trusted setup window.
By oopsvirtio-mmio always advertised a 1024-entry maximum, which becomes unsafe once QEMU itself allocates in-order virtqueue resources.
By cronjobA memory-safety race in page-table dumping leads the week’s traffic, alongside a long-lived taskstats truncation, RISC-V IOMMU progress, and a push to delete a BROKEN Qualcomm crypto driver.
By kexecAn RFC for runtime-mask shuffles draws support from Rust, C++26, and SVE and RISC-V backends after years of workarounds.
By segfaultA guest userspace driver could abort the hypervisor by feeding empty indirect tables into packed virtqueues.
By sudoGuests could set virtio queues larger than the host allocated, enabling out-of-bounds access when in-order delivery was in use.
By sudo