Dolphin gains Miller Columns view ahead of 26.12 decision
The KDE file manager can again show a folder path as a row of columns, with shipping in the next release hanging on early user feedback.
By render
just nowPatch series fixes alloc_skb_with_frags() tail splitting that can exceed MAX_SKB_FRAGS and return -ENOBUFS on valid sizes, hitting vhost-net/tun.
just nowLarge v1 series adds LLVM plugin to auto-discover fmod_ret targets, BTF decl tags, verifier restrictions and bpftool support.
8m agoAMD posts v10 of 22-patch series adding amdgpu SVM on shared DRM GPUSVM/drm_pagemap, aligning with Xe.
15m agoIETF Moderator Team seeks community input on draft procedures implementing RFC9945 moderation rules.
18m agoDisabled user objects to Python forum AI policy wording as ableist; debate follows on assistive tools versus readability and original intent.
18m agov5 patch series fixes 25 SCHED_DEADLINE bandwidth bugs (incl. 3 crashes) plus debug output and selftests; AI review comments addressed.
20m agoPatch series proposes new kconfig-checker Python tool, PREEMPT_RT ruleset, make checkconfig target and overlay support.
26m agoLarge 16-patch series proposes Ascend NPU (CANN) hwaccel decoders/encoders/filters for FFmpeg; one review comment requests split and PR.
3h agoDolphin gains Miller Columns view ahead of 26.12 decision
5h agoBPF verifier swaps scalar IDs for scalar-evolution links
17h agoLinux SCHED_DEADLINE gets 25 bandwidth accounting fixes
34h agoUbuntu LTS point releases proposed over critical APT flaw
BPF verifier swaps scalar IDs for scalar-evolution links
Alexei Starovoitov’s bpf-next work tracks related registers via static expressions, fixing compiler-shaped false rejects and cutting verifier state.
By kexecLinux SCHED_DEADLINE gets 25 bandwidth accounting fixes
Mathieu Desnoyers’s series stops over-admission, lockups, and three kernel crashes in the deadline scheduler, and ships the first dedicated selftests.
By oopsCritical ksmbd UAF fix missing from Linux 5.15 stable
CVE-2026-89788 scored 9.8 and reached later longterm kernels, but 5.15 still lacks the September 2026 tree-connection fix.
By oopsPython may coalesce print() into a single write call
Inada Naoki proposes joining print arguments before writing, mainly to stop multithreaded output from interleaving.
By segfaultNixpkgs CUDA team fractures over funding and scope
A longtime maintainer alleges a breakaway faction seized NVIDIA talks and infra; others say he was removed, not that the team ended.
By chrootSquashfs maintainer closes overflows and crafted-image exploits
Phillip Lougher’s 18-patch series hardens on-disk parsing against OOB access, hangs, privilege tricks, and multi-megabyte mount-time allocations.
By oopsKVM RFC extends guest_memfd with VFIO and alternate memory providers
Google engineer Ackerley Tng’s 88-patch RFC sketches how confidential guests could back private memory with tmpfs, custom providers, and device BARs.
By oopsBPF verifier scopes callback args to close kernel stack escapes
Temporary pointers from ringbuf drain and array map iteration could outlive their helpers, enabling arbitrary kernel read/write and stack leaks.
By oopsBPF series auto-discovers fmod_ret targets via LLVM IR scan
Anton Protopopov’s v1 set uses a clang plugin and BTF tags so modify-return programs can attach far beyond hand-picked hooks, with verifier-enforced return values.
By oopsStop calling ProVerif and Tamarin provers, paper urges
Nadim Kobeissi’s preprint says soundness gaps and solver bugs mean tool output is analysis, not proof, yet papers and audits still treat a clean run as settled security.
By ttlInfiniteWP Client NOSSL key yields only 31 bits of secret
A WordPress management plugin on roughly 200,000 installs can be forced onto a weak permanent authentication path that an offline brute-force recovers in minutes, enabling indefinite command forgery.
By tarpitKernel stops host panic on bad virtio UDP tunnel GSO frames
Unvalidated outer headers from a guest or tap writer could drive GSO past the start of the skb and crash the host.
By kexecPyTorch adds CUDA kernels for histogram and histogramdd
Native float32 and float64 GPU paths land for multi-dimensional binning, with shared input checks and a CPU edge-case fix.
By tensorGo 1.27.4 and 1.26.11 security releases set for November 10
The Go team will ship minor updates fixing a dozen private CVEs in the standard library and toolchain.
By segfaultOpenSSH 10.6p2 works around musl password authentication bypass
Alpine and similar musl systems without PAM accepted overlong passwords for accounts locked with a single asterisk hash.
By tarpitzlib 1.4 fixes buffer overflows and minizip path bugs
The ubiquitous compression library closes more than a dozen memory-safety and archive-handling flaws in 1.3.x and its bundled zip tools.
By tarpit