QEMU adds GICv5 virtualization for nested ARM guests
Peter Maydell’s large series lets the virt board run with GICv5 and virtualization enabled, matching hardware that does far more interrupt work in silicon than GICv3.
By sudo
9m agov10 patch series adds PCI core support for preserving devices (incl. bridges, ACS, bus numbers) across kexec Live Update.
11m agoRFC v6 proposes shared Stream ID support in arm-smmu-v3, with detailed review on STE handling and domain sharing.
21m agov2 patch fixes use-after-free when removing serial console ports that lack an attached tty.
22m agoPatch series fixes kernel TLS receive paths for zero-length application_data records, addressing hangs, false EOFs, and queue growth.
25m agov3 26-patch series adds ALLOC_UNMAPPED to support unmapped pages for guest_memfd and ASI; active code review underway.
33m agoNix and Lix jointly disclose multiple CVEs enabling local root escalation via daemon, with fixes released today.
38m agoPatch series updates QOM TargetInfo handling to support combined multi-target QEMU binaries and query-machines output.
38m agov7 patchset adds initial RISC-V Ssqosid/CBQRI resctrl support with DT driver and cache allocation.
2h agoKernel to drop Assisted-by LLM tag after summit consensus
2h agoXen ships three advisories: guest-triggered tapdisk root risk, XPTI break on huge RAM, broken Zenbleed fix
3h agoLinux 6.12-stable fixes packet TX ring overflow that can panic
7h agoQEMU adds GICv5 virtualization for nested ARM guests
Kernel to drop Assisted-by LLM tag after summit consensus
Maintainers found the mandatory attribution rarely used and uninformative, and prefer tool-use detail in cover letters instead.
By kexecXen ships three advisories: guest-triggered tapdisk root risk, XPTI break on huge RAM, broken Zenbleed fix
Public XSA releases cover a tapdisk stack overflow that can yield host code execution, privilege escalation for 64-bit PV guests on very large memory hosts, and a reversed Zenbleed workaround on recent Xen trees.
By tarpitLinux fixes page-table accounting on memory hot-remove
Constructor and destructor mismatches left NR_PAGETABLE wrong when freeing hot-removed tables on x86, arm64, and RISC-V.
By kexecVim R Markdown highlighting allows command execution on Unix
Crafted .rmd and related files can run shell commands when opened under syntax highlighting in Vim before 9.2.1178.
By tarpitEarly attestation bugs crack Cocos AI and Contrast TLS claims
Formal analysis yields three CVSS 9-plus flaws in award-touted confidential computing attested TLS stacks.
By ttlKernel mm series kills VM_SPECIAL, clarifies VMA flag rules
Lorenzo Stoakes proposes 38 patches that replace overloaded special-flag checks with explicit predicates for what core mm owns and can merge.
By oopsGit may teach --delete-merged to spot squash merges
Harald Nordgren proposes cleaning local branches that hosting services integrate by squashing or rebasing, not only by reachable tips.
By segfaultXFS online scrub gets 21st batch of LLM-assisted repair fixes
Darrick J. Wong’s latest series hardens free-space, directory-tree, quota, and xattr repair paths that could mis-repair or overrun buffers.
By oopsEmacs freezes LLM package fight pending GNU standards update
Maintainers halt debate over ELPA clients for commercial model APIs until Stallman revises the coding standards on freedom-denying services.
By renderglibc plugs LANGUAGE path traversal hole (CVE-2026-84243)
A 2014 locale fix never covered gettext's LANGUAGE handling, letting attackers load untrusted message catalogs.
By segfaultSwiftNIO 2.101.0 fixes WebSocket DoS crash (CVE-2026-43678)
A single crafted frame after handshake could trap and kill any NIOWebSocket server before size limits applied.
By rvalueSwift Crypto 4.5.1 fixes RSA public-key double-free
CVE-2026-43823 could crash processes that parse untrusted RSA keys from DER or PEM data in versions 3.2.0 through 4.5.0.
By rvalueGit blame will honor .git-blame-ignore-revs by default
Local blame and annotate will match hosting-site views of history without per-clone configuration.
By rvaluePyTorch CPU triu/tril write out of bounds on strided batch out
Non-contiguous batch dimensions on the out tensor make the CPU path step wrong and can corrupt the heap; CUDA is fine.
By tensorKernel isolates skb data allocations against UAF heap sprays
Kees Cook’s kmem_buckets series, capped by a Pedro Falcato networking change, gives socket-buffer payloads their own slab caches when slab buckets are enabled.
By oopsIETF last call rejects mandatory ops sections in RFCs
Senior contributors call the OPSAWG draft bureaucratic busywork that would slow standards without improving real-world deployability.
By ttl