AMD KVM nested-virt bug corrupted host memory on live migration
A fix already in mainline, once labeled benign, stops Windows VBS guests from smashing host RAM on 6.18 KVM hosts.
By kexecA fix already in mainline, once labeled benign, stops Windows VBS guests from smashing host RAM on 6.18 KVM hosts.
By kexecMeta reworks a Linus Torvalds idea so multi-CPU small reads stop bouncing the same folio's reference count.
By kexecThe sixth 25.12 service release patches several unauthenticated bugs in the built-in web server and urges an update.
By chrootMartin Feussner reports agent-led cryptanalysis of IACR archive constructions, with ordinary-hardware attacks and a call for independent review.
By nonceA revived patch series finally brings end-to-end Ethernet and a usable PCIe root complex to Raspberry Pi 4B emulation.
By sudoAn integer overflow lets torch.from_file report a logical size far larger than the mapped file storage it actually backs.
By tensorA world-readable waiting_for_supplier attribute can permanently hang both the reader and device probe on success.
By kexecText inference already works on mainline; Unsloth-shipped MoonViT-3d mmproj files still fail the CLIP loader.
By tensorAlexei Starovoitov’s series lets panics and exceptions run destructors without unwind tables, new uapi, or libbpf changes.
By oopsUnprivileged callers can permanently inflate Committed_AS and starve the system under strict overcommit.
By oopsA MuPDF-backed document viewer promises leaner PDF and ebook reading inside Emacs, but core contributors object that the name is too generic.
By renderMeta moves inode allocation off the shared kernfs lock after fleet hangs that blocked oomd and init while memory-max containers reclaimed.
By kexecA 38-patch series closes use-after-free, RCU, and buffer-bound bugs across the verifier, maps, iterators, and networking helpers.
By oopsIngress path now validates partial checksum metadata so guest or hardware edits cannot leave the stack with two views of the same packet.
By kexecSasha Levin shares workflows meant to cut wrong Fixes tags and missed stable markings, and tightens the docs those tags depend on.
By kexecXin Long's 15-part series adds sockets, crypto, paths, and congestion control so Linux can run QUIC natively over UDP.
By kexecAfter embargo expiry, Hyunwoo Kim details Infinity Core: use-after-free and bounds bugs across timer, signal, MM, futex, scheduler, and SLAB paths.
By tarpit