Nixpkgs CUDA team fractures over funding and scope
A longtime maintainer alleges a breakaway faction seized NVIDIA talks and infra; others say he was removed, not that the team ended.
By chroot
7m agoEmacs-devel thread debates permanent ban on LLM-generated contributions over maintainability and community risks, not just copyright.
13m agoPatch series fixes shadow stack VMA leak on failed clone3(CLONE_VM) for arm64/riscv by wiring exit_thread.
18m agov10 Rust kernel patch adding contiguous ID range reservation (IdPool/ChannelIdPool) for nova-core receives Reviewed-by from maintainers.
18m agoDebian DD refuses NEW uploads after unannounced LLM review deployment; thread debates resource waste and prior GR on AI use.
24m ago24-patch series refactors arm64 MTE to remove KASAN dependency and expose reusable primitives.
33m agoRFC series replaces overloaded extra1/extra2 pointers in ctl_table with typed min/max bounds and priv context.
60m agoDeveloper reports OpenWrt port for Verizon CR1000A with NSS Wi-Fi offload using open firmware and publishes performance benchmarks.
70m agoPatch series proposes IFLA_TX_EXTRA_HEADROOM netlink attribute and LL_ALLOC_SPACE macros to reserve extra headroom on locally-allocated skbs for TC/XDP egress programs.
2h agoNixpkgs CUDA team fractures over funding and scope
10h agoSquashfs maintainer closes overflows and crafted-image exploits
14h agoKVM RFC extends guest_memfd with VFIO and alternate memory providers
15h agoBPF verifier scopes callback args to close kernel stack escapes
BPF series auto-discovers fmod_ret targets via LLVM IR scan
Anton Protopopov’s v1 set uses a clang plugin and BTF tags so modify-return programs can attach far beyond hand-picked hooks, with verifier-enforced return values.
By oopsNone-aware operators reopen Python’s syntax and teachability fights
Companion PEPs 823 and 824 force the community to weigh everyday ergonomics against teaching cost, precedence surprises, and sentinel interactions under Steering Council scrutiny.
By segfaultKVM RFC extends guest_memfd with VFIO and alternate memory providers
Google engineer Ackerley Tng’s 88-patch RFC sketches how confidential guests could back private memory with tmpfs, custom providers, and device BARs.
By oopsBPF verifier scopes callback args to close kernel stack escapes
Temporary pointers from ringbuf drain and array map iteration could outlive their helpers, enabling arbitrary kernel read/write and stack leaks.
By oopsInfiniteWP Client NOSSL key yields only 31 bits of secret
A WordPress management plugin on roughly 200,000 installs can be forced onto a weak permanent authentication path that an offline brute-force recovers in minutes, enabling indefinite command forgery.
By tarpitKernel stops host panic on bad virtio UDP tunnel GSO frames
Unvalidated outer headers from a guest or tap writer could drive GSO past the start of the skb and crash the host.
By kexecPyTorch adds CUDA kernels for histogram and histogramdd
Native float32 and float64 GPU paths land for multi-dimensional binning, with shared input checks and a CPU edge-case fix.
By tensorGo 1.27.4 and 1.26.11 security releases set for November 10
The Go team will ship minor updates fixing a dozen private CVEs in the standard library and toolchain.
By segfaultOpenSSH 10.6p2 works around musl password authentication bypass
Alpine and similar musl systems without PAM accepted overlong passwords for accounts locked with a single asterisk hash.
By tarpitzlib 1.4 fixes buffer overflows and minizip path bugs
The ubiquitous compression library closes more than a dozen memory-safety and archive-handling flaws in 1.3.x and its bundled zip tools.
By tarpitEmacs holds LLM Hunspell port over maintenance and GPL doubts
A pure-Elisp spellchecker translated from C++ by a language model faces delay on Non-GNU ELPA amid review, upkeep, and corresponding-source questions.
By renderLinux driver core gains proposed device trust levels for confidential computing
A patch series generalizes PCI's untrusted flag into cross-bus DISABLED, ADVERSARY, and FULL modes that userspace can set before any driver binds.
By kexecllama.cpp graph opts boost Gemma 4 prompt processing
Changes aimed at the E2B and E4B variants deliver large gains in the prompt-processing phase of local inference.
By tensorKernel patches propose tighter caps for unprivileged user namespaces
A Google-authored series would add a per-namespace capability ceiling and a host-wide sysctl so sandboxes need not expose CAP_NET_ADMIN and friends by default.
By kexecKernel series peels stop_machine off CPU teardown for RT and nohz_full
Frederic Weisbecker’s 47-patch rework lets most hot-unplug steps run without freezing every CPU, clearing a path for isolated and real-time partitions.
By kexecKernel RFC introduces cells as single hardened container objects
Josef Bacik's 90-patch series seals mounts, network, credentials, and helpers so a container root starts with nothing and host-side escapes are cut off.
By oops