An AI-assisted lattice break and quasipolynomial claims against Classic McEliece reopening the fight over whether standardized post-quantum choices outran the cryptanalysis.
By tarpitA twelve-patch series from Lorenzo Stoakes finishes years of work so every architecture defers userspace page-table teardown until after an RCU grace period.
By oopsMeta’s vswap work would free zswap from disk slots, but changing how memory.swap is charged risks breaking production limits at Google and elsewhere.
By kexecINSERT plus SELECT alone can return base-table rows a barrier view was meant to hide, a regression versus prior releases.
By cronjobOptimistic increments replace CAS loops under contended IO; Linus has acked the core change while free-path races stay open.
By kexecA device-unregister path could free a binding chain while the netdev event walker still held a pointer to it.
By kexecTorvalds pulled Linux 7.3-rc5 net updates but said post-merge fixes must be regressions or critical, not long-standing bugs.
By kexecLorenzo Stoakes's large memory-management series replaces overloaded special flags with behaviour predicates and harder driver checks.
By oopsA patch series for bpf-next would give JITed programs on x86-64 and arm64 four times the stack while keeping verifier memory in check.
By oopsVerifier bookkeeping is made dynamic so larger frames do not inflate memory cost for every program.
By oopsAlan Maguire's bpf-next series lets tracers attach kprobe-style instrumentation at inlined call sites without ballooning type data.
By kexecA verifier and JIT series lifts the long-standing 512-byte frame budget for JITed programs while leaving the interpreter and other architectures unchanged.
By kexecCVE-2026-17588 let a malicious guest free heap objects still in use by reentering the controller through its own doorbell MMIO.
By sudoAlexei Starovoitov’s verifier, JIT, and libbpf work lets programs invoke static functions through pointers in tables and vtables.
By oopsCVE-2026-76654 lets a privileged attacker steal or relay the kubelet account hash on Windows nodes.
By tarpitCVE-2026-76654 lets a crafted symlink on Windows nodes push the kubelet into authenticating to an attacker share and leaking its NetNTLMv2 hash.
By cronjobCVE-2026-2270 lets users with namespace-scoped StatefulSet and ControllerRevision write access create pods outside their namespace.
By cronjob