RISC-V IOMMU gains MSI remapping, default DMA-IOMMU, and VFIO
A redesigned MSI path lets 64-bit RISC-V translate interrupt targets like DMA, unlocking default IOMMU paging and userspace device assignment.
By kexec
3m agov16 of 45-patch series adding Arm CCA (confidential VMs + RMM) support to KVM, with hardware testing feedback and review.
5m agoOngoing review of conflict-log-to-table patch for logical replication identifies buffer-size and replica-identity bugs.
13m ago22-patch series changes buffer write-error handling: stop clearing BH_Uptodate on failure, switch filesystems to BH_Write_EIO.
42m agoPatch series adds mm_struct-based user-memory kfuncs and verifier changes for trusted-or-null BTF pointers to support BPF LSM inspection of exec arguments.
44m agoRMS-initiated thread explores concrete GCC/Glibc changes breaking old Emacs builds and seeks distro/Emacs practice adjustments for better long-term compatibility.
44m agoQEMU TCG v3 patch series proposes inline jump-cache probes, larger caches and cross-page chaining to cut per-TB dispatch overhead, with 5-9% measured gains.
53m agov7 series refines folio_alloc_swap error codes so vmscan/shmem skip large-folio splits when swap or memcg limits prevent any progress.
80m agoKernel mm maintainer asks for test data on vmscan reclaim overshoot and ineligible folio fixes.
12h agoIBM posts KVM series to run arm64 guests on s390 hosts
12h agoRISC-V IOMMU gains MSI remapping, default DMA-IOMMU, and VFIO
14h agoBPF plugs three NULL derefs in BTF type show paths
14h agocfg80211 validates WEXT IE buffers to stop OOB reads
IBM posts KVM series to run arm64 guests on s390 hosts
A seventh-round patch set wires arm64 KVM code into s390 via shared markers and a new SAE instruction for hardware-accelerated guests.
By kexecBPF plugs three NULL derefs in BTF type show paths
Key-less hash map dumps and bpf_snprintf_btf() on void or var types could oops the kernel; Jiayuan Chen restores rejections and safe placeholders.
By kexecLinux gains initial USB4 support on Apple M1, M2, and M3
A mainline patch series brings first Thunderbolt host-router bring-up to Apple Silicon, limited for now to XDomain links and USB3 tunnels.
By oopsHTTP WG moves to fence off status 402 as x402 spreads
Outside payment projects have assigned their own meaning to the long-reserved code; Mark Nottingham has floated a draft to limit collisions.
By staffLinux makes per-VMA locks unconditional on all configs
The change lets binder and TCP drop mmap_lock fallbacks, and Andrew Morton has queued the series for testing.
By oopsQEMU RFC revives Raspberry Pi Pico and RP2040 machine model
Gilles Grimaud posts a thirty-patch series aimed at bare-metal firmware debug and CI without physical boards.
By cronjobGit race with geometric repack hides objects from live readers
Elijah Newren fixes multi-pack-index lookups that treat present objects as missing when a concurrent repack retires their owning pack, plus a replay crash and mktree --batch bugs.
By rvalueKernel clamps qdisc quantum paths that let admins soft-lock hosts
Eight traffic-control schedulers still allowed tiny quanta after setup, reopening a deficit-loop DoS under the qdisc lock.
By kexecFour U-Boot filesystem overflows risk pre-boot code execution
Integer overflows in ZFS, SquashFS, EXT4, and a shell move command can under-allocate heap buffers through U-Boot 2026.01-rc4.
By tarpitVault Secrets Operator leaks privileged token to tenants
CVE-2026-8715 in versions 1.3.0–1.4.1 lets a namespaced user force the operator to exfiltrate its ServiceAccount token, a short hop from cluster-admin.
By tarpitKernel fix breaks vmalloc livelock under memory pressure
A circular lock dependency in the vmap purge path could stall the whole system when reclaim and purge work collided.
By kexecglibc plugs heap overflow in fopen ccs= charset handling
CVE-2026-18374 let a crafted mode string overrun a small heap buffer when a charset token stripped to empty.
By segfaultDRM scheduler fix closes unprivileged GPU fence UAF read
A core lifetime bug let userspace read freed scheduler memory via exported fences in amdxdna, nouveau, and msm.
By kexecConfidential VMs force KVM to pick sides on attestation and trust
Arm CCA realms and TDX quote plumbing are no longer vendor demos; they are mainline ABI fights over roots of trust, hardware gaps, and how much attestation the hypervisor should own.
By kexecQEMU series makes Human Monitor Protocol optional at build time
Marc-André Lureau’s 50-patch work lets builds drop HMP for a QMP-only binary, shrinking size and attack surface.
By sudoKernel trusted-keys path hardens TPM1 seal and HMAC checks
Forged TPM 1.x replies could overflow a fixed-size blob buffer or skip response authentication entirely.
By kexec