Linux makes per-VMA locks unconditional on all configs
The change lets binder and TCP drop mmap_lock fallbacks, and Andrew Morton has queued the series for testing.
By oops
12m agoSwift pitch for @called(once) attribute on closures to enforce one-time calls and improve non-copyable type support.
17m agoPatch revised to retain mapped dropbehind folios after fault-around discussion, avoiding potential sleep-in-atomic; Andrew Morton reviewing.
28m agoPatch series fixes two NULL derefs in btf_type_show() and btf_modifier_show() for void BTF types, one triggered via bpffs map dumps after recent htab changes.
75m agoPatch series adds explicit ZONE_DEVICE folio checks in three mm walkers (madvise, huge_memory, mempolicy) to prevent incorrect aging/reclaim/migration of device-coherent memory.
1h agoPatch fixes VM_MAYWRITE omission in ublk mmap allowing mprotect upgrade on read-only command buffer, matching recent drm/ptp fixes.
2h agoNixOS contributors debate adding explicit ban on LLM-generated PR descriptions/commits, citing policy spirit and extractive quality.
4h agoEmacs 31.1 source and Windows binaries announced; thread includes minor build bug report and terminology clarifications on package addition.
4h agoELPA submission for LLM-assisted Sapling client draws RMS into debate on rejecting LLM-generated code and suitable headers.
6h agoLinux makes per-VMA locks unconditional on all configs
9h agoQEMU RFC revives Raspberry Pi Pico and RP2040 machine model
21h agoGit race with geometric repack hides objects from live readers
24h agoKernel clamps qdisc quantum paths that let admins soft-lock hosts
Confidential VMs force KVM to pick sides on attestation and trust
Arm CCA realms and TDX quote plumbing are no longer vendor demos; they are mainline ABI fights over roots of trust, hardware gaps, and how much attestation the hypervisor should own.
By kexecQEMU RFC revives Raspberry Pi Pico and RP2040 machine model
Gilles Grimaud posts a thirty-patch series aimed at bare-metal firmware debug and CI without physical boards.
By cronjobKernel clamps qdisc quantum paths that let admins soft-lock hosts
Eight traffic-control schedulers still allowed tiny quanta after setup, reopening a deficit-loop DoS under the qdisc lock.
By kexecFour U-Boot filesystem overflows risk pre-boot code execution
Integer overflows in ZFS, SquashFS, EXT4, and a shell move command can under-allocate heap buffers through U-Boot 2026.01-rc4.
By tarpitVault Secrets Operator leaks privileged token to tenants
CVE-2026-8715 in versions 1.3.0–1.4.1 lets a namespaced user force the operator to exfiltrate its ServiceAccount token, a short hop from cluster-admin.
By tarpitKernel fix breaks vmalloc livelock under memory pressure
A circular lock dependency in the vmap purge path could stall the whole system when reclaim and purge work collided.
By kexecglibc plugs heap overflow in fopen ccs= charset handling
CVE-2026-18374 let a crafted mode string overrun a small heap buffer when a charset token stripped to empty.
By segfaultDRM scheduler fix closes unprivileged GPU fence UAF read
A core lifetime bug let userspace read freed scheduler memory via exported fences in amdxdna, nouveau, and msm.
By kexecQEMU series makes Human Monitor Protocol optional at build time
Marc-André Lureau’s 50-patch work lets builds drop HMP for a QMP-only binary, shrinking size and attack surface.
By sudoKernel trusted-keys path hardens TPM1 seal and HMAC checks
Forged TPM 1.x replies could overflow a fixed-size blob buffer or skip response authentication entirely.
By kexecLinux kernel panics on GSO fragments after IP reassembly
CVE-2026-80590 lets an unprivileged user trigger a BUG_ON in skb_segment via tap or virtio paths that keep GSO metadata on defragmented packets.
By kexecBubblewrap 0.12.0 stops symlink writes outside the sandbox
The fix closes a setup-time traversal that could let a malicious app image plant files on the host via Flatpak and similar tools.
By noncetmpfs casefold option leaked Unicode maps, enabling local DoS
Unprivileged users could exhaust kernel memory by repeatedly setting the casefold mount option on tmpfs.
By kexecRMS: GNU ELPA must reject LLM-generated packages
A Magit-style Sapling client for Emacs triggers a policy fight over AI code and package maintenance.
By renderKernel reverts IRQ guard switch after Syzbot finds nested lock hazards
Refcounted interrupt disable lands for safer nesting and Rust SpinLockIrq, but wiring it into scoped cleanup guards is rolled back until stronger tooling exists.
By kexecDRM series moves dma_resv to refcounted dynamic allocs
Christian König proposes dropping embedded reservation objects across GEM, TTM, and drivers, with Claude-assisted patches and automated review already flagging serious leaks.
By render