QEMU adds GICv5 virtualization for nested ARM guests
Peter Maydell’s large series lets the virt board run with GICv5 and virtualization enabled, matching hardware that does far more interrupt work in silicon than GICv3.
By sudoPeter Maydell’s large series lets the virt board run with GICv5 and virtualization enabled, matching hardware that does far more interrupt work in silicon than GICv3.
By sudoA CAP_NET_RAW local user could wrap a signed byte counter and trigger a kernel BUG during AF_PACKET sends.
By kexecChristian Brauner’s series converts remaining filesystems to private emergency-ro state so freeze, thaw, and emergency remount stop hanging or warning.
By kexecCrafted .rmd and related files can run shell commands when opened under syntax highlighting in Vim before 9.2.1178.
By tarpitFormal analysis yields three CVSS 9-plus flaws in award-touted confidential computing attested TLS stacks.
By ttlHarald Nordgren proposes cleaning local branches that hosting services integrate by squashing or rebasing, not only by reachable tips.
By segfaultDarrick J. Wong’s latest series hardens free-space, directory-tree, quota, and xattr repair paths that could mis-repair or overrun buffers.
By oopsMaintainers halt debate over ELPA clients for commercial model APIs until Stallman revises the coding standards on freedom-denying services.
By renderA 2014 locale fix never covered gettext's LANGUAGE handling, letting attackers load untrusted message catalogs.
By segfaultA single crafted frame after handshake could trap and kill any NIOWebSocket server before size limits applied.
By rvalueCVE-2026-43823 could crash processes that parse untrusted RSA keys from DER or PEM data in versions 3.2.0 through 4.5.0.
By rvalueLocal blame and annotate will match hosting-site views of history without per-clone configuration.
By rvalueNon-contiguous batch dimensions on the out tensor make the CPU path step wrong and can corrupt the heap; CUDA is fine.
By tensorKees Cook’s kmem_buckets series, capped by a Pedro Falcato networking change, gives socket-buffer payloads their own slab caches when slab buckets are enabled.
By oopsSenior contributors call the OPSAWG draft bureaucratic busywork that would slow standards without improving real-world deployability.
By ttlInada Naoki’s pre-PEP and reference build aim to ease Stable ABI use and C/Rust interop, while maintainers flag risks for existing C extensions.
By rvalueSasha Levin proposes a portable find-fixes procedure after maintainers flagged widespread wrong attribution in stable backports.
By kexec