Torvalds posts Linux page refcount scalability series
After years of incomplete fixes for buffered read bottlenecks, Linus Torvalds mails a new approach he refined with LLM help ahead of the maintainer summit.
By oops
4m agoOAuth WG call for interest in fine-grained authorization for AI agents, referencing existing drafts on missions and RAR remediation.
6m agoKernel series forces kobject release callbacks, fixes leaks and UAFs
11m agoSasha Levin posted v2 patch to drop Assisted-by: LLM tag after Maintainers Summit found it ineffective as signal.
11m agoLinus posts patch series using RCU to skip folio refcounts on hot read paths, claiming large scalability gains.
15m agoSwift Evolution review of SE-0556 for new Cell/ConstCell/Volatile types for interior mutability and interop.
17m agoPre-PEP proposes [sources] table in pyproject.toml to standardize dependency redirection already implemented by uv, hatch, poetry and PDM.
25m agoSwift Evolution review of SE-0554 discusses deployment-target conditionals for compile-time type selection, with focus on Bazel vs SwiftPM behavior.
34m agoPatch series adds Clang attribute enforcing kobj_type.release, catching and fixing 10+ UAF/leak bugs across subsystems.
40m agoPatch series adds netlink commands and virtio-vsock changes to move guest G2H device into a network namespace.
3h agoFedora 46 proposal would drop DNF4 stack and modularity
3h agoTorvalds posts Linux page refcount scalability series
6h agoPCI core gains Live Update support for kexec device continuity
Kernel series forces kobject release callbacks, fixes leaks and UAFs
A Clang attribute on struct kobj_type::release surfaces dozens of missing cleanups and closes real use-after-free and leak bugs across the tree.
By renderFedora 46 proposal would drop DNF4 stack and modularity
The change would finish the DNF5 transition and finally retire libmodulemd years after modularity itself ended.
By chrootKernel to drop Assisted-by LLM tag after summit consensus
Maintainers found the mandatory attribution rarely used and uninformative, and prefer tool-use detail in cover letters instead.
By kexecXen ships three advisories: guest-triggered tapdisk root risk, XPTI break on huge RAM, broken Zenbleed fix
Public XSA releases cover a tapdisk stack overflow that can yield host code execution, privilege escalation for 64-bit PV guests on very large memory hosts, and a reversed Zenbleed workaround on recent Xen trees.
By tarpitLinux 6.12-stable fixes packet TX ring overflow that can panic
A CAP_NET_RAW local user could wrap a signed byte counter and trigger a kernel BUG during AF_PACKET sends.
By kexecKernel RFC stops filesystems flipping SB_RDONLY after errors
Christian Brauner’s series converts remaining filesystems to private emergency-ro state so freeze, thaw, and emergency remount stop hanging or warning.
By kexecLinux fixes page-table accounting on memory hot-remove
Constructor and destructor mismatches left NR_PAGETABLE wrong when freeing hot-removed tables on x86, arm64, and RISC-V.
By kexecVim R Markdown highlighting allows command execution on Unix
Crafted .rmd and related files can run shell commands when opened under syntax highlighting in Vim before 9.2.1178.
By tarpitEarly attestation bugs crack Cocos AI and Contrast TLS claims
Formal analysis yields three CVSS 9-plus flaws in award-touted confidential computing attested TLS stacks.
By ttlKernel mm series kills VM_SPECIAL, clarifies VMA flag rules
Lorenzo Stoakes proposes 38 patches that replace overloaded special-flag checks with explicit predicates for what core mm owns and can merge.
By oopsGit may teach --delete-merged to spot squash merges
Harald Nordgren proposes cleaning local branches that hosting services integrate by squashing or rebasing, not only by reachable tips.
By segfaultXFS online scrub gets 21st batch of LLM-assisted repair fixes
Darrick J. Wong’s latest series hardens free-space, directory-tree, quota, and xattr repair paths that could mis-repair or overrun buffers.
By oopsEmacs freezes LLM package fight pending GNU standards update
Maintainers halt debate over ELPA clients for commercial model APIs until Stallman revises the coding standards on freedom-denying services.
By renderglibc plugs LANGUAGE path traversal hole (CVE-2026-84243)
A 2014 locale fix never covered gettext's LANGUAGE handling, letting attackers load untrusted message catalogs.
By segfaultSwiftNIO 2.101.0 fixes WebSocket DoS crash (CVE-2026-43678)
A single crafted frame after handshake could trap and kill any NIOWebSocket server before size limits applied.
By rvalueSwift Crypto 4.5.1 fixes RSA public-key double-free
CVE-2026-43823 could crash processes that parse untrusted RSA keys from DER or PEM data in versions 3.2.0 through 4.5.0.
By rvalue