LLM patch dispute and kernel security fixes

Kernel traffic on 2026-08-21 was dominated by a heated review of PTP OCP patches flagged as LLM-generated, together with a cluster of memory-safety fixes moving into stable trees. RISC-V IOMMU enablement and the revived 8250 NBCON conversion also advanced.

Maintainer flags LLM-generated PTP OCP patches

A seven-patch series adding R4006 and V9 I2C peripheral support to the ptp_ocp driver drew heated review on linux-kernel. A kernel maintainer flagged the submission as LLM-generated, and a reviewer separately objected to a dropped Reviewed-by tag. The exchange underscores continuing scrutiny of AI-assisted patches in core networking timekeeping code.

OpenRISC sigreturn privilege fix reaches stable

Stable maintainers carried a backport of an OpenRISC signal handling change that stops restoration of privileged SR bits on sigreturn. The original fix closed a userspace-controlled local privilege escalation path. The 5.15 stable series now contains the correction for that architecture.

RISC-V IOMMU enables MSI remapping and VFIO

A 21-patch v4 series for the RISC-V IOMMU adds MSI remapping for IMSIC, enables IOMMU_DMA by default, and supports VFIO and iommufd device assignment. Discussion on linux-kernel involved two participants refining the proposal. The work is required for safe DMA isolation and device passthrough on RISC-V platforms.

IPsec pull carries multiple XFRM memory-safety fixes

The IPsec maintainer submitted a ten-patch net pull addressing use-after-free, out-of-bounds write, double-free, and deadlock bugs in XFRM. Several of the fixes are explicitly tagged for stable. The concentration of issues in the IPsec path is relevant to anyone running or reviewing transformation offload code.

8250 NBCON console conversion revived at v11

Version 11 of the patches converting the 8250 serial driver to the NBCON console model was posted after an earlier revert. Greg Kroah-Hartman queued the series. The change aligns legacy UART consoles with modern printk and non-blocking console infrastructure.

Bonding use-after-free sought for 6.1 stable

A request asked the stable maintainer to backport the fix for CVE-2026-31419, a use-after-free in bond_xmit_broadcast, into the 6.1.y series. The bug sits in the bonding transmit path used for broadcast frames. Long-term support kernels need the patch to close the local memory-corruption window.

BPF verifier closes stack-argument callback hole

Version 2 of a two-patch series makes the BPF verifier reject callback subprograms that pass more than five arguments on the stack. The prior acceptance path produced out-of-bounds reads on x86-64 and KASAN slab-write reports. The change tightens argument checking for eBPF program safety.

XFRM double-free race backported to 6.1

A single-patch backport of the upstream fix for a double dst_release race in xfrm_user_policy under concurrent UDP send and setsockopt was posted for 6.1.y. The defect is a double-free involving the sk_dst_cache. Stable users of IPsec policy sockets require the correction.