util-linux CVEs, DRM UAF fixes, Arm CCA

Security fixes led the day's kernel traffic, with util-linux releases closing mount and namespace CVEs plus patches addressing use-after-free bugs in DRM scheduling, soft-lockup risks in net/sched, and socket reference leaks in BPF. Longer-running work continued on Arm CCA support in KVM and the arm64 shift to generic entry code.

util-linux 2.42.3 closes mount CVEs

util-linux v2.42.3 was released with fixes for three CVEs in mount(8) covering post-mount hooks, a TOCTOU race, and a symlink escape. The update ships to users and distributions that depend on the mount utilities for filesystem setup. Operators handling untrusted mounts or container workloads have direct reason to apply it.

DRM scheduler timeline name UAF

Patches fix a use-after-free read in the drm_sched get_timeline_name() path that affects amdxdna, nouveau, and msm, after earlier CVEs were handled per driver. A related v3 series corrects use-after-free of the fence timeline name during queries across multiple drivers. GPU stacks relying on the shared scheduler need the correction for stability and security.

Arm CCA support lands at KVM v16

The v16 posting of a 45-patch series adds Arm CCA support to KVM, bringing confidential VMs and Realm Management Monitor (RMM) integration. The thread carries hardware testing feedback and review from a dozen participants. arm64 confidential-computing developers gain a clearer path toward upstream readiness.

net/sched clamps close soft-lockup DoS

A nine-patch net series clamps quantum and psched_mtu inside the change() paths of fq, sfq, hhf, dualpi2, pie, drr, and ets. The change blocks soft-lockup denial-of-service from crafted stab tables. Network stack maintainers and anyone exposing qdisc configuration should track the hardening.

util-linux 2.41.6 fixes mount and namespace CVEs

util-linux v2.41.6 was announced with three CVE fixes spanning mount(8), nsenter(1), and unshare(1). The release serves the older stable line alongside the 2.42.3 update. Container and namespace tooling users on that branch require the patches.

arm64 generic entry conversion at v18

A 14-patch v18 series converts arm64 entry handling to the generic entry framework already used by x86 and RISC-V. The work shrinks architecture-specific syscall code. Long-term arm64 maintenance becomes simpler once the conversion lands.

BPF socket leaks on connect and listen

A two-patch BPF series stops reference leaks and potential use-after-free in socket helpers when sk_is_refcounted() changes under connect(AF_UNSPEC) followed by listen(). The bug surfaces in BPF programs that manipulate sockets through that sequence. BPF runtime and socket-filter users should adopt the fix.