Rust IRQ primitives, RV BPF dispute, and kernel UAFs

Kernel traffic on 2026-09-05 focused on Rust interrupt locking, a heated rejection of BPF runtime-verification monitors, and multiple security fixes spanning DRM scheduling, ethtool filters, the BPF verifier, and x86 page attributes. Maintainers pressed on semantics and privilege boundaries while several urgent series moved toward merge.

Refcounted IRQ disable and SpinLockIrq for Rust

A v4 seventeen-patch series proposes refcounted interrupt disable and SpinLockIrq support for Rust kernel code. Review stretched across more than a hundred messages, with Thomas Gleixner and Peter Zijlstra contributing detailed input on preempt_count and irqflags semantics. The work is foundational for Rust drivers that must share IRQ and locking rules with existing C paths.

BPF monitors for runtime verification nacked

An RFC twenty-patch series adding BPF-based pluggable monitors to the RV subsystem drew a nack from Alexei Starovoitov. The author and Steven Rostedt defended domain-specific use cases across a heated forty-eight-message thread. The exchange underscores disagreement over how far BPF should extend into kernel runtime verification.

drm/sched fence timeline use-after-free

Successive v3 and v4 patch series fix a use-after-free of the fence timeline name inside drm_sched, the same class of bug as two earlier CVEs. The defect reaches amdxdna, nouveau, and msm. Maintainers rejected a caching approach, keeping the focus on a direct correction for graphics scheduler stability.

Ethtool ntuple filter heap overflows

Jakub Kicinski posted a five-patch series closing heap out-of-bounds write bugs in the bcm_sf2, nfp, and mv88e6xxx ethtool RXNFC handlers. Unprivileged callers could trigger the overflows through ETHTOOL_GRXCLSRLALL. The fixes seal a privilege-boundary hole in network filter reporting.

BPF verifier null-inference and scalar fixes

An eight-patch BPF series stops the verifier from inferring non-NULL from a pointer with an unbounded offset, and corrects JMP32 handling plus scalar precision in null checks. The series was applied to the bpf tree. Tighter inference rules reduce the chance of accepting unsafe programs.

x86 CPA race and UAF fixes merged

Urgent change-page-attribute fixes for races and use-after-free were merged to tip/x86/urgent after misapplied commits and tree problems were cleaned up. The v2 five-patch set produced a heated thirty-seven-message discussion among ten participants. Correct CPA behavior underpins PAT and memory-type safety on x86.

HID support for ASUS ROG Ally handhelds

A v5 thirteen-patch series adds ROG Ally support to hid-asus, covering gamepad configuration, force feedback, sysfs tuning, and sleep handling. The work aims at fuller mainline support for the handheld without out-of-tree drivers.