Kernel debugfs UAF fix and subsystem RFCs

Kernel traffic centered on a debugfs use-after-free fix, several large RFCs for io_uring and BPF, and a heated cgroup swap debate. Stable backport trouble and an AMD IOMMU DMA quirk also drew attention.

debugfs use-after-free and double-free fix

A patch was submitted fixing a use-after-free and double-free in the debugfs_str read and write paths that rely on RCU. Greg Kroah-Hartman engaged on the thread and a KASAN reproduction was supplied. The change closes a concrete memory-safety hole in a widely exposed debugging interface.

io_uring thread identity handoff

Jens Axboe posted a 15-patch RFC series that introduces thread identity handoff for io_uring. The design lets blockable operations run inline and only offloads work when the task actually sleeps. The approach aims to cut unnecessary worker hops for common blocking issue paths.

BPF scalar evolution for bounded loops

A 36-patch series for bpf-next adds scalar evolution analysis to the BPF verifier so it can widen induction variables inside bounded loops. Three participants exchanged roughly fifty messages on the technical details. Stronger loop reasoning would let more realistic BPF programs pass verification without manual unrolling.

sched_ext proxy execution compatibility

Version 14 of a patchset adds hooks and admission rules so proxy execution and sched_ext can be built together. The work removes the prior CONFIG mutual exclusion for the 7.4 cycle. Scheduler developers gain the ability to combine both features in a single kernel build.

VXLAN stable backport failure

A VXLAN transmit-path fix that switches to pskb_network_may_pull failed to apply cleanly to the 6.6-stable tree. The incomplete backport omitted CVE-2026-23459 and can corrupt the rx_dropped counter on 32-bit kernels. Correct stable application remains necessary for the security fix to reach long-term users.

AMD IOMMU DMA corruption quirk

A two-patch v2 series adds an x86/PCI quirk that disables misconfigured enhanced atomics on AMD NBIO 7.7 and 7.11 ports. Those ports produce DMA corruption for IOVAs wider than 58 bits and had previously forced an AHCI-specific workaround that is now reverted. The change prevents storage corruption on affected hardware that uses 64-bit addressing.

BPF typed arenas RFC

A 16-patch RFC proposes typed BPF arenas that expose verifier-trusted kptrs together with new allocation and release kfuncs. Automated review flagged multiple critical memory-safety concerns in the design. The series is still at the early discussion stage on bpf-next.

Virtualized swap cgroup semantics

Memory-management developers debated how to redefine memory.swap cgroup accounting for virtualized and zswap entries. Google engineers warned that changes risk breaking existing v1 and v2 deployments. The long thread leaves the path for container swap visibility under virtualization unresolved.