QXL bounds fixes, GNOME board dispute, Xorg regression

Security work on the QXL DRM driver and a reported Xorg regression led the day, while the GNOME Foundation board addressed community conflict after a Mastodon thread. Design proposals also moved forward for DRM panels, dmabuf io_uring paths, and Blender materials.

QXL execbuffer bounds checks

A v2 patch series on dri-devel fixes multiple missing bounds checks in the qxl DRM driver's execbuffer relocations. The gaps allowed out-of-bounds writes and use-after-free from DRM_AUTH clients. Virtualized graphics stacks that expose QXL to guests gain concrete hardening from the series.

GNOME Foundation board on Mastodon thread

The GNOME Foundation board publicly addressed personal attacks and transparency demands after a Mastodon thread that prompted departures. The Discourse thread drew 39 messages from 19 participants. The exchange is material for anyone tracking foundation governance and how conflict is handled in the open.

Xorg 21.1.25 use-after-free on amdgpu Present

A bug report on the xorg/xserver GitLab states that 21.1.25 segfaults in the amdgpu scanout damage callback after a Present flip. The reporter describes a use-after-free regression introduced by the CVE-2026-93515 fix that shipped in 21.1.24. amdgpu users on Present paths should treat 21.1.25 as suspect until a follow-up lands.

Blender Material Lighting Nodes feedback

An active DevTalk thread is collecting feedback on experimental Material Lighting Nodes, including Light Info and Shadow Raycast, aimed at Blender 5.3. Thirty-two participants produced 115 messages. Shader and lighting contributors still have room to influence the design before it freezes.

DRM panel atomic state RFC

An RFC series on dri-devel proposes adding atomic state to DRM panels through embedded bridges. The approach would support check-time validation and per-commit configuration. Panel and bridge maintainers need to weigh the impact on existing drivers.

dmabuf read and write via io_uring

Version 9 of a patchset on dri-devel adds dmabuf-backed registered buffers for use with io_uring READ_FIXED and WRITE_FIXED on NVMe. Three participants continued the review across 22 messages. GPU and storage interop code stands to gain lower-overhead fixed-buffer I/O if the series lands.

Blender DevTalk and external proposals

Blender developers discussed folding feature proposals from an external RCS site into DevTalk subcategories. The thread debated voting mechanics and feasibility across 59 messages from 26 participants. The decision will shape how community requests enter official development channels.