Kernel bridge MST bug, Rust Binder pull, and hardening patches

Security fixes and Rust subsystem work led the kernel traffic, with a bridge loop-protection bypass receiving a CVE and Greg Kroah-Hartman pulling the removal of the C Binder driver. Additional series hardened virtio-net checksum handling and advanced Rust SPDM support along with virtual swap and identity proposals.

Bridge MST bypasses blocking without VLAN filtering

A bug report on linux-kernel detailed that Multiple Spanning Tree state checks in the network bridge code skip the blocking state when VLAN filtering is disabled, allowing frames that should be dropped and defeating loop protection. The issue was assigned CVE-2025-40297. Readers maintaining bridges or virtualized networks should treat the report as a concrete loop-risk condition until fixed.

Char/misc pull drops C Binder for Rust

Greg Kroah-Hartman submitted a git pull of char, misc, and IIO driver updates for the 7.4-rc1 window. The series removes the C Binder driver in favor of the already-stable Rust implementation. The change consolidates the binder path on the Rust code that has been maturing in-tree.

Virtio-net checksum hardening series

A fifth revision of a seven-patch net series tightens validation of csum_start and csum_offset in virtio-net after an earlier public bug report. It adds a per-netns switch plus fixes for GSO and tunnel paths. The work reduces the chance that malformed offload metadata can corrupt packet processing.

Rust SPDM requester library

A twenty-two-patch v4 series proposes a Rust implementation of the SPDM protocol inside the kernel library code. The requester is intended for safer parsing of complex, untrusted authentication data. Adoption would give drivers a memory-safe path for device attestation exchanges.

Deprecation of Assisted-by tags

A documentation patch removes Assisted-by references following discussion at the Maintainers Summit. The ensuing thread, spanning many maintainers, debated disclosure rules and practical detection of LLM-generated contributions. The change formalizes that such tags are no longer desired in kernel commits.

Virtual swap space patchset

Version six of a twelve-patch series introduces a virtual swap layer that permits zswap operation without a physical swapfile, together with accounting and reclaim adjustments. The design aims to simplify compressed-swap setups on systems that prefer not to back swap with block devices. Reviewers continue to examine the interaction with existing reclaim paths.

UUID and GUID based uid/gid RFC

An RFC v2 series of forty-one patches proposes tagged-union kuid_t and kgid_t types that can carry UUID or GUID owners, along with new *_r system calls and accompanying filesystem, IPC, and ACL changes. The goal is native support for non-numeric identity schemes. The breadth of the touch points makes careful review essential for any future merge.

hdac_hdmi enum validation backport

A stable patch for the 5.10 kernel backports the fix for CVE-2026-74295 in the ASoC hdac_hdmi codec driver. The change validates written enum values to prevent out-of-range reads. Users still on the 5.10 long-term series gain the corresponding bounds check.