Kernel coverage gets one framework, Clang MC/DC support
Sasha Levin’s second-round series folds gcov and KCOV together and adds source-based coverage that safety standards require.
By oopsKernel & Low-Level
Kernel drops PSP and kTLS offload packets that would leave cleartext
IPv6 extension headers, IPv4 fragments, and ICMP error quotes could bypass hardware encryption intent on the transmit path.
By oopsF2FS gains sub-page block support for 16KB Android kernels
Google's Daeho Jeong posted a 20-patch series so existing 4KB F2FS images can mount on kernels whose page size is larger than the filesystem block size.
By kexecLinux caps IP fragment truesize to stop unprivileged socket UAF
Unprivileged network namespaces could force integer wrap in reassembly accounting and free a live socket.
By oopsDRM gains atomic LUMINANCE property for panel brightness
Mario Limonciello’s v10 series puts relative backlight control on connectors behind a default-off Kconfig, with major GPU drivers and several compositors already lined up.
By oopsKernel page-table helpers drop useless loads on folded levels
Dummy returns and compile-time checks aim to fix redundant READ_ONCE traffic and unblock wider use of pXdp_get() in common code.
By kexecLinus fixes Kconfig hash misuse that slowed make oldconfig
A host-side hashtable used the wrong bits of hash_32(), leaving tables mostly empty and burning over 10% of configuration time.
By kexecLinux MM adds THP co-maintainer, shifts more work off Morton's tree
David Hildenbrand routes core memory-management components through his own tree as Andrew Morton takes the MAINTAINERS updates.
By oopsUCSI retry floods boot logs after USB merge for 7.4-rc1
A Type-C init retry meant for flaky PPM responses spammed every boot until its author narrowed the logic.
By oopsKVM nested VMX teardown can corrupt unrelated process memory
A 23-patch series from Sean Christopherson fixes the uaccess failure mode and hardens VM destruction so guest memory writes cannot hit the wrong mm.
By oopsBPF series adds sleepable kfuncs to map and write user memory
Proposed helpers would let privileged BPF programs allocate anonymous pages, including executable ones, and fault in copies into the current process.
By oopsBPF verifier defers instruction patches to cut large-program load times
A 22-part series replaces immediate per-patch rewrites with a sorted deferred list, turning O(N*M) fixups into a single O(N) commit.
By kexecLinux swap fixes close zswap corruption and cross-user data leak
Patches headed for stable kernels stop stale compressed pages and large swap-ins that could map other files' blocks on zram-style devices.
By kexeczram redesign splits read/write streams, cuts latency and RAM
Sergey Senozhatsky’s zcomp overhaul ends reader/writer priority inversion and trims per-CPU compressor memory, and Andrew Morton has queued it.
By oopsLinus rejects late SPARC pull, rebukes rebase date tricks
Torvalds boots the 7.4 SPARC series to 7.5 and scolds a contributor for teaching how to hide rebase timestamps.
By oopsKernel series plugs allocator races with memory hotplug
Eight stable-bound fixes stop zonelist rebuilds from causing wrong-zone allocations and NULL pointer crashes.
By kexecKernel lib fixes target maple-tree crash and rhashtable deadlock
Patches for 7.3 close an RCU null dereference in the maple tree and stop atomic rhashtable growth from deadlocking bridge FDB inserts after a kvmalloc change.
By kexecKernel stops filesystems flipping read-only behind the VFS
Brauner’s emergency-RO path replaces unlocked SB_RDONLY updates that raced freezes and hung writers across ext4, XFS, GFS2, and more.
By kexecKernel RFC fixes inode reclaim hang on ext2, FAT and kin
A metadata writeback flag introduced in Linux 7.3 can pin unused inodes forever on several filesystems, letting unprivileged workloads exhaust memory.
By kexecBPF verifier fix stops bogus packet reads after loop widening
Scalar evolution had been shrinking a packet pointer's upper bound without cutting the recorded valid length, so counted loops could pass checks for bytes past the end of the packet.
By oopsLinux RFC proposes common attestation API and TDX provider
Jiri Pirko’s series unifies evidence and measurement access behind CTLV; reviewers flag stack depth and device-evidence rules.
By oopsLinus rejects media Kconfig change exposing chip driver prompts
A merged media update for Linux 7.4 unhid I2C and SPI sensor options by chip ID, drawing a sharp rebuke over kernel configuration UX.
By oopsLandlock gains separate rights for file metadata access
A v3 patch series adds READ_METADATA and WRITE_METADATA controls and refactors LSM hooks so sandboxes can restrict stat, chmod, xattrs, and ACLs independently of file contents.
By oopsRace found in Linux HugeTLB vmemmap optimization path
Dropping RCU around speculative page gets left a window for writes against read-only tail memmap after HVO remap.
By kexecKernel mmb warning exposes ext4 xattr and FAT buffer bugs
A new assertion for buffers claimed by more than one inode has already caught real filesystem misuse, not just experimental code.
By kexecKernel mm series piles on userfaultfd, MGLRU and memfd fixes
David Hildenbrand bundled dozens of stable-bound core memory-management patches after LLM-assisted finds exposed hangs, races and silent data loss.
By kexecRust SPDM requester proposed for Linux device authentication
Alistair Francis’s v5 series adds a memory-safe SPDM stack and PCIe CMA path so the kernel can treat untrusted device replies as hostile until verified.
By kexecKernel fix stops /proc maps from skipping live VMAs under load
A race in the per-VMA-locked maps walk could omit address ranges that stayed mapped for the entire read.
By oopsTwo-decade IPv6 MTU bug can panic Linux with one sendmsg
Dead code in the IPv6 append path left a narrow MTU window that underflows and lets unprivileged raw-socket traffic trip skb_over_panic.
By oopstmpfs fixes close F_SEAL_EXEC bypass and truncation hangs
Urgent shmem work also stops inode use-after-free on writeback and quota limits that silently vanished.
By kexecLinux proxy execution series adds sleeping-owner handling
John Stultz posts the next major stage of scheduler proxy execution, covering waiters blocked on mutexes whose owners are asleep.
By kexecBPF verifier rewrite targets Rust with recursion and open loops
Alexei Starovoitov posts an 82-patch series that joins verifier states instead of walking every path, so rustc output can load.
By oopsBPF maintainer NACKs page_owner iterator series as overkill
Alexei Starovoitov wants one thin kfunc and a bpf_for loop instead of dual iterators, string-printing helpers, and a debugfs rewrite.
By oopsKernel hardens virtio-net against rogue checksum offload metadata
Untrusted csum_start and offset values can no longer leave CHECKSUM_PARTIAL pointing at arbitrary packet bytes after protocol decisions have been made.
By kexecLinux hardens virtio-net checksum offload against rogue metadata
After a public report, the kernel will only trust CHECKSUM_PARTIAL when offsets match real TCP or UDP headers, or complete the checksum before protocol processing.
By oopsKernel patch series stops uprobes from stalling every fork()
Alexei Starovoitov fixes production lock contention that left fork stuck for minutes while probes attached to shared binaries.
By kexecBPF unwinding lets Rust and C++ keep their destructors
New unwind instructions aim to make exceptions and RAII viable in BPF just as Rust is being pushed into parsing untrusted kernel-facing protocols, trading verifier complexity for safer language runtimes.
By kexecLinux bridge MST bypasses blocking without VLAN filtering
CVE-2025-40297 lets ports marked blocking still forward frames, defeating STP and MRP loop protection.
By kexecZDI flags CVSS 9.0 race-condition RCE in Linux KSMBD
A protocol-handler mismatch between request enqueue and dequeue can leak kernel heap memory and open an out-of-bounds write path.
By oopsLinux VFS stops stuck unmounts from freezing the host
Josef Bacik’s series makes sync, drop_caches, quotas, and remounts skip or killably wait on dying superblocks instead of hanging uninterruptibly behind one bad umount.
By oops