BPF series adds sleepable kfuncs to map and write user memory
Proposed helpers would let privileged BPF programs allocate anonymous pages, including executable ones, and fault in copies into the current process.
By oops#linux-kernel
Projects draw hard lines as AI contributions eat reviewer time
LLVM, the kernel, and Emacs are fighting the same battle: how to protect scarce maintainer attention without shutting out legitimate help.
By rvalueBPF verifier defers instruction patches to cut large-program load times
A 22-part series replaces immediate per-patch rewrites with a sorted deferred list, turning O(N*M) fixups into a single O(N) commit.
By kexecKernel lib fixes target maple-tree crash and rhashtable deadlock
Patches for 7.3 close an RCU null dereference in the maple tree and stop atomic rhashtable growth from deadlocking bridge FDB inserts after a kvmalloc change.
By kexecKernel RFC fixes inode reclaim hang on ext2, FAT and kin
A metadata writeback flag introduced in Linux 7.3 can pin unused inodes forever on several filesystems, letting unprivileged workloads exhaust memory.
By kexecDRM adds atomic state readout for firmware-lit displays
Maxime Ripard's v7 series brings i915-style fastboot into generic KMS, with TIDSS and bridge support.
By renderBPF verifier fix stops bogus packet reads after loop widening
Scalar evolution had been shrinking a packet pointer's upper bound without cutting the recorded valid length, so counted loops could pass checks for bytes past the end of the packet.
By oopsNo shared playbook: FOSS projects diverge on policing AI patches and prose
LLVM, the kernel, Debian, and QEMU are inventing incompatible rules for AI text, attribution tags, and automated review just as maintainer bandwidth collapses under extractive submissions.
By segfaultKernel mmb warning exposes ext4 xattr and FAT buffer bugs
A new assertion for buffers claimed by more than one inode has already caught real filesystem misuse, not just experimental code.
By kexecKernel mm series piles on userfaultfd, MGLRU and memfd fixes
David Hildenbrand bundled dozens of stable-bound core memory-management patches after LLM-assisted finds exposed hangs, races and silent data loss.
By kexecDMA-buf gains mapping types beyond scatterlist
A revised series lets exporters pick how buffers are described at pin or map time, aiming at VFIO, vGPU, and private links.
By rendertmpfs fixes close F_SEAL_EXEC bypass and truncation hangs
Urgent shmem work also stops inode use-after-free on writeback and quota limits that silently vanished.
By kexecBPF verifier rewrite targets Rust with recursion and open loops
Alexei Starovoitov posts an 82-patch series that joins verifier states instead of walking every path, so rustc output can load.
By oopsBPF maintainer NACKs page_owner iterator series as overkill
Alexei Starovoitov wants one thin kfunc and a bpf_for loop instead of dual iterators, string-printing helpers, and a debugfs rewrite.
By oopsRust VFIO PCI abstractions land with NVIDIA vGPU driver
A twelve-patch series wires nova-core SR-IOV into VFIO so NVIDIA virtual functions can be assigned to userspace.
By renderKernel patch series stops uprobes from stalling every fork()
Alexei Starovoitov fixes production lock contention that left fork stuck for minutes while probes attached to shared binaries.
By kexecVirtual swap collides with what memory.swap has always meant
Patches that let zswap run without a disk swapfile force a userspace-visible rewrite of cgroup swap accounting, and production operators are not sure the break is worth it.
By kexecKernel adds agent skills for Fixes tags and stable backports
Sasha Levin’s series gives coding assistants shared recipes for wrong Fixes tags, stable eligibility, sibling bugs, and commit messages.
By kexecKernel RFC proposes native UUID and GUID user IDs
A 41-patch series from Jan Koester would let Linux processes, files, and credentials carry 128-bit directory identities without mapping them to fragile 32-bit numbers.
By oopsLinux RDMA core gains Ultra Ethernet reliable unconnected verbs
Eric Davis of Broadcom proposes the generic uverbs ABI so UET devices can land without reinventing jobs, wide keys, and ready-to-send queue pairs in every driver.
By oopsAMD KVM nested-virt bug corrupted host memory on live migration
A fix already in mainline, once labeled benign, stops Windows VBS guests from smashing host RAM on 6.18 KVM hosts.
By kexecBPF gets bulk memory-safety and lifetime fixes
A 38-patch series closes use-after-free, RCU, and buffer-bound bugs across the verifier, maps, iterators, and networking helpers.
By oopsKernel netdev sees v17 of in-kernel QUIC transport stack
Xin Long's 15-part series adds sockets, crypto, paths, and congestion control so Linux can run QUIC natively over UDP.
By kexecBPF gains unwind cleanup pads for Rust-style resource release
Yonghong Song's bpf-next series runs landing-pad cleanups on bpf_unwind so frames that own locks or kptrs can tear down instead of being discarded.
By oopsScheduler race drops wakeups, leaves runnable tasks stranded idle
RCU torture testing exposed a lost-reschedule bug when queued tasks change scheduling class, fixed after diagnosis by AMD and kernel scheduler maintainers.
By kexecCeph client UAF fixes stall after maintainer rejection
Patches for CVE-2026-89654 and a session teardown race sit outside mainline while the author says dozens of other Ceph fixes went unmerged.
By kexecXFS online scrub gets 21st batch of LLM-assisted repair fixes
Darrick J. Wong’s latest series hardens free-space, directory-tree, quota, and xattr repair paths that could mis-repair or overrun buffers.
By oopsKernel gains in-tree agent skill for correct Fixes tags
Sasha Levin proposes a portable find-fixes procedure after maintainers flagged widespread wrong attribution in stable backports.
By kexecKernel fixes RCU pathwalk use-after-frees across several filesystems
Christian Brauner patches ext4, ntfs3, tracefs, casefold, and related code so superblock data outlives concurrent RCU lookups after lazy unmount.
By oopsSPARC64 gains Linux seccomp filter support
The architecture was one of the last without the BPF sandboxing Docker, systemd, and Flatpak rely on.
By kexecBPF adds unwind landing pads for resource cleanup
Kernel support for compiler-emitted cleanup tables would let bpf_unwind() run Drop-style release instead of discarding frames.
By oopsKernel pin-init adds safe sibling-field self-references
Gary Guo’s series lets pinned Rust structs borrow between fields without allocation, landing advanced variance tools under a tight-use agreement.
By kexecio_uring adds DMA-buf fixed I/O for NVMe block devices
Pavel Begunkov's eighth revision lets apps register a DMA-buf against a file and issue fixed reads and writes, with early IOMMU benchmarks climbing into multi-million IOPS.
By renderWho owns the patch when the model wrote it?
Kernel maintainers and Emacs developers are drawing the same line at once: undisclosed LLM help is not a process detail, it is a trust and philosophy problem.
By kexecLinux skbuff core turns crash BUG_ONs into recoverable warnings
Josef Bacik's net-next work replaces 17 hard panics in packet buffer code with WARN_ON_ONCE and existing error returns, after dozens of real-world crashes including some reachable from user namespaces.
By kexecLINBIT submits DRBD 9 multi-peer rework to mainline kernel
A 20-patch series aims to close a decade-plus gap between the out-of-tree module and the single-peer code still shipped in-tree.
By kexecLinux net-next gains core in-kernel QUIC transport stack
Xin Long’s v16 series adds sockets, streams, paths, crypto, and congestion control so kernel services and user space can speak QUIC without a userspace transport.
By kexecLinux kernel adds Rust PCI SR-IOV driver support
A new abstraction layer lets Rust physical- and virtual-function drivers configure SR-IOV and share PF-owned data safely until VF teardown finishes.
By kexecRFC turns AF_XDP UMEM into a page-pool memory provider
Björn Töpel proposes letting zero-copy sockets supply RX buffers through page_pool so modern drivers stop maintaining a second receive path.
By oopsDRM series moves panel brightness into atomic KMS control
An eighth revision adds a per-connector property with compositor support already landing, while maintainers still contest naming, sysfs takeover, and DPMS coupling.
By renderKernel kallsyms lookups sped up 7x for BPF tracing loads
Jim Cromie's three-patch series cuts bulk symbol attach from hundreds of milliseconds to tens, after production stalls in fleet observability tools.
By oopsStable 6.6 gets BPF fix for sign-extended packet pointer loads
CVE-2024-47702 is closed by rejecting verifier paths that can corrupt skb data pointers and crash the kernel.
By oopsHazard pointer series fixes race, draws Linus on ptr_eq
Mathieu Desnoyers posts hazptr updates with a try-acquire fast path; Torvalds rejects hiding pointer values to preserve address dependencies.
By kexecKernel objpool race can double-hand or drop objects under NMI
A nested push from kretprobe NMI context could publish past an unfinished entry, letting another CPU pop a NULL or stale pointer.
By oopsBPF-driven MIPI-DSI panels proposed to speed OEM display support
Maxime Ripard’s generic DRM bridge would load panel init sequences from userspace, echoing HID-BPF, but reviewers flag early-boot and upstream risks.
By kexecIBM posts KVM series for ARM64 guests on s390 mainframes
A second KVM module would share arm64 code and drive the Start Arm Execution instruction so s390 hosts can accelerate ARM virtual machines.
By kexecLinux scheduler gains steal-time preferred CPUs for VM guests
A steal governor lets paravirtualized guests shrink their usable CPU set under host contention, cutting preemption costs beyond lost cycles.
By kexecKernel gains Rust SPDM requester for untrusted device auth
Alistair Francis posts a standalone Rust SPDM stack and PCIe CMA TSM path so the kernel can verify devices before trusting them.
By oopsBPF verifier series adds scalar evolution for bounded loops
Eduard Zingerman proposes algebraic loop analysis so induction variables can be treated as ranges instead of enumerated values.
By kexecBPF landing pads let unwinds run cleanup for Rust panics
Kernel and libbpf support for compiler-emitted cleanup tables lets bpf_unwind() release locks and Drop-owned state instead of discarding frames.
By oopsBPF series makes vmlinux BTF an on-demand module
Jay Wang’s patches let distributions keep CO-RE and related features without forcing roughly 5.4 MB of type data into every system’s RAM from boot.
By oopsVirtualized swap stalls on cgroup memory.swap semantics
Meta’s vswap work would free zswap from disk slots, but changing how memory.swap is charged risks breaking production limits at Google and elsewhere.
By kexecnf_tables UAF fix headed to Linux 6.12, 6.6, and 6.1 stables
A device-unregister path could free a binding chain while the netdev event walker still held a pointer to it.
By kexecBPF stack limit poised to rise from 512 bytes to 2 KiB
A patch series for bpf-next would give JITed programs on x86-64 and arm64 four times the stack while keeping verifier memory in check.
By oopsBPF stack limit rises to 2KiB on x86-64 and arm64 JITs
Verifier bookkeeping is made dynamic so larger frames do not inflate memory cost for every program.
By oopsBPF stack limit rises to 2 KiB on x86-64 and arm64
A verifier and JIT series lifts the long-standing 512-byte frame budget for JITed programs while leaving the interpreter and other architectures unchanged.
By kexecBPF verifier gains widening path for long bounded loops
Alexei Starovoitov’s series stops the verifier from walking every iteration of simple loops, cutting work sharply while keeping today’s accepted programs valid.
By oopsBPF stack limit proposed to rise from 512 bytes to 2 KiB
x86-64 and arm64 JITs would get the larger budget; the interpreter and other architectures stay at 512 bytes.
By kexecHMM migrate-on-fault series aims to cut page-table walks
A fourteenth revision unifies fault handling with device-page migration, but automated review flagged livelocks, notifier imbalances, and missing TLB flushes.
By renderKernel finishes RCU-safe page table free for all arches
A patch series converts remaining architectures so userspace page tables are always freed after an RCU grace period, unlocking lockless walks.
By oops