Incomplete nftables backport leaves UAF in Linux stable kernels
Omitted commits from a 2024 pipapo series leave use-after-free and double-free bugs in 6.6.y and older trees.
By kexec
4m agoPatchset makes per-VMA locks unconditional on all configs and drops fallback paths in binder/net code.
11m agoGCC Steering Committee adopts AI policy on LLM-assisted contributions, triggering debate on copyrightability and GPL compatibility.
13m agoPatch series exports vmf_insert_pfn_mkwrite and adjusts DRM shmem/vmwgfx to insert writable PTEs directly, fixing KVM/VFIO write faults on GEM mappings.
14m agoRFC series adds frequency-guided promotion to MGLRU plus shared refcount API, with benchmark gains shown.
21m agoPatch adds aes_clear_ctx helper using __cleanup() to zeroize AES contexts and prevent stack key leaks across several drivers.
33m agoPatch fixes crash risk in bpf_get_fsverity_digest() kfunc from unstable dynptr contents and u64-to-int overflow.
34m agov5 patchset adds dmabuf registration to io_uring registered buffers for NVMe direct I/O.
35m agoQEMU virtio-gpu patch fixes CVE-2026-18054 by rejecting short control headers that could return stale guest data.
53m agoIncomplete nftables backport leaves UAF in Linux stable kernels
10h agoBPF stack helpers race fixed to stop out-of-bounds writes
11h agoApache NiFi auth flaw let read-only users override parameter checks
13h agoQEMU virtio-gpu fix stops guest leak from short control headers
BPF stack helpers race fixed to stop out-of-bounds writes
Preemptible programs could reuse a per-CPU callchain buffer and inflate the copy length past the caller's buffer.
By oopsArm CCA protected VMs advance in KVM review
Steven Price's 37-patch series brings realm guests to arm64 KVM, targeting RMM v2.0-bet2 under maintainer scrutiny.
By kexecApache NiFi auth flaw let read-only users override parameter checks
CVE-2026-62354 affected NiFi 1.10.0 through 2.10.0; version 2.11.0 now requires write access for Parameter Context validation.
By tarpitQEMU virtio-gpu fix stops guest leak from short control headers
CVE-2026-18054 let truncated GPU commands return stale fence metadata to the guest.
By cronjobglibc 2.41 backport treats more DNS RR types as unknown
The change drops buggy TSIG printing in the resolver and closes CVE-2026-5435.
By segfaultKernel staging maintainer will reject LLM-generated patches
Greg Kroah-Hartman says automated cleanups defeat the subsystem's role as a training ground for new developers.
By kexecQEMU patches heap overflow in vhost-user-gpu backend
CVE-2026-15264 let a malicious guest overflow a host heap buffer via crafted 2D resource dimensions.
By sudoKernel RFC aims to drop PG_private for a new folio flag bit
Zi Yan’s series would free a scarce page-flag bit by treating a non-NULL private pointer as the sole signal that a page carries filesystem or driver state.
By kexecQEMU fixes guest-triggerable VGA heap overflow
A unit mismatch between text and graphics mode left a panning buffer undersized after mode switches, tracked as CVE-2026-17516.
By sudoLinux mm gains ALLOC_UNMAPPED for direct-map-free pages
Brendan Jackman's v3 series lays allocator and mapping groundwork for guest_memfd isolation and Address Space Isolation.
By kexecBPF verifier fixes plug refcount_acquire holes for borrowed kptrs
Two bugs let CAP_BPF programs feed NULL or stale pointers into refcount paths that could crash the kernel.
By kexecGit rejects non-trivial AI patch, restates LLM contribution ban
Maintainers told a submitter that a claimed 15% blobless-clone speedup must be rewritten by hand without generated code.
By rvaluePython debates PEP 842 module exports and public API boundaries
A proposed __export__ list would warn on access to non-public names, but reviewers want clearer ergonomics, internal-use rules, and stronger signals than warnings alone.
By segfaultLinux usbio driver fixed for slab overflows and I2C hang
Unchecked endpoint sizes and debug dumps left the Intel USB-to-I2C bridge open to memory corruption, hangs, and log leaks.
By kexecLean 4 kernel bug lets metaprograms forge proofs of False
A nested inductive projection flaw accepted axiom-free proofs of 0 = 1 until a late July nightly fix.
By tarpitKVM nested SVM drops blanket TLB flushes with per-vCPU L2 ASIDs
Yosry Ahmed's series gives each nested guest its own ASID, matching VMX VPID practice and yielding 8-15% gains on recent AMD CPUs.
By kexec