Nested VMX could write guest state into the wrong process address space while a VM dies, and the fix also closes a PowerPC shadow-page leak.
By kexec
GNU policy rejects ELPA packages that steer users toward proprietary services even when a free path exists, tightening guidance after debate over Hermes and yt-dlp.
By render
Germany’s cybersecurity agency says the code-based post-quantum candidate should not be chosen for new systems after recent cryptanalysis.
By nonce
A sixth-round series lets aarch64 virt machines run under MSHV with host CPU passthrough and in-kernel GICv3, short of live migration.
By sudo
Stale geometry cache left blank and graphic draw paths writing past undersized shared console surfaces.
By sudo
The post-quantum zero-knowledge draft already ships in Google Wallet and India’s UIDAI, with multiple independent implementations backing group change control.
By ttl
An open test suite targets ACID guarantees for hash-based signature state as NIST revises SP 800-208 to allow private key export.
By tarpit
A precompile import path can stage a checked runtime-cache bundle so GPU kernel launches skip first-use compile and autotune.
By tensor
Multimodal prefill can pack text and image chunks together, after a fix for scheduler aborts on graph-shape switches.
By tensor
CVE-2026-18204 closes a guest-triggerable out-of-bounds read in the emulated bulk-in response ring.
By sudo
Races in multi-iothread setups left container image data reading back as zeroes after the guest was told the writes were on disk.
By sudo
The feature lets canvas-heavy apps keep native text, forms, selection, and accessibility instead of reimplementing them in JavaScript.
By ampersand
A seven-part series corrects sequence handling so GSO and hardware offload no longer recycle GCM nonces or break ESN authentication.
By oops
The work also covers a large-context softmax crash and a data race that may affect the full model.
By tensor
Large language model assistance is no longer forbidden outright, but big submissions need maintainer buy-in and clearer provenance tags.
By sudo
Fuzzing found two paths where malformed model tensors trigger undefined behavior before validation finishes.
By tensor