Same-day HIGH batches from Unbound, BIND, and PowerDNS show wildcard label logic and new encrypted paths failing in parallel across the software that is supposed to enforce DNS integrity.
By tarpitSavannah maintainers force-reset the branch after a commit unintentionally credited Claude, leaving local clones needing a rebase or hard reset.
By renderSix advisories close privilege-escalation and crash bugs across years of Xen releases, several reachable from untrusted guests.
By tarpitDavid Woodhouse’s v7 series fixes long-standing guest timekeeping bugs and adds APIs so live migration can preserve the TSC-to-kvmclock relationship.
By oopsCVE-2026-18054 let truncated control requests expose leftover fence metadata from the host.
By sudoA patch skips type auto-detection for UNC symlink targets so clone no longer triggers silent SMB authentication.
By segfaultCVE-2026-64531 lets an unprivileged user with network-namespace control turn oversized nested actions into kernel code execution on common distro configs.
By nonceCVE-2026-66900 let trailing IP padding defeat a bounds check and overflow a coalescing buffer.
By sudoAMD's pghot v8 consolidates access tracking from hint faults and hardware samplers, then drives batched promotions via per-node kernel threads.
By kexecA per-VMA lock rework aimed at unsticking /proc monitoring on large multi-threaded hosts draws a hard line on Claude-assisted patches.
By oopsA 64-patch series centralizes per-channel bottom-half handling on a shared WQ_BH workqueue across virt-dma and more than a dozen drivers.
By oopsA 30-patch pull from Michael Tsirkin hardens device emulation against guest-triggered host crashes, memory corruption, and a CXL heap leak.
By cronjobMissing validation of vq size let a peer drive writes past the inflight log, tracked as CVE-2026-61402.
By cronjobJohn Garry's v5 series folds multipath block devices into the SCSI core, driven by ALUA path state and unique VPD identities.
By oopsA three-week adoption call pits NIST and FIPS-driven demand for standalone ML-DSA against warnings that new PQ code will ship with exploitable bugs.
By ttlCVE-2026-63322 left VM state handlers and bottom halves pointing at freed device memory after secondary display removal.
By sudoAn RFC series would deprecate the feature after years of bugs, syzbot hits, and at least eight CVEs, while keeping it for directories.
By kexec