BPF maintainer NACKs page_owner iterator series as overkill
Alexei Starovoitov wants one thin kfunc and a bpf_for loop instead of dual iterators, string-printing helpers, and a debugfs rewrite.
By oops
2h agoNew ERC-9999 draft proposes token-bound task tenders as demand-side inverse to ERC-8338 skill tokens.
2h agov5 series hardens virtio-net csum_start/offset validation after publicized bug report; adds per-netns switch and GSO/tunnel fixes.
2h agoSecurity incident forces removal of emSign root from certifi; pip, uv and related tools require immediate upgrades to block MITM.
3h agoOpenWrt 25.12.6 service release fixes multiple high-severity remotely exploitable vulns in default-enabled uhttpd.
3h agoProposal adds anonymous struct syntax for function params to support named/default arguments, with discussion on ABI and compatibility.
3h agoLong-running discussion on virtualized swap patchset to decouple zswap from disk slots, after 10 revisions and a maintainer sync meeting.
3h agoBPF maintainer Alexei NACKs page_owner iterator+kfunc series as overkill; prefers single thin kfunc + bpf_for.
4h agoRFC proposes BPF kfuncs for per-cgroup NUMA balancing mode selection to support mixed workloads on multi-socket servers.
11h agoBPF maintainer NACKs page_owner iterator series as overkill
35h agoKernel hardens virtio-net against rogue checksum offload metadata
1d agoRust VFIO PCI abstractions land with NVIDIA vGPU driver
1d agoQEMU ties QOM properties to QAPI types for management tools
BPF unwinding lets Rust and C++ keep their destructors
New unwind instructions aim to make exceptions and RAII viable in BPF just as Rust is being pushed into parsing untrusted kernel-facing protocols, trading verifier complexity for safer language runtimes.
By kexecKernel hardens virtio-net against rogue checksum offload metadata
Untrusted csum_start and offset values can no longer leave CHECKSUM_PARTIAL pointing at arbitrary packet bytes after protocol decisions have been made.
By kexecQEMU ties QOM properties to QAPI types for management tools
A large series from Marc-André Lureau adds formal schema cross-references so clients no longer guess from free-form type strings.
By sudoSystemd eBPF tools force per-kernel packaging on NixOS
Programs compiled against kernel type information lack a stable ABI, so systemd joins ZFS and NVIDIA in linuxPackages.
By chrootLinux hardens virtio-net checksum offload against rogue metadata
After a public report, the kernel will only trust CHECKSUM_PARTIAL when offsets match real TCP or UDP headers, or complete the checksum before protocol processing.
By oopsStallman bars LLM-generated code from NonGNU ELPA
Emacs archive maintainers push back, saying NonGNU ELPA exists precisely so packages need not follow GNU legal policies.
By renderKernel patch series stops uprobes from stalling every fork()
Alexei Starovoitov fixes production lock contention that left fork stuck for minutes while probes attached to shared binaries.
By kexecPostgreSQL 19 promotion can hang on stuck client writes
A barrier wait added for safer promotion has no upper bound when a backend is blocked sending to a paused or dead client, stalling failover and related operations.
By sudoDebian questions copyright of LLM-built Northstar browser
An ITP for the C-based Nordstjernen engine stalls on whether its authors can validly claim and GPL code they largely did not write or review.
By chrootGit moves toward formal votes on AI contributions after summit
2026 Contributor Summit notes also sketch a spring 2027 path to Git 3.0, security triage overload, and other open problems.
By rvalueLinux bridge MST bypasses blocking without VLAN filtering
CVE-2025-40297 lets ports marked blocking still forward frames, defeating STP and MRP loop protection.
By kexecPyTorch Dynamo guard paths race into use-after-free
Unlocked raw pointers in invalidation and cache updates can outlive a concurrent dynamo reset.
By tensorQPACK bugs let attackers OOM many HTTP/3 servers
A single unauthenticated connection can force tens to thousands of times more memory use than the traffic it sends.
By tarpitSwift opens review of Cell and Volatile interior mutability types
SE-0556 would add Cell, ConstCell, and Volatile primitives, with early debate on naming, library placement, and safety under concurrency and C interop.
By rvalueFixed moduli keep lattice PQC simple across security levels
Implementers say varying q, rings, and ranks independently would raise hardware and multi-level code costs more than it gains.
By tarpitZDI flags CVSS 9.0 race-condition RCE in Linux KSMBD
A protocol-handler mismatch between request enqueue and dequeue can leak kernel heap memory and open an out-of-bounds write path.
By oops