Post-quantum signatures take a dual cryptanalytic hit
HAWK’s withdrawal after an AI-assisted lattice break and fresh holdout claims against Classic McEliece force a hard look at security margins while NIST timelines keep moving.
By nonce
6m agoPatch review for fixing replication slot leaks on subxact error paths in SQL-callable functions.
11m agoRFC for PING futexes adds stealable PI locks via proxy execution; raises deadlock and locking-order concerns from Zijlstra et al.
14m agov6 series adds MEMBLOCK_NODUMP flag and DT wiring so kdump omits firmware carveouts, shrinking vmcore on arm64/riscv/loongarch.
15m agoOmniflake aggregates 12k GitHub flakes behind one input; early users report large lockfile reductions and fewer rate-limit issues.
18m agov6 patch series adds O_CREAT|O_DIRECTORY semantics to open(2) for atomic mkdir+open with a pinning fd.
20m agov3 patchset proposing structured tags, skip-safe unknown tags, and DTB v18 header changes for forward compatibility in dtc/libfdt.
20m agoPatch serializes lookup_or_create_module_kobject to fix race leading to 96-byte leaks on concurrent built-in driver registration.
21m agoKVM x86 v2 patchset adds per-GFN memory protection attributes with userspace fault reporting and related MMU/cache changes.
1h agoFour ancient Linux kernel bugs yield local root
2h agogpg.fail talk flags gpgsm debug RCE and un-CVEd libgcrypt PSS fix
4h agoPyTorch Inductor split-scan sizing bug can silently corrupt GPU memory
6h agoKernel series keeps mTHP on when PMD huge pages are missing
Kernel series keeps mTHP on when PMD huge pages are missing
Overloaded THP availability checks no longer wipe out multi-size transparent huge pages on CPUs without PMD leaves.
By oopsFour ancient Linux kernel bugs yield local root
DirtyAH6, TUNderflow, PPPoEject, and DiagSpill turn unprivileged access into root on systems with common networking features; fixes are in stable trees.
By noncePyTorch Inductor split-scan sizing bug can silently corrupt GPU memory
Coordinate-descent autotune can pick an R0_BLOCK smaller than workspace allocation assumes, overrunning the buffer under torch.compile.
By tensorBPF gains common cgroup attach path for struct_ops maps
A bpf-next series reuses the existing bpf_link cgroup model so groups of BPF programs can share attach, ordering, and query semantics, with TCP sock ops as the first consumer.
By kexecglibc DNS resolver aborts on long search domains
CVE-2026-8674 can crash name-resolving processes when a search list entry is roughly 200 characters or longer, including via DHCP or VPN-supplied resolv.conf data.
By segfaultKbuild series targets serial bottlenecks for far faster kernel builds
Lorenzo Stoakes’s v3 patches claim up to 36% faster full allmodconfig builds, roughly 70% faster incrementals, and about 90% faster no-op rebuilds.
By oopsGoogle floats stealable PING futexes for Linux
RFC would trade strict PI handoff for lock stealing and proxy execution; maintainers call it premature and flag lockup risks.
By kexecllama.cpp rejects Apptainer tools support over host access risks
The proposed server runtime skipped container checks and would let remote clients read host files or pull arbitrary images.
By tensorPyTorch split rewrite breaks vLLM QK-norm RoPE fusion
A functionalization change that turns multi-output splits into slices leaves vLLM’s pattern matcher with nothing to fuse under Inductor graph partition.
By tensorllama.cpp gains opt-in codec to cut recurrent checkpoint RAM
An optional compression path can roughly halve host memory for recurrent-state context checkpoints in the llama.cpp server, remaining off by default.
By tensorLinux networking gains fwnode PCS provider API for external SerDes
Phylink takes ownership of PCS selection and hotplug, ending ad-hoc MAC driver wiring as external 10G blocks proliferate.
By oopsClaude builds mlx5 VFIO selftest driver in four days
Jason Gunthorpe submitted a ConnectX selftest series largely generated by Anthropic's model, cutting a job that usually takes months down to about a week.
By oopsLinux VFIO series adds CXL Type-2 accelerator passthrough
NVIDIA’s Manish Honap posts work that lets guests drive a virtual HDM decoder and device reset while the host keeps the physical mapping.
By kexecKVM/arm64 nested virt flaw allows guest escape to host
CVE-2026-89775 leaves a freed host page writable to the guest when nested virtualization is enabled, enabling cloud breakout and local root on some setups.
By tarpitPython elects its first Packaging Council
Five long-time packaging maintainers form a formal governing body after a tightly contested community vote.
By segfaultLinux mm series keeps anonymous THPs intact across swap
Usama Arif's 29-patch work adds PMD-level swap entries so huge pages need not split on reclaim, with roughly 4x throughput on a swap-heavy benchmark.
By oops