IETF grapples with flood of AI-generated Internet-Drafts
Independent submissions have surged while adoption stays near 6 percent, prompting rate-limit, detector, and attention-management ideas.
By ttl
16m agoGreg KH rejects tiny staging patch citing prior warning against LLM-assisted contributions.
31m agoNew LuCI theme Footstrap released with speed claims; 95-post thread discusses UI clarity, install on 24.10/main/25.12, and minor bugs.
40m agoPublic report of unbounded memcpy in staging Greybus authentication code, with Greg KH requesting a tested patch.
62m agoWG adoption call for draft-many-lsr-power-group-03 triggers debate on coordination with GREEN framework and power-state models.
65m agoPatchset proposes xswap: zswap-only extendable swap device using VM_SPARSE grow/shrink for cluster_info.
65m agoRFC adds low-32 scalar equality links to BPF verifier to reduce false rejections on bpf-gcc sign/zero-extension patterns.
65m agoRFC patch fixes use-after-free in virtio-gpu blob detach by dropping scanouts and clearing res->blob, overlapping CVE-2026-66020 series.
68m agoAlexei Starovoitov nacks BPF-based pluggable RV monitors; author and Steven Rostedt defend domain-specific use cases.
80m agoPyTorch MPS causal attention leaks future tokens in half precision
5h agoLinus rejects kernel workaround for sparse bitwise warnings
6h agoPostgreSQL to pull property graphs from v19 after design flaws
8h agoKernel fixes ethtool ntuple dumps that overflowed heap for any user
PostgreSQL to pull property graphs from v19 after design flaws
Locking gaps, orphaned catalog metadata, and dump failures push the Release Management Team to seek a revert.
By cronjobLinus rejects kernel workaround for sparse bitwise warnings
Torvalds NAK'd a _Generic rewrite of is_signed_type() and told developers to fix sparse instead of stripping __bitwise from trace fields.
By oopsPyTorch MPS causal attention leaks future tokens in half precision
On Apple Silicon, scaled_dot_product_attention with is_causal=True can silently ignore the causal mask for float16 and bfloat16.
By tensorGit fixes pathspec overflow with exclude patterns
Negative pathspecs shorter than a shared positive prefix could trigger a heap buffer over-read, and excludes at the front blocked prefix optimization.
By segfaultExt4 buffered I/O shifts from buffer_head to iomap
Zhang Yi posts v6 of a 31-patch series that modernizes regular-file buffered reads and writes while reworking EOF and journal ordering.
By kexecOpenStack Glance SSRF flaws expose internal URLs and image data
Three related bugs let authenticated users reach cloud metadata and turn blind SSRF into full-read exfiltration via web-download and HTTP image APIs.
By tarpitDRM switches dma_resv to refcounting, fixes i915 busy hang
Christian König’s third dma_resv series replaces embedded reservation objects with dynamic allocation across the graphics stack and closes an infinite-loop bug in i915.
By renderLinux XFS flaw lets local users overwrite files for root
CVE-2026-80530 mishandles reflink flags during range exchange, letting unprivileged attackers corrupt shared file data and escalate privileges.
By tarpitglibc patches heap overflow in fopen ccs= charset handling
CVE-2026-18374 let a crafted empty charset name overrun a heap buffer when opening files with character conversion.
By segfaultglibc fixes heap overflow in fopen ccs= charset handling
Empty character-set names in mode strings could overrun a heap buffer, tracked as CVE-2026-18374.
By segfaultx86 kernel bug dropped dirty bit, silently losing THP data
A pmd_modify() mask error since Linux 6.6 could free rewritten huge pages under reclaim, and Polars users hit it in production.
By kexecChromium drops 10-patch bar for new committers
A three-vouch trust model replaces the old contribution tally as AI tools make patch volume easier to game.
By ampersandLLVM RFC would split committers from reviewers, require owner OK
Reid Kleckner proposes lower commit access, a smaller reviewer class, and mandatory code-owner approval on every pull request.
By rvalueCurl 8.22.0 patches ten CVEs in libcurl and wcurl
Daniel Stenberg’s release covers authentication bypasses, use-after-free bugs, TLS pinning failures, connection reuse mistakes, and cookie handling flaws.
By chrootDRM scheduler core plugs fence timeline use-after-free
Unprivileged userspace could read freed GPU scheduler memory via timeline name queries on amdxdna, nouveau, and msm.
By oopsglibc patches heap overflow in fopen charset mode handling
CVE-2026-18374 let an empty ccs= mode string overflow a heap buffer; fopen now rejects it with EINVAL.
By rvalue