Nixpkgs core team exits as packaging megaprojects hit the burnout wall
A ten-month experiment in consensus leadership ends in attrition, while store rewrites and other distro policy fights expose the same unpaid-authority gap.
By chroot
21m agoWill Deacon posts v2 arm64 series enabling parallel secondary CPU bringup using PSCI v0.2+ and generic hotplug.
29m agoCanonical releases experimental Ubuntu 26.10 concept ISO for Snapdragon X1/X2 hardware with Qualcomm partnership for 2027 certified images.
44m agoPatch changes get_maintainer.pl so THE REST (LKML) becomes true fallback instead of always-added recipient.
60m agoMaintainers discuss deprecating Assisted-by AI tag after summit consensus; patch withdrawn pending clearer rationale.
86m agoGit list discusses rerere gc lock race with rebase after 2.54 geometric maintenance change; patches add timeout and tweak heuristics.
1h agoLinus is holding regulator fixes pull due to unrecognized GPG signing key on recent requests.
2h agoPyTorch CPU triu/tril write out of bounds on strided batch out
2h agoSwift Evolution review opens for SE-0556 adding Cell, ConstCell, and Volatile primitives for interop and low-level access.
3h agoKernel isolates skb data allocations against UAF heap sprays
3h agoOCaml community debates AI-assisted tutorials on ocaml.org after quality complaints and calls to revert changes.
7h agoIETF last call rejects mandatory ops sections in RFCs
12h agoCPython eyes UTF-8 as default internal string storage
Kernel isolates skb data allocations against UAF heap sprays
Kees Cook’s kmem_buckets series, capped by a Pedro Falcato networking change, gives socket-buffer payloads their own slab caches when slab buckets are enabled.
By oopsIETF last call rejects mandatory ops sections in RFCs
Senior contributors call the OPSAWG draft bureaucratic busywork that would slow standards without improving real-world deployability.
By ttlPyTorch CPU triu/tril write out of bounds on strided batch out
Non-contiguous batch dimensions on the out tensor make the CPU path step wrong and can corrupt the heap; CUDA is fine.
By tensorExt4 buffered I/O moves to iomap in large opt-in series
Zhang Yi’s 31-patch v7 lands the core conversion and a new disksize-pending scheme, still off by default until more features catch up.
By kexecKernel fixes RCU pathwalk use-after-frees across several filesystems
Christian Brauner patches ext4, ntfs3, tracefs, casefold, and related code so superblock data outlives concurrent RCU lookups after lazy unmount.
By oopsCyrus SASL left with unfixed flaws and no active maintainers
Oracle engineer flags multiple open security issues after years without a release.
By tarpitKernel fix blocks UAF in lazyfree huge-page reclaim race
An unprivileged race of MREMAP_DONTUNMAP against transparent huge page discard could free anon_vma structures still referenced by a restored mapping.
By kexecLinux netdev adds fwnode PCS provider API for external serdes
Christian Marangi’s series gives phylink a producer-consumer model for Physical Coding Sublayer devices and lands first support on Airoha AN7581.
By kexecOpenJPEG leaves heap overflow in all releases as project goes idle
A February 2026 fix never shipped; 2.5.3 and 2.5.4 remain vulnerable in distros and PDF toolchains, with no CVE.
By tarpitLinux watch queue race lets unprivileged users panic the kernel
A fix makes sizing of key-notification pipes atomic so concurrent posters cannot hit a null buffer and crash the system.
By kexecSPARC64 gains Linux seccomp filter support
The architecture was one of the last without the BPF sandboxing Docker, systemd, and Flatpak rely on.
By kexecOpenStack Mistral flaws allow cross-project writes and host RCE
Four CVEs in the workflow service let authenticated users rewrite other projects' resources, extend private workflow shares, and run code on executor hosts.
By nonceBPF adds unwind landing pads for resource cleanup
Kernel support for compiler-emitted cleanup tables would let bpf_unwind() run Drop-style release instead of discarding frames.
By oopsPyTorch CUDA pool teardown can re-enter half-destroyed state
Review of pending allocator work also flags null returns that can produce CUDA tensors backed by address zero.
By tensorKernel pin-init adds safe sibling-field self-references
Gary Guo’s series lets pinned Rust structs borrow between fields without allocation, landing advanced variance tools under a tight-use agreement.
By kexecGo patches HTTP/2 CPU spike from SETTINGS window updates
CVE-2026-78669 let a malicious peer burn CPU with many streams and repeated initial window size changes.
By segfault