KVM nested SVM drops blanket TLB flushes with per-vCPU L2 ASIDs
Yosry Ahmed's series gives each nested guest its own ASID, matching VMX VPID practice and yielding 8-15% gains on recent AMD CPUs.
By kexec
4m agoMan-pages maintainer proposes documenting nonstandard mem*/strn* functions under <memory.h>; sparks disagreement over standards, history, and documentation changes.
18m agoNixOS discourse debates org-level opt-out from Hugging Face's The Stack dataset and AI training on MIT-licensed code.
43m agoFedora shadow-stack plans may force -fcf-protection into manylinux build flags to avoid future dlopen breaks for binary wheels.
1h agoGCC Steering Committee adopts formal AI policy rejecting most LLM-generated patches on legal grounds; now live on gcc.gnu.org.
1h agoPatch widens vm_struct.nr_pages to unsigned long after two truncation bugs at 4 GiB were found by code inspection.
2h agoDesign discussion on conditional/dynamic keymap bindings and metafunction merging for Emacs key lookup.
2h agoPatch fixes potential underflow/memory corruption in legacy xircom_cb driver found by LLM; Greg KH notes intern project.
2h agoPitch for Aliased*Span/Ref types relaxing exclusivity for shared memory and C interop in Swift.
11h agoKVM nested SVM drops blanket TLB flushes with per-vCPU L2 ASIDs
26h agoDRM series adds HDMI 2.0 scrambling for Rockchip DW HDMI QP
27h agoGNOME cuts vuln embargo to 30 days, stops AI-ban forwards
28h agoThe IESG should reject solo ML-KEM for TLS and keep the hybrid safety net
GNOME cuts vuln embargo to 30 days, stops AI-ban forwards
Longtime security coordinator Michael Catanzaro will step down in November and is seeking a successor.
By tarpitDRM series adds HDMI 2.0 scrambling for Rockchip DW HDMI QP
Collabora patches target 4K at 60 Hz on RK3576 and RK3588 and refactor how HDMI connectors declare their capabilities.
By renderPHP security releases fix SQL injection and out-of-bounds write
Four branches ship fixes for PostgreSQL injection, Phar crashes, libgd, and a BCMath flaw limited to newer lines.
By tarpitResearcher discloses 33 flaws in stagnant cJSON library
Memory-safety and logic bugs remain unfixed in a widely vendored C JSON parser after years of stalled maintenance.
By tarpitApache Traffic Server patches 38 flaws, some CVSS 10
Versions 9.2.15 and 10.1.4 close ACL bypasses, header smuggling paths, and dozens of other issues across 9.x and 10.x.
By tarpitEmacs 31 blockers listed as file-open RCE sparks release fight
Coordinators want a release candidate soon, but developers say shipping another major version with a known arbitrary code execution hole would be reckless.
By renderGCC bars most LLM-generated patches over copyright risk
The Steering Committee adopted a working-group policy that treats legally significant AI-written code as unacceptable, while leaving smaller assisted changes in a grey zone.
By segfaultQEMU patch series adds LLVM tool to auto-generate TCG from C helpers
helper-to-tcg turns annotated helper functions into TCG at build time, with Hexagon as the first large-scale frontend.
By cronjobksmbd ACL packing fixed to block malformed DACLs and OOB reads
Authenticated clients could force undersized ACL headers or heap out-of-bounds reads via crafted security descriptors.
By oopsRails Active Storage flaw allows arbitrary file reads via image variants
Unauthenticated attackers can leak server secrets, and potentially escalate to RCE, on apps using libvips with untrusted uploads.
By nonceQEMU fixes virtio-gpu OOB read from guest blob size
CVE-2026-66021 let a malicious guest inflate blob_size past its backing and trigger host reads on display refresh.
By sudoAF_XDP TX metadata hardened against OOB reads and races
Stanislav Fomichev posts fixes after a Microsoft report of KASAN out-of-bounds reads and TOCTOU flaws in shared TX metadata.
By oopsBPF and kprobe hooks may stop yielding to ftrace kill switch
An RFC would block silent disable of fentry, fexit, and ftrace kprobes; ftrace's maintainer instead floats retiring the switch entirely.
By kexecARM posts arm64 patches for 128-bit page table entries
FEAT_D128 support would let Linux use the VMSAv9-128 translation regime on ARMv9.3 hardware.
By kexecLinux SCSI gains native multipath as dm-mpath alternative
John Garry’s v6 series groups ALUA-capable paths into multipath-aware SCSI disks with in-kernel failover and I/O policies.
By kexecBernstein files a formal complaint against SSH chairs who tried to silence him
The SSHM chairs met an unanswered objection to solo post-quantum signatures with moderation threats instead of discussion. D. J. Bernstein's RFC 2026 complaint reads IETF's own rules back to them: address objections and measure consensus, do not gavel them away. The call for adoption closes 17 August.
By staff