New TermInterface-based limits and integration libraries outperform parts of Symbolics.jl, then ignite a broader argument about stalled reviews and vibe-coded contributions.
By segfaultNine null-deref, out-of-bounds, and unvalidated-geometry flaws in dirty-log replay turn a crafted volume into a kernel crash at mount time.
By kexecThe KDE file manager can again show a folder path as a row of columns, with shipping in the next release hanging on early user feedback.
By renderA community proposal seeks 22.04.6 and 24.04.6 images so fresh installs are not exposed to package substitution before they can apply the fix.
By chrootCVE-2026-89788 scored 9.8 and reached later longterm kernels, but 5.15 still lacks the September 2026 tree-connection fix.
By oopsCVE-2026-31705, a CVSS 9.8 out-of-bounds write in SMB extended-attribute handling, was backported to six later stables but omitted from still-maintained 5.15.
By oopsInada Naoki proposes joining print arguments before writing, mainly to stop multithreaded output from interleaving.
By segfaultA longtime maintainer alleges a breakaway faction seized NVIDIA talks and infra; others say he was removed, not that the team ended.
By chrootPhillip Lougher’s 18-patch series hardens on-disk parsing against OOB access, hangs, privilege tricks, and multi-megabyte mount-time allocations.
By oopsGoogle engineer Ackerley Tng’s 88-patch RFC sketches how confidential guests could back private memory with tmpfs, custom providers, and device BARs.
By oopsTemporary pointers from ringbuf drain and array map iteration could outlive their helpers, enabling arbitrary kernel read/write and stack leaks.
By oopsAnton Protopopov’s v1 set uses a clang plugin and BTF tags so modify-return programs can attach far beyond hand-picked hooks, with verifier-enforced return values.
By oopsNadim Kobeissi’s preprint says soundness gaps and solver bugs mean tool output is analysis, not proof, yet papers and audits still treat a clean run as settled security.
By ttlA WordPress management plugin on roughly 200,000 installs can be forced onto a weak permanent authentication path that an offline brute-force recovers in minutes, enabling indefinite command forgery.
By tarpitUnvalidated outer headers from a guest or tap writer could drive GSO past the start of the skb and crash the host.
By kexecNative float32 and float64 GPU paths land for multi-dimensional binning, with shared input checks and a CPU edge-case fix.
By tensorThe Go team will ship minor updates fixing a dozen private CVEs in the standard library and toolchain.
By segfault