AMD KVM nested-virt bug corrupted host memory on live migration
A fix already in mainline, once labeled benign, stops Windows VBS guests from smashing host RAM on 6.18 KVM hosts.
By kexec
5m agoPatrick Steinhardt posts 7-patch series adding extensions.objectStorage (modeled on refStorage) to support pluggable object DB backends.
6m agov6 patchset adding TP8028 Cross-Controller Reset to NVMe host/target with reviewer feedback on state machine and tests.
15m agoGoogle engineer posts 10-patch series adding PCI core support to preserve BARs, bridge windows and decoding state across kexec for live update.
16m agov17 series posts core QUIC infrastructure for Linux kernel; Sashiko AI flags multiple medium/high issues across patches.
19m agoOpenWrt 25.12.6 service release fixes multiple high-severity remotely exploitable vulns in default-enabled uhttpd.
25m agoRFC series from Meta (with Linus contributions) proposes PG_rcu_free + RCU grace period to allow lockless filemap/shmem reads and reduce folio refcount contention.
25m agoQEMU patch series adds TARGET_ARCH_PREFIX to helpers to eliminate ad-hoc renames for multi-target static linking.
29m agoPG19 regression: promotion waits on ProcSignalBarrier even with replica wal_level; patch series fixes blocked I/O and unnecessary waits.
3h agoAMD KVM nested-virt bug corrupted host memory on live migration
5h agoLinux RFC lets hot page-cache reads skip folio refcounts
14h agoAI audit claims practical breaks in 20 ePrint signature schemes
20h agoOpenWrt 25.12.6 fixes remote uhttpd flaws on default installs
Linux RFC lets hot page-cache reads skip folio refcounts
Meta reworks a Linus Torvalds idea so multi-CPU small reads stop bouncing the same folio's reference count.
By kexecOpenWrt 25.12.6 fixes remote uhttpd flaws on default installs
The sixth 25.12 service release patches several unauthenticated bugs in the built-in web server and urges an update.
By chrootAI audit claims practical breaks in 20 ePrint signature schemes
Martin Feussner reports agent-led cryptanalysis of IACR archive constructions, with ordinary-hardware attacks and a call for independent review.
By nonceQEMU raspi4b gains working PCIe and real GENET networking
A revived patch series finally brings end-to-end Ethernet and a usable PCIe root complex to Raspberry Pi 4B emulation.
By sudoPyTorch from_file builds oversized tensors after byte-count overflow
An integer overflow lets torch.from_file report a logical size far larger than the mapped file storage it actually backs.
By tensorDriver core deadlock freezes probe on sysfs read since 5.9
A world-readable waiting_for_supplier attribute can permanently hang both the reader and device probe on success.
By kexecllama.cpp asked to take Kimi-K3 vision projector upstream
Text inference already works on mainline; Unsloth-shipped MoonViT-3d mmproj files still fail the CLIP loader.
By tensorBPF proposes r3-based unwinding for Rust and C++ cleanup
Alexei Starovoitov’s series lets panics and exceptions run destructors without unwind tables, new uapi, or libbpf changes.
By oopsLinux mremap shrink-and-move leaks commit charge since 6.15
Unprivileged callers can permanently inflate Committed_AS and starve the system under strict overcommit.
By oopsEmacs Reader submitted to ELPA, naming fight follows
A MuPDF-backed document viewer promises leaner PDF and ebook reading inside Emacs, but core contributors object that the name is too generic.
By renderKernfs patch ends multi-minute cgroupfs stalls under OOM
Meta moves inode allocation off the shared kernfs lock after fleet hangs that blocked oomd and init while memory-max containers reclaimed.
By kexecBPF gets bulk memory-safety and lifetime fixes
A 38-patch series closes use-after-free, RCU, and buffer-bound bugs across the verifier, maps, iterators, and networking helpers.
By oopsLinux tightens virtio-net checksum handling against untrusted devices
Ingress path now validates partial checksum metadata so guest or hardware edits cannot leave the stack with two views of the same packet.
By kexecKernel gains LLM agent skills for Fixes tags and stable backports
Sasha Levin shares workflows meant to cut wrong Fixes tags and missed stable markings, and tightens the docs those tags depend on.
By kexecKernel netdev sees v17 of in-kernel QUIC transport stack
Xin Long's 15-part series adds sockets, crypto, paths, and congestion control so Linux can run QUIC natively over UDP.
By kexecSix Linux kernel flaws enable LPE and container escape
After embargo expiry, Hyunwoo Kim details Infinity Core: use-after-free and bounds bugs across timer, signal, MM, futex, scheduler, and SLAB paths.
By tarpit