Linux kTLS adds TLS 1.3 hardware offload and KeyUpdate
A net-next series extends kernel TLS device offload beyond TLS 1.2, with full rekey support on capable Mellanox NICs.
By kexec
4m agoPatch fixes dma-buf fd leak race: reserve with get_unused_fd_flags before copy_to_user, publish only on success via new dma_buf_fd_install helper.
14m agoNixpkgs core team announces it has disbanded after 10 months, citing unsustainable workload and health.
18m ago123-message debate on new EIP for partial validator reward burn to taper ETH issuance, featuring bias accusations and status-quo defense.
19m agoProposal to deprecate legacy tuple indexing on structseq objects (os.stat_result etc.) after 25 years.
58m agoLinux kTLS adds TLS 1.3 hardware offload and KeyUpdate
62m agoRFC v3 series proposes git repack --drop-filtered to drop large promisor blobs from partial clones while keeping them lazily refetchable.
65m agov11 patch series proposes new fwnode-based PCS provider/consumer API and subsystem for phylink in net-next.
65m agoPahole gains Rust enum DWARF support and dwz alternate debug handling
77m agoRISC-V IOMMU series adds MSI remapping, enabling IOMMU_DMA by default plus VFIO/KVM device assignment.
77m agoPatch series proposes BPF kfuncs to let LSM programs apply pre-created Landlock rulesets at exec, with design feedback on kfunc scoping and composition.
3h agoRISC-V IOMMU gains MSI remapping, unlocking DMA and VFIO
17h agoLinux 6.6.149 ships broken Safe-RET security backport
Pahole gains Rust enum DWARF support and dwz alternate debug handling
Arnaldo Carvalho de Melo’s series stops Rust Option and Result types from collapsing to empty BTF structs and unblocks type loading on dwz-compressed debuginfo.
By kexecRISC-V IOMMU gains MSI remapping, unlocking DMA and VFIO
A 19-patch series from Qualcomm lets RISC-V translate device MSIs like DMA traffic and opens the door to PCIe device assignment in KVM guests.
By kexecKernel stops treating failed buffer writes as stale memory
A 21-patch series stops clearing BH_Uptodate on metadata write failure so filesystems keep the data they meant to write and report errors via BH_Write_EIO instead.
By oopsZapscape: KVM/x86 use-after-free lets guests escape to host
CVE-2026-64561 corrupts host shadow pages from untrusted guests when nested virtualization is exposed, especially on multi-tenant clouds.
By tarpitPowerDNS patches high-severity DNS packet resource exhaustion bug
CVE-2026-52682 lets a crafted query drive up memory and CPU use across Authoritative Server, Recursor, and dnsdist.
By tarpitLinux SCTP bug lets local users hit root and escape containers
A use-after-free in Dynamic Address Reconfiguration, CVE-2026-64564, has been fixed after more than a decade in the tree.
By tarpitIntel proposes upstreaming PISA GPU backend to LLVM
The virtual ISA would give LLVM a portable, Intel-specific compilation target alongside existing NVIDIA and AMD GPU backends.
By rvalueBPF stack helpers race fixed with preemption disable
A preemptible window let concurrent tasks inflate callchain length and overwrite caller buffers via bpf_get_stack and bpf_get_stackid.
By oopsNixOS stewards clash over Hugging Face The Stack opt-out
A unilateral removal of org repos from the code-training dataset has split contributors over consent, copyright, and who speaks for the project.
By chrootBouncy Castle Java 1.85 closes 32 CVEs in core crypto paths
The July release patches signature, AEAD, keystore, and certificate-validation flaws in a library embedded across countless JVM applications.
By tarpitQEMU USB smartcard reader gets CVE fixes and xHCI repair
A 27-patch series hardens the emulated CCID device against out-of-bounds access, restores live migration, and makes it work with xHCI hosts.
By sudoEmacs will ship AGENTS.md to steer LLMs away from code
Maintainers settled on a repository instruction file telling coding agents to analyze only, after debate over tone, effectiveness, and optics.
By renderSwift reviews macros that can grant self access in property initializers
SE-0539 would let accessor macros promise the compiler that an initializer expression will run only after self is fully available.
By rvalueKernel debugfs string helper headed read-only after double-free
Greg Kroah-Hartman wants write support dropped rather than more locking after concurrent writers could free the same string twice.
By kexecX.Org patches libXfont2 font client flaws that can escalate privileges
Version 2.0.9 closes two heap memory bugs reachable from a malicious font server, one an incomplete fix from 2014.
By tarpitDraft EIP would burn ETH validator rewards to cap stake share
A tapered burn aims to cancel issuance incentives near 50% staked; critics say it would crush solo yields and concentrate operators.
By ledger