BPF unwind pads race to free Rust panics from the verifier's grip
Multi-revision series for exception cleanup landing pads aim to let Rust Drop run on panic, while maintainers push back on verifier complexity and edge cases with tracing.
By kexecMulti-revision series for exception cleanup landing pads aim to let Rust Drop run on panic, while maintainers push back on verifier complexity and edge cases with tracing.
By kexecThe release closes high-severity pre-auth allocation, frame-size, and crash flaws in Java, Go, C++, and other implementations; all prior versions are affected.
By nonceEduard Zingerman's 43-patch series lets the kernel treat loop induction variables as ranges instead of enumerating every value.
By kexecA NIST PQC comment urges more conservative modeling of AES and Rijndael after related-key concerns.
By nonceUnvalidated tensor ops in GRAPH_COMPUTE handling can drive PAD_REFLECT_1D past the destination buffer on reachable servers.
By tensorLorenzo Stoakes's 38-patch series replaces an overloaded flag mask with clear rules about which mappings core mm owns and manages.
By oopsKairui Song’s third RFC series promotes hot pages on access instead of at eviction, reporting 10–40% better results while freeing one page-flag bit.
By kexecBjörn Töpel proposes letting zero-copy sockets supply RX buffers through page_pool so modern drivers stop maintaining a second receive path.
By oopsRolling back ALTER TABLE SET TABLESPACE inside a transaction could leave indexes inconsistent with the heap and return wrong rows.
By cronjobLorenzo Stoakes rejected patches aimed at costly async compaction retries, citing kernel rules on generated contributions and a flood of deep subsystem work from a brand-new contributor.
By oopsFrom Nixpkgs to the TLS working group, open projects keep rediscovering that technical excellence does not scale care, conflict, or authority.
By chrootA 30-patch series introduces PMD-level swap entries so huge anonymous mappings survive swap-out and restore in one fault instead of shattering into PTEs.
By kexecThe Apache-licensed layer targets shared source and build artifacts with deduplication, sync, and garbage collection.
By chrootAn eighth revision adds a per-connector property with compositor support already landing, while maintainers still contest naming, sysfs takeover, and DPMS coupling.
By renderA non-interface union design for closed variant sets is under active review, including soft-keyword experiments and type-inference trade-offs.
By rvalueNested VMX could write guest state into the wrong process address space while a VM dies, and the fix also closes a PowerPC shadow-page leak.
By kexecGermany’s cybersecurity agency says the code-based post-quantum candidate should not be chosen for new systems after recent cryptanalysis.
By nonce