kbuild speedups, BPF unwinding, and a vhost leak

Kernel traffic on 2026-10-21 focused on build-system performance, BPF verifier extensions for higher-level languages, and a user-access leak in vhost. Parallel work advanced in-kernel QUIC, lockless page-cache reads, and tighter callback lifetime rules.

kbuild parallelization and Kconfig caching

A 23-patch series proposes large reductions in kernel build time, claiming up to 36 percent faster allmodconfig builds through greater parallelization and Kconfig caching. Linus Torvalds and eleven other developers are reviewing the changes on linux-kernel. Maintainers and anyone who regularly rebuilds large configurations stand to gain wall-clock time from the work.

BPF unwind_goto and unwind_exit

Version 4 of a six-patch bpf-next series introduces unwind_goto and unwind_exit instructions together with verifier state tracking and JIT support. The goal is to allow Rust and C++ exceptions and destructors to run inside BPF programs. Language runtime authors targeting BPF need these primitives before exception-aware code can be verified and executed safely.

vhost/vringh kernel memory leak

Developers identified a path in which __get_user is used without access_ok, leaking kernel memory through vDPA passthrough in vhost/vringh. Discussion on linux-kernel includes patches for the immediate bug and a push from Linus Torvalds for wider uaccess cleanups. Systems that expose vDPA devices are directly affected, and the exchange highlights continuing pressure on kernel-user copy boundaries.

In-kernel QUIC infrastructure

Revision 17 of a 15-patch net-next series adds QUIC infrastructure and core subcomponents to the networking stack. The series is under active review on netdev. Networking developers tracking transport-protocol support in the kernel will want to follow the design and remaining open points.

32-bit scalar evolution for BPF loops

A two-patch series extends the BPF verifier with 32-bit linear scalar evolution so loop bounds can be tracked more tightly. Reviewers have already flagged pointer-bound and clamping bugs in the proposed logic. Programs that rely on 32-bit arithmetic stand to obtain more precise verification once the issues are resolved.

Frame-scoped BPF callback arguments

Version 2 of an eleven-patch set adds REF_TYPE_FRAME so callback arguments are tied to the callee frame lifetime. The change closes kernel read/write and stack-leak issues previously reachable through ringbuf and arraymap helpers. It hardens a class of BPF helper patterns that pass temporary objects into callbacks.

Lockless page-cache reads without folio references

An 18-patch RFC from Meta, with contributions from Linus Torvalds, introduces PG_rcu_free and an RCU grace period so filemap and shmem paths can read the page cache without taking folio references. The design aims to cut refcount contention on hot read paths. Memory-management developers evaluating lockless cache access should examine the proposed lifetime rules.