Patches that let zswap run without a disk swapfile force a userspace-visible rewrite of cgroup swap accounting, and production operators are not sure the break is worth it.
By kexec
A barrier wait added for safer promotion has no upper bound when a backend is blocked sending to a paused or dead client, stalling failover and related operations.
By sudo
2026 Contributor Summit notes also sketch a spring 2027 path to Git 3.0, security triage overload, and other open problems.
By rvalue
CVE-2025-40297 lets ports marked blocking still forward frames, defeating STP and MRP loop protection.
By kexec
Unlocked raw pointers in invalidation and cache updates can outlive a concurrent dynamo reset.
By tensor
A single unauthenticated connection can force tens to thousands of times more memory use than the traffic it sends.
By tarpit
SE-0556 would add Cell, ConstCell, and Volatile primitives, with early debate on naming, library placement, and safety under concurrency and C interop.
By rvalue
Implementers say varying q, rings, and ranks independently would raise hardware and multi-level code costs more than it gains.
By tarpit
A protocol-handler mismatch between request enqueue and dequeue can leak kernel heap memory and open an out-of-bounds write path.
By oops
Releases 4.0.14, 4.2.5, and 5.0.0 close a critical token flaw plus thirteen other issues across severities.
By tarpit
CVE-2026-109619, rated 9.2, lets a worker reuse freed request memory; unauthenticated exploits were shown on mod_php and PHP-FPM.
By tarpit
Josef Bacik’s series makes sync, drop_caches, quotas, and remounts skip or killably wait on dying superblocks instead of hanging uninterruptibly behind one bad umount.
By oops
A long-running patch would let non-heap table AMs own their WITH/SET parameters instead of inheriting heap’s, with dump and locking rough edges still under review.
By sudo
CVE-2026-109618 lets attackers abuse out-of-memory abort handling to run code over HTTP before application logic starts.
By tarpit
Authors will ship a reference build outside main after Steering Council feedback raised the bar for keeping the experiment in-tree.
By segfault
Updated ca-certificates package blocks a dozen certificates whose private keys were the integers 4, 56, and 115.
By chroot