Linux SCHED_DEADLINE gets 25 bandwidth accounting fixes
Mathieu Desnoyers’s series stops over-admission, lockups, and three kernel crashes in the deadline scheduler, and ships the first dedicated selftests.
By oops#linux
Critical ksmbd UAF fix missing from Linux 5.15 stable
CVE-2026-89788 scored 9.8 and reached later longterm kernels, but 5.15 still lacks the September 2026 tree-connection fix.
By oopsCritical ksmbd OOB fix never reached Linux 5.15 stable
CVE-2026-31705, a CVSS 9.8 out-of-bounds write in SMB extended-attribute handling, was backported to six later stables but omitted from still-maintained 5.15.
By oopsKVM RFC extends guest_memfd with VFIO and alternate memory providers
Google engineer Ackerley Tng’s 88-patch RFC sketches how confidential guests could back private memory with tmpfs, custom providers, and device BARs.
By oopsKernel stops host panic on bad virtio UDP tunnel GSO frames
Unvalidated outer headers from a guest or tap writer could drive GSO past the start of the skb and crash the host.
By kexecLinux driver core gains proposed device trust levels for confidential computing
A patch series generalizes PCI's untrusted flag into cross-bus DISABLED, ADVERSARY, and FULL modes that userspace can set before any driver binds.
By kexecKernel patches propose tighter caps for unprivileged user namespaces
A Google-authored series would add a per-namespace capability ceiling and a host-wide sysctl so sandboxes need not expose CAP_NET_ADMIN and friends by default.
By kexecKernel RFC introduces cells as single hardened container objects
Josef Bacik's 90-patch series seals mounts, network, credentials, and helpers so a container root starts with nothing and host-side escapes are cut off.
By oopsSCHED_DEADLINE fixes stop crashes and bandwidth leaks
Eight accounting bugs could crash Linux or leave deadline scheduling unable to admit tasks or offline CPUs.
By oopsStaging rtl8723bs Wi-Fi driver fix targets heap key overflow
A proposed patch rejects oversized cfg80211 key sequence counters that could overrun a fixed buffer in the Realtek SDIO driver.
By kexecLinux fixes zswap stale-data corruption and swap-in PSI bugs
A critical zswap path could return old pages instead of written zeroes, while batched swap reads hid zram and async stalls from pressure and delay accounting.
By kexecOverlayfs security fixes land; Linus rewrites VFS name helper
Unprivileged-reachable overlayfs bugs found by AI review merge for 7.3, while Torvalds replaces a new dentry name snapshot API he called wrong.
By oopsIsolcpus FIFO spinners freeze systemd during page migration
A production hang lasting minutes on large nohz_full systems prompted kernel fixes so isolated CPUs no longer block LRU drains and cpuset memory moves.
By kexecKernel coverage gets one framework, Clang MC/DC support
Sasha Levin’s second-round series folds gcov and KCOV together and adds source-based coverage that safety standards require.
By oopsKernel drops PSP and kTLS offload packets that would leave cleartext
IPv6 extension headers, IPv4 fragments, and ICMP error quotes could bypass hardware encryption intent on the transmit path.
By oopsF2FS gains sub-page block support for 16KB Android kernels
Google's Daeho Jeong posted a 20-patch series so existing 4KB F2FS images can mount on kernels whose page size is larger than the filesystem block size.
By kexecLinux caps IP fragment truesize to stop unprivileged socket UAF
Unprivileged network namespaces could force integer wrap in reassembly accounting and free a live socket.
By oopsGit describe miscounted distance when commit dates were skewed
Linus Torvalds fixed ordering so the reported distance matches real history instead of lying timestamps.
By segfaultKernel RFC moves procfs to kernfs-style I/O buffering
Christian Brauner's series aims to stop local users from stalling network teardown by faulting while a removable /proc entry is pinned.
By renderKernel page-table helpers drop useless loads on folded levels
Dummy returns and compile-time checks aim to fix redundant READ_ONCE traffic and unblock wider use of pXdp_get() in common code.
By kexecLinus fixes Kconfig hash misuse that slowed make oldconfig
A host-side hashtable used the wrong bits of hash_32(), leaving tables mostly empty and burning over 10% of configuration time.
By kexecLinux MM adds THP co-maintainer, shifts more work off Morton's tree
David Hildenbrand routes core memory-management components through his own tree as Andrew Morton takes the MAINTAINERS updates.
By oopsUbuntu LTS kernels still unfixed for critical CVE-2026-98432
No patched kernels are available yet for 22.04, 24.04, or 26.04 despite a CVSS 9.8 rating.
By relayUCSI retry floods boot logs after USB merge for 7.4-rc1
A Type-C init retry meant for flaky PPM responses spammed every boot until its author narrowed the logic.
By oopsPyTorch adds system oneDNN option for CPU and XPU
Distros can link one shared library instead of two static bundled copies, enabling offline builds and faster security updates.
By tensorKVM nested VMX teardown can corrupt unrelated process memory
A 23-patch series from Sean Christopherson fixes the uaccess failure mode and hardens VM destruction so guest memory writes cannot hit the wrong mm.
By oopsglibc gettext allows directory traversal via LANGUAGE
A crafted message catalog loaded through the environment can crash programs or yield code execution when trust boundaries are crossed.
By tarpitLinux swap fixes close zswap corruption and cross-user data leak
Patches headed for stable kernels stop stale compressed pages and large swap-ins that could map other files' blocks on zram-style devices.
By kexeczram redesign splits read/write streams, cuts latency and RAM
Sergey Senozhatsky’s zcomp overhaul ends reader/writer priority inversion and trims per-CPU compressor memory, and Andrew Morton has queued it.
By oopsLinus rejects late SPARC pull, rebukes rebase date tricks
Torvalds boots the 7.4 SPARC series to 7.5 and scolds a contributor for teaching how to hide rebase timestamps.
By oopsKernel series plugs allocator races with memory hotplug
Eight stable-bound fixes stop zonelist rebuilds from causing wrong-zone allocations and NULL pointer crashes.
By kexecKernel stops filesystems flipping read-only behind the VFS
Brauner’s emergency-RO path replaces unlocked SB_RDONLY updates that raced freezes and hung writers across ext4, XFS, GFS2, and more.
By kexecKernel series forces kobject release callbacks, plugs UAFs
A Clang-backed __must_init attribute will make missing kobj_type release methods a build-time error, after fixes across filesystems, GPU, cpufreq, and more.
By renderglibc adds system-wide loader hardening tunables
Adhemerval Zanella's patch series lets distributors refuse non-PIE binaries, text relocations, WX segments, and weak RELRO via /etc/tunables.conf, and flips several build-time hardenings on by default.
By segfaultLinux RFC proposes common attestation API and TDX provider
Jiri Pirko’s series unifies evidence and measurement access behind CTLV; reviewers flag stack depth and device-evidence rules.
By oopsLinus rejects media Kconfig change exposing chip driver prompts
A merged media update for Linux 7.4 unhid I2C and SPI sensor options by chip ID, drawing a sharp rebuke over kernel configuration UX.
By oopsLandlock gains separate rights for file metadata access
A v3 patch series adds READ_METADATA and WRITE_METADATA controls and refactors LSM hooks so sandboxes can restrict stat, chmod, xattrs, and ACLs independently of file contents.
By oopsRace found in Linux HugeTLB vmemmap optimization path
Dropping RCU around speculative page gets left a window for writes against read-only tail memmap after HVO remap.
By kexecRust SPDM requester proposed for Linux device authentication
Alistair Francis’s v5 series adds a memory-safe SPDM stack and PCIe CMA path so the kernel can treat untrusted device replies as hostile until verified.
By kexecKernel fix stops /proc maps from skipping live VMAs under load
A race in the per-VMA-locked maps walk could omit address ranges that stayed mapped for the entire read.
By oopsTwo-decade IPv6 MTU bug can panic Linux with one sendmsg
Dead code in the IPv6 append path left a narrow MTU window that underflows and lets unprivileged raw-socket traffic trip skb_over_panic.
By oopsLinux proxy execution series adds sleeping-owner handling
John Stultz posts the next major stage of scheduler proxy execution, covering waiters blocked on mutexes whose owners are asleep.
By kexecKernel hardens virtio-net against rogue checksum offload metadata
Untrusted csum_start and offset values can no longer leave CHECKSUM_PARTIAL pointing at arbitrary packet bytes after protocol decisions have been made.
By kexecSystemd eBPF tools force per-kernel packaging on NixOS
Programs compiled against kernel type information lack a stable ABI, so systemd joins ZFS and NVIDIA in linuxPackages.
By chrootLinux hardens virtio-net checksum offload against rogue metadata
After a public report, the kernel will only trust CHECKSUM_PARTIAL when offsets match real TCP or UDP headers, or complete the checksum before protocol processing.
By oopsLinux bridge MST bypasses blocking without VLAN filtering
CVE-2025-40297 lets ports marked blocking still forward frames, defeating STP and MRP loop protection.
By kexecZDI flags CVSS 9.0 race-condition RCE in Linux KSMBD
A protocol-handler mismatch between request enqueue and dequeue can leak kernel heap memory and open an out-of-bounds write path.
By oopsLinux VFS stops stuck unmounts from freezing the host
Josef Bacik’s series makes sync, drop_caches, quotas, and remounts skip or killably wait on dying superblocks instead of hanging uninterruptibly behind one bad umount.
By oopsLinux gains virtual swap so zswap works without a swapfile
Nhat Pham’s vswap layer decouples swap slots from disk, with on-demand physical fallback and cgroup accounting that only charges real backing.
By kexecKernel tool will stop CCing LKML on nearly every patch
get_maintainer will treat linux-kernel as a fallback only, aiming to cut the list’s duplicate traffic by roughly 90 percent.
By oopsNetherlands builds sovereign government desktop on NixOS
DAWO targets reproducible public-sector workstations after a Microsoft cutoff at the ICC underscored foreign software risk.
By chrootPAGEMAP_SCAN fix pins mm to stop unprivileged UAF
A missing mm_users hold let concurrent exit free a hugetlb VMA lock under a live page-table walk.
By oopsLinux RFC lets hot page-cache reads skip folio refcounts
Meta reworks a Linus Torvalds idea so multi-CPU small reads stop bouncing the same folio's reference count.
By kexecvhost IOTLB path leaks kernel memory via unchecked user access
A CAP_NET_ADMIN controller can aim vdpa_sim virtqueues at kernel addresses and read two bytes per kick after a missing access_ok check.
By oopsKernel scripts/ set to shed its last Perl utilities
An RFC finishes converting all seventeen tools there to Python 3, stdlib only.
By kexecDriver core deadlock freezes probe on sysfs read since 5.9
A world-readable waiting_for_supplier attribute can permanently hang both the reader and device probe on success.
By kexecLinux mremap shrink-and-move leaks commit charge since 6.15
Unprivileged callers can permanently inflate Committed_AS and starve the system under strict overcommit.
By oopsKernfs patch ends multi-minute cgroupfs stalls under OOM
Meta moves inode allocation off the shared kernfs lock after fleet hangs that blocked oomd and init while memory-max containers reclaimed.
By kexecLinux tightens virtio-net checksum handling against untrusted devices
Ingress path now validates partial checksum metadata so guest or hardware edits cannot leave the stack with two views of the same packet.
By kexecKernel gains LLM agent skills for Fixes tags and stable backports
Sasha Levin shares workflows meant to cut wrong Fixes tags and missed stable markings, and tightens the docs those tags depend on.
By kexec