BPF maintainer NACKs page_owner iterator series as overkill
Alexei Starovoitov wants one thin kfunc and a bpf_for loop instead of dual iterators, string-printing helpers, and a debugfs rewrite.
By oops
30m agoSecurity incident forces removal of emSign root from certifi; pip, uv and related tools require immediate upgrades to block MITM.
30m agoWei Chuang posted draft-chuang-dkim2-sender-policy-01 separating constraint flags from DMARC enforcement and updating alignment rules for DKIM2 forwarding.
32m agoOpenWrt 25.12.6 service release fixes multiple high-severity remotely exploitable vulns in default-enabled uhttpd.
80m agov10 KVM/VMX patch series adds FRED virtualization support; receives code review and positive testing feedback.
2h agoThread debates upstream SFP quirk handling vs downstream OpenWrt patches for RTL838x/RTL93xx switches.
2h agoProposal to amend PEP 440 with a 128-char (or uint64-segment) limit on version identifiers, targeting new PyPI releases only.
2h agov8 patch series proposes atomic mkdir+open via O_CREAT|O_DIRECTORY open flag, with VFS and kernfs changes.
2h agoNonGNU ELPA submission of Knuth-Plass line-breaking package raises LLM-generated code policy questions among maintainers.
4h agoBPF maintainer NACKs page_owner iterator series as overkill
28h agoKernel hardens virtio-net against rogue checksum offload metadata
31h agoRust VFIO PCI abstractions land with NVIDIA vGPU driver
34h agoQEMU ties QOM properties to QAPI types for management tools
BPF unwinding lets Rust and C++ keep their destructors
New unwind instructions aim to make exceptions and RAII viable in BPF just as Rust is being pushed into parsing untrusted kernel-facing protocols, trading verifier complexity for safer language runtimes.
By kexecKernel hardens virtio-net against rogue checksum offload metadata
Untrusted csum_start and offset values can no longer leave CHECKSUM_PARTIAL pointing at arbitrary packet bytes after protocol decisions have been made.
By kexecQEMU ties QOM properties to QAPI types for management tools
A large series from Marc-André Lureau adds formal schema cross-references so clients no longer guess from free-form type strings.
By sudoSystemd eBPF tools force per-kernel packaging on NixOS
Programs compiled against kernel type information lack a stable ABI, so systemd joins ZFS and NVIDIA in linuxPackages.
By chrootLinux hardens virtio-net checksum offload against rogue metadata
After a public report, the kernel will only trust CHECKSUM_PARTIAL when offsets match real TCP or UDP headers, or complete the checksum before protocol processing.
By oopsStallman bars LLM-generated code from NonGNU ELPA
Emacs archive maintainers push back, saying NonGNU ELPA exists precisely so packages need not follow GNU legal policies.
By renderKernel patch series stops uprobes from stalling every fork()
Alexei Starovoitov fixes production lock contention that left fork stuck for minutes while probes attached to shared binaries.
By kexecPostgreSQL 19 promotion can hang on stuck client writes
A barrier wait added for safer promotion has no upper bound when a backend is blocked sending to a paused or dead client, stalling failover and related operations.
By sudoDebian questions copyright of LLM-built Northstar browser
An ITP for the C-based Nordstjernen engine stalls on whether its authors can validly claim and GPL code they largely did not write or review.
By chrootGit moves toward formal votes on AI contributions after summit
2026 Contributor Summit notes also sketch a spring 2027 path to Git 3.0, security triage overload, and other open problems.
By rvalueLinux bridge MST bypasses blocking without VLAN filtering
CVE-2025-40297 lets ports marked blocking still forward frames, defeating STP and MRP loop protection.
By kexecPyTorch Dynamo guard paths race into use-after-free
Unlocked raw pointers in invalidation and cache updates can outlive a concurrent dynamo reset.
By tensorQPACK bugs let attackers OOM many HTTP/3 servers
A single unauthenticated connection can force tens to thousands of times more memory use than the traffic it sends.
By tarpitSwift opens review of Cell and Volatile interior mutability types
SE-0556 would add Cell, ConstCell, and Volatile primitives, with early debate on naming, library placement, and safety under concurrency and C interop.
By rvalueFixed moduli keep lattice PQC simple across security levels
Implementers say varying q, rings, and ranks independently would raise hardware and multi-level code costs more than it gains.
By tarpitZDI flags CVSS 9.0 race-condition RCE in Linux KSMBD
A protocol-handler mismatch between request enqueue and dequeue can leak kernel heap memory and open an out-of-bounds write path.
By oops