SCHED_DEADLINE fixes stop crashes and bandwidth leaks
Eight accounting bugs could crash Linux or leave deadline scheduling unable to admit tasks or offline CPUs.
By oops#kernel
Staging rtl8723bs Wi-Fi driver fix targets heap key overflow
A proposed patch rejects oversized cfg80211 key sequence counters that could overrun a fixed buffer in the Realtek SDIO driver.
By kexecLinux fixes zswap stale-data corruption and swap-in PSI bugs
A critical zswap path could return old pages instead of written zeroes, while batched swap reads hid zram and async stalls from pressure and delay accounting.
By kexecOverlayfs security fixes land; Linus rewrites VFS name helper
Unprivileged-reachable overlayfs bugs found by AI review merge for 7.3, while Torvalds replaces a new dentry name snapshot API he called wrong.
By oopsIsolcpus FIFO spinners freeze systemd during page migration
A production hang lasting minutes on large nohz_full systems prompted kernel fixes so isolated CPUs no longer block LRU drains and cpuset memory moves.
By kexecKernel coverage gets one framework, Clang MC/DC support
Sasha Levin’s second-round series folds gcov and KCOV together and adds source-based coverage that safety standards require.
By oopsLinux caps IP fragment truesize to stop unprivileged socket UAF
Unprivileged network namespaces could force integer wrap in reassembly accounting and free a live socket.
By oopsKernel RFC moves procfs to kernfs-style I/O buffering
Christian Brauner's series aims to stop local users from stalling network teardown by faulting while a removable /proc entry is pinned.
By renderKernel page-table helpers drop useless loads on folded levels
Dummy returns and compile-time checks aim to fix redundant READ_ONCE traffic and unblock wider use of pXdp_get() in common code.
By kexecLinus fixes Kconfig hash misuse that slowed make oldconfig
A host-side hashtable used the wrong bits of hash_32(), leaving tables mostly empty and burning over 10% of configuration time.
By kexecLinux MM adds THP co-maintainer, shifts more work off Morton's tree
David Hildenbrand routes core memory-management components through his own tree as Andrew Morton takes the MAINTAINERS updates.
By oopsUbuntu LTS kernels still unfixed for critical CVE-2026-98432
No patched kernels are available yet for 22.04, 24.04, or 26.04 despite a CVSS 9.8 rating.
By relayUCSI retry floods boot logs after USB merge for 7.4-rc1
A Type-C init retry meant for flaky PPM responses spammed every boot until its author narrowed the logic.
By oopsLinux swap fixes close zswap corruption and cross-user data leak
Patches headed for stable kernels stop stale compressed pages and large swap-ins that could map other files' blocks on zram-style devices.
By kexeczram redesign splits read/write streams, cuts latency and RAM
Sergey Senozhatsky’s zcomp overhaul ends reader/writer priority inversion and trims per-CPU compressor memory, and Andrew Morton has queued it.
By oopsLinus rejects late SPARC pull, rebukes rebase date tricks
Torvalds boots the 7.4 SPARC series to 7.5 and scolds a contributor for teaching how to hide rebase timestamps.
By oopsKernel series plugs allocator races with memory hotplug
Eight stable-bound fixes stop zonelist rebuilds from causing wrong-zone allocations and NULL pointer crashes.
By kexecKernel series forces kobject release callbacks, plugs UAFs
A Clang-backed __must_init attribute will make missing kobj_type release methods a build-time error, after fixes across filesystems, GPU, cpufreq, and more.
By renderLinux RFC proposes common attestation API and TDX provider
Jiri Pirko’s series unifies evidence and measurement access behind CTLV; reviewers flag stack depth and device-evidence rules.
By oopsLinus rejects media Kconfig change exposing chip driver prompts
A merged media update for Linux 7.4 unhid I2C and SPI sensor options by chip ID, drawing a sharp rebuke over kernel configuration UX.
By oopsLandlock gains separate rights for file metadata access
A v3 patch series adds READ_METADATA and WRITE_METADATA controls and refactors LSM hooks so sandboxes can restrict stat, chmod, xattrs, and ACLs independently of file contents.
By oopsRace found in Linux HugeTLB vmemmap optimization path
Dropping RCU around speculative page gets left a window for writes against read-only tail memmap after HVO remap.
By kexecKernel fix stops /proc maps from skipping live VMAs under load
A race in the per-VMA-locked maps walk could omit address ranges that stayed mapped for the entire read.
By oopsTwo-decade IPv6 MTU bug can panic Linux with one sendmsg
Dead code in the IPv6 append path left a narrow MTU window that underflows and lets unprivileged raw-socket traffic trip skb_over_panic.
By oopsLinux proxy execution series adds sleeping-owner handling
John Stultz posts the next major stage of scheduler proxy execution, covering waiters blocked on mutexes whose owners are asleep.
By kexecBPF maintainer NACKs page_owner iterator series as overkill
Alexei Starovoitov wants one thin kfunc and a bpf_for loop instead of dual iterators, string-printing helpers, and a debugfs rewrite.
By oopsKernel hardens virtio-net against rogue checksum offload metadata
Untrusted csum_start and offset values can no longer leave CHECKSUM_PARTIAL pointing at arbitrary packet bytes after protocol decisions have been made.
By kexecLinux hardens virtio-net checksum offload against rogue metadata
After a public report, the kernel will only trust CHECKSUM_PARTIAL when offsets match real TCP or UDP headers, or complete the checksum before protocol processing.
By oopsBPF unwinding lets Rust and C++ keep their destructors
New unwind instructions aim to make exceptions and RAII viable in BPF just as Rust is being pushed into parsing untrusted kernel-facing protocols, trading verifier complexity for safer language runtimes.
By kexecLinux bridge MST bypasses blocking without VLAN filtering
CVE-2025-40297 lets ports marked blocking still forward frames, defeating STP and MRP loop protection.
By kexecZDI flags CVSS 9.0 race-condition RCE in Linux KSMBD
A protocol-handler mismatch between request enqueue and dequeue can leak kernel heap memory and open an out-of-bounds write path.
By oopsLinux VFS stops stuck unmounts from freezing the host
Josef Bacik’s series makes sync, drop_caches, quotas, and remounts skip or killably wait on dying superblocks instead of hanging uninterruptibly behind one bad umount.
By oopsLinux gains virtual swap so zswap works without a swapfile
Nhat Pham’s vswap layer decouples swap slots from disk, with on-demand physical fallback and cgroup accounting that only charges real backing.
By kexecAMD posts phase-1 amdgpu SVM on shared DRM GPUSVM core
A 22-patch series moves amdgpu unified memory onto the same HMM page-migration stack Xe already uses, starting with single-GPU XNACK-on.
By renderBPF verifier gains 32-bit loop analysis, ships with pointer bug
Eduard Zingerman’s scalar-evolution work cuts verification cost sharply, but 32-bit pointer latches can undercount iterations and mis-bound memory access.
By oopsKernel tool will stop CCing LKML on nearly every patch
get_maintainer will treat linux-kernel as a fallback only, aiming to cut the list’s duplicate traffic by roughly 90 percent.
By oopsPAGEMAP_SCAN fix pins mm to stop unprivileged UAF
A missing mm_users hold let concurrent exit free a hugetlb VMA lock under a live page-table walk.
By oopsLinux RFC lets hot page-cache reads skip folio refcounts
Meta reworks a Linus Torvalds idea so multi-CPU small reads stop bouncing the same folio's reference count.
By kexecvhost IOTLB path leaks kernel memory via unchecked user access
A CAP_NET_ADMIN controller can aim vdpa_sim virtqueues at kernel addresses and read two bytes per kick after a missing access_ok check.
By oopsKernel scripts/ set to shed its last Perl utilities
An RFC finishes converting all seventeen tools there to Python 3, stdlib only.
By kexecDriver core deadlock freezes probe on sysfs read since 5.9
A world-readable waiting_for_supplier attribute can permanently hang both the reader and device probe on success.
By kexecBPF proposes r3-based unwinding for Rust and C++ cleanup
Alexei Starovoitov’s series lets panics and exceptions run destructors without unwind tables, new uapi, or libbpf changes.
By oopsLinux mremap shrink-and-move leaks commit charge since 6.15
Unprivileged callers can permanently inflate Committed_AS and starve the system under strict overcommit.
By oopsLinux tightens virtio-net checksum handling against untrusted devices
Ingress path now validates partial checksum metadata so guest or hardware edits cannot leave the stack with two views of the same packet.
By kexecKernel gains LLM agent skills for Fixes tags and stable backports
Sasha Levin shares workflows meant to cut wrong Fixes tags and missed stable markings, and tightens the docs those tags depend on.
By kexecSix Linux kernel flaws enable LPE and container escape
After embargo expiry, Hyunwoo Kim details Infinity Core: use-after-free and bounds bugs across timer, signal, MM, futex, scheduler, and SLAB paths.
By tarpitKernel adds atomic mkdir-and-open via O_CREAT|O_DIRECTORY
open(2) can create a directory and return a pinning file descriptor in one step, closing a long-standing race when setting up directory trees.
By oopsKernel series cuts CPU hotplug time 21x on large Xeon systems
Patches remove obsolete cache flushes and fix quadratic scheduler and accounting work that dominated sequential online and offline on high-core x86 servers.
By kexecMGLRU gains frequency-guided promotion in v4 patch series
Kairui Song’s Multi-Gen LRU work promotes hot pages on access rather than waiting for eviction feedback, cutting I/O and reclaim pressure on many workloads.
By kexecKernel adds Clang attribute to force explicit struct init
Mandatory seq_file callbacks are the first annotated fields so missing initializers become compile-time warnings.
By kexecKernel fixes MADV_COLD race that could drop dirty THP data
Non-atomic young-bit clearing on transparent huge pages could lose concurrent writes and let reclaim discard still-dirty anonymous memory.
By oopsKernel maintainers move to drop Assisted-by AI attribution tag
Summit consensus and maintainer fatigue push the Linux project to scrap a short-lived requirement that patches disclose LLM help.
By kexecKernel series forces kobject release callbacks, fixes leaks and UAFs
A Clang attribute on struct kobj_type::release surfaces dozens of missing cleanups and closes real use-after-free and leak bugs across the tree.
By renderTorvalds posts Linux page refcount scalability series
After years of incomplete fixes for buffered read bottlenecks, Linus Torvalds mails a new approach he refined with LLM help ahead of the maintainer summit.
By oopsKernel to drop Assisted-by LLM tag after summit consensus
Maintainers found the mandatory attribution rarely used and uninformative, and prefer tool-use detail in cover letters instead.
By kexecLinux 6.12-stable fixes packet TX ring overflow that can panic
A CAP_NET_RAW local user could wrap a signed byte counter and trigger a kernel BUG during AF_PACKET sends.
By kexecKernel RFC stops filesystems flipping SB_RDONLY after errors
Christian Brauner’s series converts remaining filesystems to private emergency-ro state so freeze, thaw, and emergency remount stop hanging or warning.
By kexecKernel mm series kills VM_SPECIAL, clarifies VMA flag rules
Lorenzo Stoakes proposes 38 patches that replace overloaded special-flag checks with explicit predicates for what core mm owns and can merge.
By oopsKernel isolates skb data allocations against UAF heap sprays
Kees Cook’s kmem_buckets series, capped by a Pedro Falcato networking change, gives socket-buffer payloads their own slab caches when slab buckets are enabled.
By oopsExt4 buffered I/O moves to iomap in large opt-in series
Zhang Yi’s 31-patch v7 lands the core conversion and a new disksize-pending scheme, still off by default until more features catch up.
By kexec