ksmbd ACL packing fixed to block malformed DACLs and OOB reads
Authenticated clients could force undersized ACL headers or heap out-of-bounds reads via crafted security descriptors.
By oopsKernel & Low-Level
AF_XDP TX metadata hardened against OOB reads and races
Stanislav Fomichev posts fixes after a Microsoft report of KASAN out-of-bounds reads and TOCTOU flaws in shared TX metadata.
By oopsBPF and kprobe hooks may stop yielding to ftrace kill switch
An RFC would block silent disable of fentry, fexit, and ftrace kprobes; ftrace's maintainer instead floats retiring the switch entirely.
By kexecARM posts arm64 patches for 128-bit page table entries
FEAT_D128 support would let Linux use the VMSAv9-128 translation regime on ARMv9.3 hardware.
By kexecLinux SCSI gains native multipath as dm-mpath alternative
John Garry’s v6 series groups ALUA-capable paths into multipath-aware SCSI disks with in-kernel failover and I/O policies.
By kexecLinux patchset unites proxy execution with sched_ext
Distributions can ship one kernel with both features and let BPF schedulers opt in at runtime.
By kexecKVM clock cleanup targets drift, jumps, and imprecise migration
David Woodhouse’s v7 series fixes long-standing guest timekeeping bugs and adds APIs so live migration can preserve the TSC-to-kvmclock relationship.
By oopsLinux mm patchset unifies hot-page promotion for tiered memory
AMD's pghot v8 consolidates access tracking from hint faults and hardware samplers, then drives batched promotions via per-node kernel threads.
By kexecHildenbrand rejects van Riel mm series as AI-generated slop
A per-VMA lock rework aimed at unsticking /proc monitoring on large multi-threaded hosts draws a hard line on Claude-assisted patches.
By oopsDMAengine moves client completions off private tasklets
A 64-patch series centralizes per-channel bottom-half handling on a shared WQ_BH workqueue across virt-dma and more than a dozen drivers.
By oopsLinux SCSI gains native multipath as dm-mpath alternative
John Garry's v5 series folds multipath block devices into the SCSI core, driven by ALUA path state and unique VPD identities.
By oopsext4 moves to drop inline data writes for regular files
An RFC series would deprecate the feature after years of bugs, syzbot hits, and at least eight CVEs, while keeping it for directories.
By kexecCAN BCM timer UAF patch rejected as already fixed
A reported RCU race in AF_CAN receive-op deletion was NAKed after the maintainer said mainline already closed it.
By kexecsched_ext and proxy execution no longer mutually exclusive
BPF schedulers can opt into handling mutex-blocked donors so one kernel can ship both features.
By kexecSeccomp gains non-cooperative pin redirect to close TOCTOU
A kernel series lets sandbox supervisors feed immutable syscall arguments into uncooperative targets without a trusted setup window.
By oopsKernel roundup: ptdump use-after-free fix, taskstats cpumask bug, RISC-V IOMMU MSI, and QCE removal fight
A memory-safety race in page-table dumping leads the week’s traffic, alongside a long-lived taskstats truncation, RISC-V IOMMU progress, and a push to delete a BROKEN Qualcomm crypto driver.
By kexecKernel VLAN fix stops skb panics when toggling HW offload
Dynamic hard_header_len updates raced with lockless TX paths; macvlan-on-VLAN shows a related headroom gap.
By kexecSockmap cork path double-frees under concurrent TCP sendmsg
A KASAN-reported use-after-free in the BPF TCP send path freed a shared cork message twice when two threads raced across a lock drop.
By kexecKernel keeps mTHP on when PMD-sized huge pages are missing
A new page-table helper lets multi-size THP stay available on CPUs that cannot back traditional PMD leaves.
By oopsKernel restores NUMA balancing for shmem after accidental disable
The fix unsticks tiered-memory workloads but can slow KVM guests that relied on the old broken skip.
By oopsKernel fix stops reclaim storms under vm.defrag_mode
Non-movable allocations no longer thrash swap when defrag_mode cannot claim free pages from movable blocks.
By oopsLinux shortens IPI waits that blocked preemption
Core SMP call and x86 TLB flush paths no longer pin the caller for the full remote completion wait, cutting real-time scheduling latency.
By kexecKernel maintainers require Assisted-by tags for AI rubber-duck reviews
Greg Kroah-Hartman and Jonathan Corbet say even non-generative AI code review of the xillybus driver must be credited.
By kexecLinux mm series proposes private NUMA nodes, isolated by default
Gregory Price's v5 patchset flips device-backed memory from fully fungible to opt-in kernel services.
By kexecBtrfs folio lock leak hangs KVM guests on file-backed RAM
Large data folios dirtied via GUP without subpage bits leave writeback holding a lock forever, stalling guests and host flushers.
By kexecStable kernels get BPF verifier fix for ld_abs/ind in subprogs
CVE-2026-53090 addressed incomplete failure-path analysis that could let unsafe programs pass verification.
By kexecStable kernel blocks IV race in userspace skcipher sockets
An unprivileged local attacker could overwrite an in-flight IV and reuse keystream on concurrent cipher operations.
By kexecKernel gains fwnode PCS API as external serdes become common
Christian Marangi’s net-next series gives phylink a proper producer-consumer model for Physical Coding Sublayer devices, with Airoha AN7581 as the first in-tree user.
By kexecRFC proposes in-kernel AMD GPU offload for XDP and IPsec
knod would JIT-compile packet programs on the GPU from the kernel, with no CUDA or ROCm in the data path.
By kexec