The Curious Engineer

All blogs / Linux / Unix

freenode news

freenode.net

News from the places where open source, open standards and cryptocurrency development actually happen.

Linux / UnixOS / kernelSecurityRust

’26
Posts
154 from 10 Oct 2026 to 7 Nov 2026
Posting
about daily (154 in the last year)
Kind
magazine
Feed
https://freenode.net/feed.xml

2026 154

  1. Nixpkgs CUDA team fractures over funding and scope
  2. Squashfs maintainer closes overflows and crafted-image exploits
  3. KVM RFC extends guest_memfd with VFIO and alternate memory providers
  4. BPF verifier scopes callback args to close kernel stack escapes
  5. BPF series auto-discovers fmod_ret targets via LLVM IR scan
  6. Stop calling ProVerif and Tamarin provers, paper urges
  7. InfiniteWP Client NOSSL key yields only 31 bits of secret
  8. Kernel stops host panic on bad virtio UDP tunnel GSO frames
  9. PyTorch adds CUDA kernels for histogram and histogramdd
  10. Go 1.27.4 and 1.26.11 security releases set for November 10
  11. OpenSSH 10.6p2 works around musl password authentication bypass
  12. zlib 1.4 fixes buffer overflows and minizip path bugs
  13. Emacs holds LLM Hunspell port over maintenance and GPL doubts
  14. Linux driver core gains proposed device trust levels for confidential computing
  15. llama.cpp graph opts boost Gemma 4 prompt processing
  16. Kernel patches propose tighter caps for unprivileged user namespaces
  17. Kernel series peels stop_machine off CPU teardown for RT and nohz_full
  18. None-aware operators reopen Python’s syntax and teachability fights
  19. Kernel RFC introduces cells as single hardened container objects
  20. BPF series proposes user-memory mmap and copy kfuncs
  21. PostgreSQL hackers brace for 1,000-plus AI-found bugs
  22. DMA-buf gains mapping types beyond scatterlists
  23. BPF verifier adopts call graphs, lifts frame limit to 32
  24. Debian patches apt RCE that let MITM swap verified packages
  25. LLVM proposes two-PR limit for non-committers
  26. PostgreSQL 19 JSON_ARRAY indexes can go stale after type changes
  27. Qualcomm UBWC layout documented; msm stops undersized buffers
  28. Stable-bound /proc fixes close UAF, hangs, and readdir races
  29. Kernel build series cuts allmodconfig times by up to 36%
  30. Practical attack breaks RLCE 128-bit PQC parameters
  31. SCHED_DEADLINE fixes stop crashes and bandwidth leaks
  32. Staging rtl8723bs Wi-Fi driver fix targets heap key overflow
  33. A compromised CA turns Python's install path into an emergency
  34. PyTorch hub cache race fix draws review pushback
  35. Rails 8.0.5.2 and 8.1.4.1 fix 21 flaws including RCE
  36. PyTorch CUDA auto-detect drops Blackwell accelerated arch flags
  37. BPF verifier gains precision, loop counting, and higher limits
  38. Linux fixes zswap stale-data corruption and swap-in PSI bugs
  39. Xen grant-copy flaws give guests arbitrary memory access; ZooKeeper patches SASL bypass and fatal snapshot recursion
  40. Open source draws hard lines on AI text and AI tooling
  41. Overlayfs security fixes land; Linus rewrites VFS name helper
  42. Haskell Foundation admits due diligence failure on Anduril board seat
  43. Emacs group vows fork if project accepts LLM-generated code
  44. Isolcpus FIFO spinners freeze systemd during page migration
  45. Kernel coverage gets one framework, Clang MC/DC support
  46. Kernel drops PSP and kTLS offload packets that would leave cleartext
  47. F2FS gains sub-page block support for 16KB Android kernels
  48. Linux caps IP fragment truesize to stop unprivileged socket UAF
  49. Git describe miscounted distance when commit dates were skewed
  50. DRM gains atomic LUMINANCE property for panel brightness
  51. Kernel RFC moves procfs to kernfs-style I/O buffering
  52. PyTorch proposes BufferDict for registered buffer collections
  53. Python asyncio may run scheduled callbacks eagerly for 25-35% gains
  54. Who pays for the AI patch flood
  55. Kernel page-table helpers drop useless loads on folded levels
  56. Linus fixes Kconfig hash misuse that slowed make oldconfig
  57. Linux MM adds THP co-maintainer, shifts more work off Morton's tree
  58. Review bandwidth, not model quality, drives the AI contribution backlash
  59. llama.cpp tries bitmaps for faster sparse KV cell lists
  60. ARRIS SURFboard W6B has unauthenticated root backdoor
  61. Ubuntu LTS kernels still unfixed for critical CVE-2026-98432
  62. UCSI retry floods boot logs after USB merge for 7.4-rc1
  63. PyTorch adds system oneDNN option for CPU and XPU
  64. PyTorch locks down export load against unsafe operator names
  65. KVM nested VMX teardown can corrupt unrelated process memory
  66. QEMU fixes QED heap leak to guests (CVE-2026-118594)
  67. glibc gettext allows directory traversal via LANGUAGE
  68. When intermediate CAs fail, language stacks discover they own the blast radius
  69. BPF series adds sleepable kfuncs to map and write user memory
  70. SwiftPM pitch would allow multiple major package versions
  71. GLib plugs Windows app-launch argument injection flaw
  72. Projects draw hard lines as AI contributions eat reviewer time
  73. Claude Code VS Code extension on Open VSX drops RAT
  74. BPF verifier defers instruction patches to cut large-program load times
  75. Linux swap fixes close zswap corruption and cross-user data leak
  76. zram redesign splits read/write streams, cuts latency and RAM
  77. Suricata 8.0.8 fixes high-severity DoS and detection bypasses
  78. Linus rejects late SPARC pull, rebukes rebase date tricks
  79. Kernel series plugs allocator races with memory hotplug
  80. Kernel lib fixes target maple-tree crash and rhashtable deadlock
  81. Kernel stops filesystems flipping read-only behind the VFS
  82. OpenStack keystonemiddleware bypasses access_rules via service token
  83. Kernel RFC fixes inode reclaim hang on ext2, FAT and kin
  84. Swift pitch adds single-yield functions beyond accessors
  85. DRM adds atomic state readout for firmware-lit displays
  86. Kernel series forces kobject release callbacks, plugs UAFs
  87. glibc adds system-wide loader hardening tunables
  88. Apache Kafka patches JWT bypass, secret reads, and pre-auth memory DoS
  89. Canonical restarts Ubuntu Core Desktop with dedicated team
  90. EDK II PXE flaw enables pre-boot remote code execution
  91. llama.cpp skips draft probability floor for faster MTP and DFlash2
  92. Swift pitch: send and @oneway for fire-and-forget actor calls
  93. PyTorch prototypes AOTI registration for DSL kernels via TVM-FFI
  94. BPF verifier fix stops bogus packet reads after loop widening
  95. Linux RFC proposes common attestation API and TDX provider
  96. No shared playbook: FOSS projects diverge on policing AI patches and prose
  97. Linus rejects media Kconfig change exposing chip driver prompts
  98. Debian developers balk at unannounced LLM reviews in NEW queue
  99. Landlock gains separate rights for file metadata access
  100. Race found in Linux HugeTLB vmemmap optimization path
  101. Git aims to stop fetching every branch in shallow clones
  102. Kernel mmb warning exposes ext4 xattr and FAT buffer bugs
  103. Kernel mm series piles on userfaultfd, MGLRU and memfd fixes
  104. Rust SPDM requester proposed for Linux device authentication
  105. llama.cpp auto thread count now prefers physical cores
  106. Godot 4.x runs attacker GDScript from crafted .po translations
  107. Kernel fix stops /proc maps from skipping live VMAs under load
  108. Two-decade IPv6 MTU bug can panic Linux with one sendmsg
  109. DMA-buf gains mapping types beyond scatterlist
  110. tmpfs fixes close F_SEAL_EXEC bypass and truncation hangs
  111. Linux proxy execution series adds sleeping-owner handling
  112. Python issues expedited releases blocking compromised eMudhra CA keys
  113. BPF verifier rewrite targets Rust with recursion and open loops
  114. Node.js patches Brotli RCE that spreads far past the runtime
  115. Rocq and Lean 4 kernel bugs let checked proofs of False through
  116. All releases →
  117. Lean formalization of Julia Base surfaces hundreds of bugs
  118. QEMU fixes eight OOB and overflow bugs in device emulation
  119. When one CA's weak P-384 keys force everyone else to purge trust
  120. BPF maintainer NACKs page_owner iterator series as overkill
  121. Kernel hardens virtio-net against rogue checksum offload metadata
  122. Rust VFIO PCI abstractions land with NVIDIA vGPU driver
  123. QEMU ties QOM properties to QAPI types for management tools
  124. Git eyes faster connectivity checks for large repos
  125. Systemd eBPF tools force per-kernel packaging on NixOS
  126. Linux hardens virtio-net checksum offload against rogue metadata
  127. Stallman bars LLM-generated code from NonGNU ELPA
  128. Kernel patch series stops uprobes from stalling every fork()
  129. PostgreSQL 19 promotion can hang on stuck client writes
  130. Debian questions copyright of LLM-built Northstar browser
  131. BPF unwinding lets Rust and C++ keep their destructors
  132. Git moves toward formal votes on AI contributions after summit
  133. Linux bridge MST bypasses blocking without VLAN filtering
  134. PyTorch Dynamo guard paths race into use-after-free
  135. QPACK bugs let attackers OOM many HTTP/3 servers
  136. Swift opens review of Cell and Volatile interior mutability types
  137. Fixed moduli keep lattice PQC simple across security levels
  138. ZDI flags CVSS 9.0 race-condition RCE in Linux KSMBD
  139. Apache Pulsar patches 14 CVEs, including critical auth bypass
  140. PHP patches critical RCE via stale global request state
  141. Linux VFS stops stuck unmounts from freezing the host
  142. PostgreSQL moves toward custom storage options for table access methods
  143. PHP patches critical unauthenticated RCE in 8.2 through 8.5
  144. Virtual swap collides with what memory.swap has always meant
  145. CPython supported-JIT PEP 836 withdrawn over bandwidth
  146. Fedora distrusts eMudhra CAs after trivial private keys leak
  147. PyTorch RFC proposes opt-in mmap for distributed checkpoint loads
  148. AMD posts phase-1 amdgpu SVM on shared DRM GPUSVM core
  149. Hugging Face seeks MXFP4 backward kernels for GPT-OSS training
  150. NTP group moves to drop leap seconds from NTPv5 draft
  151. Netherlands builds sovereign government desktop on NixOS
  152. PyTorch from_file builds oversized tensors after byte-count overflow
  153. Early attestation bugs crack Cocos AI and Contrast TLS claims
  154. IETF last call rejects mandatory ops sections in RFCs