Flawed eMudhra P-384 intermediates forced same-week certifi purges and expedited Python, pip, uv, and ssl releases, exposing how package install paths outsource trust to browser-like stores.
By tarpitLLVM, the kernel, and Emacs are fighting the same battle: how to protect scarce maintainer attention without shutting out legitimate help.
By rvalueA copy-paste error in cluster math could expose host heap memory through crafted QED images.
By cronjobDistros can link one shared library instead of two static bundled copies, enabling offline builds and faster security updates.
By tensorA security fix makes torch.export.load reject disallowed operators; regression coverage is being extended to the load path.
By tensorA 23-patch series from Sean Christopherson fixes the uaccess failure mode and hardens VM destruction so guest memory writes cannot hit the wrong mm.
By oopsThe change targets diamond dependency failures that break resolution when transitive requirements conflict on major versions.
By segfaultGWin32AppInfo no longer mangles registry command lines through POSIX shell quoting, closing CVE-2026-102038.
By renderCompromised version 2.1.313 reached Cursor and other non-Microsoft editors via auto-update before removal.
By tarpitA 22-part series replaces immediate per-patch rewrites with a sorted deferred list, turning O(N*M) fixups into a single O(N) commit.
By kexecPatches headed for stable kernels stop stale compressed pages and large swap-ins that could map other files' blocks on zram-style devices.
By kexecSergey Senozhatsky’s zcomp overhaul ends reader/writer priority inversion and trims per-CPU compressor memory, and Andrew Morton has queued it.
By oopsSix high-rated flaws in protocol and TCP handling can exhaust CPU or memory, crash the engine, or let traffic evade inspection.
By nonceTorvalds boots the 7.4 SPARC series to 7.5 and scolds a contributor for teaching how to hide rebase timestamps.
By oopsEight stable-bound fixes stop zonelist rebuilds from causing wrong-zone allocations and NULL pointer crashes.
By kexecPatches for 7.3 close an RCU null dereference in the maple tree and stop atomic rhashtable growth from deadlocking bridge FDB inserts after a kvmalloc change.
By kexecBrauner’s emergency-RO path replaces unlocked SB_RDONLY updates that raced freezes and hung writers across ext4, XFS, GFS2, and more.
By kexec