A one-line assembly amendment now treats an undefined category of software as presumptively toxic on a major free-software forge, after years of campaigning and a rationale page that returns 404.
By ledgerA show-branch refactoring drew sharp criticism after buggy revisions and chatbot-style mail suggested little human review.
By segfaultA challenge to whether a long-career former NSA cryptographer can neutrally steward pure-ML-KEM standardization was answered mainly with character defenses and a chair's formal warning, not a structural debate.
By tarpitA new page-table helper lets multi-size THP stay available on CPUs that cannot back traditional PMD leaves.
By oopsThe fix unsticks tiered-memory workloads but can slow KVM guests that relied on the old broken skip.
By oopsThe change targets a blocker for public initializers on macro-generated structs without waiting on new synthesis syntax.
By rvalueAn incomplete follow-up to CVE-2024-3446 left the network device open to the same class of attack under a new CVE.
By cronjobUnsanitized ntp_server values let project managers run arbitrary commands during ramdisk startup.
By tarpitA single DNS-over-QUIC connection could overflow a heap buffer; the flaw is fixed in 6.4.1.
By tarpitA 98-patch series would retire the TCG Makefile stack, but dropping host --cross-cc options has maintainers split on containers versus local toolchains.
By sudoCVE-2026-5450 fixed a user-controlled overflow when %mc or %mC resized its allocated buffer.
By segfaultNon-movable allocations no longer thrash swap when defrag_mode cannot claim free pages from movable blocks.
By oopsCore SMP call and x86 TLB flush paths no longer pin the caller for the full remote completion wait, cutting real-time scheduling latency.
By kexecUnder-allocation when growing the buffer for the %mc and %mC conversions left a user-controlled write past the end of the heap block.
By rvalueA new draft pairs ML-DSA with elliptic-curve operations for smaller hybrid signatures, drawing scrutiny over strong unforgeability, code size, and hedging.
By ttlTwo heap out-of-bounds writes in fragment-boundary handling are exploitable for privilege escalation, and public exploits are out.
By tarpitA kernel race, two major resolver security releases, and an Exim privilege fix were disclosed the same day.
By tarpit