Tag
Ubuntu has yet to ship patched LTS kernels for critical CVE-2026-98432, a CVSS 9.8-rated Linux kernel RCE, leaving 22.04, 24.04, and 26.04 users exposed for nearly three weeks with no announced ETA for fixes.
Daniel Lockyer highlights a remarkably short fix for a critical CVSS 9.8 Linux kernel vulnerability, linking to further details.
Work on GEFS (Good Enough File System) for OpenBSD continues to progress, with Ori Bernstein posting updates on error handling, ported bugfixes, userspace tools, and remaining consistency protocol challenges to the openbsd-tech list.
A detailed write-up demonstrating how NixOS 26.05 can be tuned to idle at just 96MB RAM and complete full rebuilds within 512MB, using kernel cmdline flags, module blacklisting, and disabling unused hardware support for KVM guests.
博客文章讨论计算中读写操作的不对称性，解释缓冲 I/O、块设备对齐以及错误处理如何打破 read/write 系统调用表面的对称性。
Moxnox 1.0 is an NT-like, POSIX-compatible hobby operating system that runs on btrfs, is written in ~130,000 lines of C++, supports amd64 and aarch64, and is capable of self-hosting.
A Lobsters user shares their experiment using LLMs to generate a toy operating system kernel in Rust, manually refactoring the generated code to build understanding, and successfully boots it from a USB drive on their laptop.
A developer shares what they learned building their own container runtime, explaining that containers are just restricted Linux processes built on namespaces, cgroups, and networking, that images are just folders used with chroot/pivot_root, and why Go's threading and lack of fork make runc's design awkward.
OpenBSD 8.0, the 61st OpenBSD release, was announced on October 20, 2026 with platform improvements for amd64, arm64, riscv64 and sparc64, including larger kernel virtual address space, hibernate support, RISC-V vector/Advanced Interrupt Architecture support, and a switch to the LLVM toolchain on sparc64.
OpenBSD 8.0 将引入来自 Linux 6.18 的 inteldrm/radeondrm/amdgpu 图形驱动（含 Intel Arc A 系列支持），并将 Clang/LLVM 22 设为基础编译器，同时带来 vmm/vmd 64 VCPU 客户机、新 WiFi 驱动与 httpd 新特性等多项更新。
Linus Torvalds 于本周日正式发布了 Linux 7.3 内核，创下多项纪录：共合入 18,765 个非合并提交，来自 3,021 位开发者，其中 807 位为首次贡献。该版本包含 binfmt_misc 扩展、组调度优化、新 failfs 文件系统、fchroot() 系统调用以及 sched_ext 子调度器完成等重大变更。
Lean v4.35.0 now ships with multiple verified kernels, including con-leche (the first Lean-written kernel with a formal consistency proof, implemented by Claude) and its Rust-refined counterpart con-ron, plus a new `lake check` command for rechecking developments externally. The move follows AI-discovered kernel soundness bugs and aims to eliminate implementation-level unsoundness without performance penalties.
作者在为 AArch64 从零编写自制操作系统 floss 时，深入分析了 ldaxr/stxr 独占内存访问在 QEMU 上正常、却在真实硬件上触发异常的问题，探讨了自旋锁、异常处理、虚拟内存、内存类型与缓存属性之间的复杂交互。
A deep-dive technical article explaining how the Windows kernel I/O Manager initializes read I/O requests, from resolving the target file object via NtReadFile to choosing the request path and dispatching to drivers.
作者用 Embedded Swift 编写了一个极简内核并在 QEMU 的 aarch64 virt 机器上运行，记录了从工具链安装、Package.swift 配置到汇编入口与栈初始化的完整过程，并更新了 Swift 6.3 中新的 @c 属性替代 @_cdecl 的用法。
A deep-dive investigation shows that Go's stop-the-world GC pauses can balloon to ~40ms when GC metadata pages are evicted to swap, with page faults during GC bookkeeping accounting for most of the delay (39 of 40ms across 228 faults).
FTL is a new open-source operating system for clouds that lets you build a userspace OS as a shared library, providing stronger container isolation via a minimal FTL kernel while remaining compatible with Linux binaries and unikernel-like apps. Recent releases include v0.0.1 (running a Linux HTTP server) and v0.1.0 (async Rust app support), with a roadmap covering filesystems, Node.js/Go, SMP, and Arm.
GrapheneOS has resolved the significant kernel performance regression introduced in the Android 17 QPR1 update, restoring expected performance for users of the privacy-focused custom ROM.
A detailed technical writeup on bringing up mainline Linux on the M4 Mac mini, overcoming the newly mandatory SPTM (Secure Page Table Monitor) that broke existing m1n1 hypervisor-based workflows, and getting the SoC booting far enough for serial console debugging. The author credits the Asahi Linux team and documents locked GXF/RVBAR registers and early Linux boot progress.
Raymond Chen explains why Windows hot-patching exists for x86-32, x86-64, 64-bit ARM, and Itanium but not for older or other architectures like 32-bit ARM, MIPS, Alpha AXP, PowerPC, and SH-3: most predated the hot-patching rules, while 32-bit ARM was excluded because hot-patching is a Windows Server feature and no Server version existed for that architecture.