Tag
José Marchesi and the GCC-BPF team provided an update on BPF support in GCC 16, highlighting progress toward feature parity with LLVM and increasing pass rate of the kernel's BPF self-tests.
A proposal for an 'Autonomy Kernel' layer that separates authority from agent reasoning, allowing scoped, revocable permissions and auditing, analogous to an operating system kernel.
The article introduces Linux restartable sequences (rseq), a kernel feature that enables thread-safe data structures without locks or atomics, achieving dramatic performance improvements on many-core CPUs. It provides a tutorial and demonstrates up to 43x speedup on a 96-core AMD Threadripper.
AI tools are accelerating the discovery and public disclosure of Linux kernel bugs, creating a worrisome trend of frequent privilege-escalation vulnerabilities that may require weekly server reboots. Linus Torvalds has changed how the Linux security community handles AI-discovered bugs, treating them as public by default.
New articles in the GPU Glossary cover CuTe DSL, CUTLASS, and CuTe – tools for writing high-performance GPU kernels on data center GPUs, with examples in Python.
Apple released security updates for macOS Tahoe 26.5 addressing multiple vulnerabilities including kernel bugs, denial-of-service, and sandbox escapes. The update includes fixes for CVEs discovered by various researchers, one of which (CVE-2026-28952) was reportedly found by Claude AI.
A three-person team with AI assistance bypassed Apple's Memory Integrity Enforcement (MIE) in five days using two bugs and a clever idea, demonstrating a significant vulnerability in Apple's hardware-based kernel memory safety stack.
A kernel stack buffer overflow in FreeBSD 14.x's setcred(2) system call allows any unprivileged local user to escalate privileges to root, even with SMAP/SMEP enabled. The bug is not yet fixed in stable branches.
This paper introduces Exact Linear Attention (ELA), a mechanism that achieves linear computational complexity for Transformer attention without approximation error by leveraging kernel decomposition, and addresses gradient explosion and token dilution through constrained kernel functions. It also presents engineering innovations including Hyper Link, Memory Lobe, and a routing bias for Mixture of Experts.
The author debugs a segfault encountered during kernel installation, tracing it to the 'hardlink' command invoked by dracut, and uses gdb to investigate the crash.
A detailed explanation of the TTY subsystem in Linux and UNIX, covering its history from teletypes to modern emulated terminals, and the role of line disciplines.
Copy Fail is a new Linux local privilege escalation vulnerability that exploits a kernel memory corruption flaw to rewrite the page cache, enabling cross-container attacks and container escape.
Gentoo Linux reports on the Copy Fail, Dirty Frag, and Fragnesia kernel vulnerabilities, noting that they have patched supported kernels and advising users to upgrade.
A deep dive into the architecture of BrowserPod, an in-browser sandbox with a WebAssembly-native kernel that runs Linux-compatible applications entirely client-side. The post covers the kernel's design, disk and networking subsystems, and its ability to run tools like Claude Code in the browser.
Linus Torvalds says that AI-generated bug reports are flooding the Linux security mailing list with duplicates and useless submissions, making it unmanageable. He urges reporters to provide patches or validated findings instead of raw AI output, a view echoed by GitHub's security engineer.
Linus Torvalds has declared the Linux security mailing list 'almost entirely unmanageable' due to an overwhelming number of duplicate AI-generated bug reports, calling the churn 'pointless work.'
Releases a kernel on Hugging Face that accelerates MaxSim late-interaction retrieval by using tiled scoring with SIMD group matrix operations (Metal and WMMA), achieving 3–5× speedup over the naive implementation.
Introduces DualKV, a FlashAttention kernel variant that eliminates redundant prompt token computation in RL post-training (GRPO/DAPO), achieving up to 3.82x speedup on 30B MoE models.
CVE-2026-40369 describes a vulnerability in Windows kernel's NtQuerySystemInformation function that allows arbitrary kernel address increment, enabling privilege escalation from unprivileged processes including Chrome sandbox. The exploit is deterministic on Windows 11 24H2-25H2.
Google Project Zero published a zero-click exploit chain for the Pixel 10, leveraging a Dolby vulnerability and a new VPU driver flaw to achieve root access on Android.