An engineer on Apple's static security tools team announced publicly that they have prototyped a tool to apply security hardening across entire C++ codebases. Ultimately their plan is to open-source and upstream this static analysis based tool into LLVM.

This new Apple tool was brought up as part of an LLVM Request For Comments (RFC) issued by Apple's Jan Korous around a scalable static analysis framework. The focus is on being able to carry out static analysis and source code rewriting across the codebases of large software

AMD this week uploaded new Family 19h CPU microcode for Zen 3 and Zen 4 processors to the linux-firmware.git repoository that in turn is pulled by the Linux distributions for offering the latest firmware/microcode to users.

AMD CPU microcode updates to linux-firmware.git typically come without any change-log or details as to the changes, but this time is different. Thanks to a README update we have a bit more context around this new Zen 3 / Zen 4 microcode update.

Earlier this year

SUSE today formally announced SUSE Linux Enterprise Server 16. Given we are in the year 2025, SUSE is heavy on hyping up AI capabilities with SLES 16.

SUSE's announcement today for SUSE Linux Enterprise 16 proclaims SLES 16 to be "the industry's first enterprise Linux that integrates agenetic AI" and "reduces operational costs and complexity through AI readiness." SUSE Linux Enterprise 16 supports the Model Context Protocol (MCP) standard and can bridge to any LLM provider.

SUSE

The upcoming Linux 6.19 kernel cycle is now expected to introduce the new "ethosu" accelerator driver for supporting the Arm Ethos U65/U85 neural processing unit IP.

Going back over two years there has been an Arm Ethos Linux driver in the works with an aim of getting into the mainline Linux kernel. Over this past summer the Arm Ethos NPU accelerator driver work picked up and now in preparing to end out the year is the driver on a trajectory for getting into the mainline kernel.

Following Canonical announcing plans to better support NVIDIA CUDA on Ubuntu Linux and make it easier to install as well as SUSE better supporting CUDA along similar lines, Red Hat today affirmed their plans to do the same. Red Hat will be making it easier to use the NVIDIA CUDA stack across RHEL, Red Hat AI, and OpenShift products.

Red Hat will be distributing the NVIDIA CUDA Toolkit directly within their platforms to streamline the developer experience, provide operational consistency to customers, and make it easier to leverage Red Hat platforms with the

TrueNAS 25.10 was released by iX systems today as the newest feature release of this Linux-based platform for network attached storage (NAS) devices and other storage appliances.

TrueNAS 25.10 introduces NVMe over Fabric "NVMe-oF" support for data access on remote NVMe arrays. TrueNAS 25.10 also offers better ZFS file-system performance and other enhancements via the upgraded OpenZFS 2.3.4.

Microsoft today released Azure Linux 3.0.20251021 as the latest update to their in-house Linux distribution.

Azure Linux 3.0.20251021 pulls in AppArmor for additional security protections, now produces Azure Marketplace images with the Linux 6.12 LTS kernel, enables various additional kernel modules/features, enables DMA Peer-To-Peer (P2P) support, and patches numerous packages for new security fixes.

"Add apparmor

The Trend Micro Zero Day Initiative has uncovered three more security vulnerabilities affecting the X.Org Server and the derived XWayland source code.

Olivier Fourdan announced publicly today the newest X.Org Server and XWayland security vulnerabilities uncovered by the Trend Micro Zero Day Initiative. In turn xorg-server 21.1.19 and XWayland 24.1.9 were released as the newest point releases for addressing these security issues.

These newest security vulnerabilities to the X.Org Server include:

CVE-2025

An improvement to Intel SGX slated for Linux 6.18 is supporting the EUPDATESVN found on Intel CPUs since the Ice Lake generation. EUPDATESVN allows for updating the security SVN version after run-time patching for addressing any Intel SGX vulnerabilities to avoid having to carry out a platform reboot.

This automatic SVN updates for Software Guard Extensions (SGX) enclaves with EUPDATESVN on Ice Lake CPUs and newer is intended to avoid having the hassles/challenges of downtime in needing to otherwise reboot the platform when needing to update the software for