Made public earlier today is Zapscape as a guest-to-host escape vulnerability affecting the Linux KVM x86 code for the past six years. This 2020 kernel change to KVM x86 can also be used as a local privilege escalation (LPE) exploit too where /dev/kvm is world-writable on some Linux distributions like RHEL.

Zapscape is a KVM escape vulnerability for KVM x86/x86_64 guests to escape to the host and run commands on the

Back during the Linux 7.2 merge window the Btrfs file-system dropped its COW fixup mechanism, which was used to detect dirty pages without an ordered extent. This code was removed as it was believed the kernel's memory management layer had solved the underlying conditions but in reality it ended up leading to silent data loss. That Btrfs fixup worker infrastructure is now restored in time for Linux 7.2-rc7 this weekend and the stable v7.2 kernel later this month.

SUSE's David

While the Linux WiFi/wireless maintainer just announced taking a stand against AI/LLM generated slop patches with a new "three second review" rule, the broader Linux networking subsystem continues to be bombarded with AI-generated patches.

Jakub Kicinski sent out this week's set of networking patches ahead of the Linux 7.2-rc7 kernel test release on Sunday. In prior weeks he's called out the increase of AI-generated patches and "the new normal" with some weeks seeing double the count

As the first new release since IceWM 4.0 released back on New Year's Day for this X11 window manager, IceWM 4.1 is now available.

IceWM 4.1 brings a handful of bug fixes plus a new "ignoreUserTime" window option and a "mouse move" command for icesh. There are also some translation updates.

Made public minutes ago is the Safe RET Interrupt Vulnerability which is now patched in the newest Linux kernel Git code. The Safe RET Interrupt Vulnerability stems from improper handling within Linux's Speculative Return Stack Overflow ( SRSO ) mitigation affecting AMD Zen 1 through Zen 4 processors.

The Safe RET Interrupt Vulnerability comes down to a shortcoming in Linux's implementation of its mitigation for SRSO. As such the same AMD Zen 1 through Zen 4 processors are effected. The Safe RET Interrupt Vulnerability could lead to the SRSO mitigation being weakened

A set of patches providing fixes for the Apple Silicon NVMe driver for the Linux kernel were sent out today due to new issues cropping up when running newer Apple firmware. Firmware shipped by macOS 15+ is causing issues with the current Apple NVMe open-source Linux driver developed by the Asahi Linux crew.

Since macOS 15 there is new firmware shipping for the NVMe controllers used on Apple M series SoCs. The newer firmware is more strict than earlier releases but also needed as a prerequisite for Apple M4 support on

For nearly the past decade has been the kernel lockdown mode for tightening up kernel access from user-space such as when UEFI Secure Boot is enabled. The kernel lockdown mode restricts PCI BAR access, no writing to /dev/mem , and other restrictions so user-space can't can't modify the running kernel or access sensitive kernel memory . An oversight has allowed legacy I/O and memory interfaces via sysfs to remain open in lockdown mode, but a fix is on the way.

Back in 2

In addition to the Linux kernel staging area now rejecting AI/LLM-generated patches except for real security fixes, the Linux wireless networking code is also seeing some shifts around how it will deal with AI/LLM generated patches.

Johannes Berg who serves as maintainer of the Linux kernel's 802.11, mac80211, WWAN, rfkill, and wireless networking drivers (among other kernel code), has announced a shift in how he will be viewing patches generated by AI/