Merged today for the Linux 7.1 kernel is some new documentation surrounding what qualifies as a security bug as well as around responsible use of AI for finding kernel bugs.

Stemming from the recent influx of security bugs to the Linux kernel as well as an uptick in bug and security reports from discoveries made in full or in part with AI, additional documentation was warranted. Longtime Linux developer Willy Tarreau took to authoring the additional documentation around kernel bugs.

As for what qualifies as a security bug with the Linux kernel, the

A new patch for the Linux kernel posted today by Intel has outed "Panther Lake R" as a ruggedized variant of Panther Lake intended for harsh environments.

We've seen a few mini PC listings for Panther Lake geared for rugged/industrial environments and it looks like Intel could be preparing more changes at the SoC-level for such systems. A new Linux kernel patch today introduces "Panther Lake R" as the ruggedized version of Panther Lake.

Panther Lake R is complete with a new model ID 223

Following yesterday's disclosure of the ssh-keysign-pwn vulnerability that allows unprivileged users to read root-owned files , a slew of new stable kernel releases are out today to address this latest Linux security issue.

Today's release round-up is led by the Linux 7.0.8 stable release that incorporates the patch from Linus Torvalds for ptrace as a "slightly saner" get_dumpable() logic. This patch is what gets the ssh-keysign-pwn vulnerability.

In addition to Linux

In response to the likes of the Dirty Frag and Fragnesia vulnerabilities, Rocky Linux is introducing an optional security repository for shipping important security updates sooner.

With the intent of Rocky Linux to stay in lock-step with upstream Red Hat Enterprise Linux, sometimes Rocky Linux and other RHEL-derived distros are stuck waiting on RHEL to land their fixes. When security embargoes are broken early or disclosures otherwise made before mitigations are ready, there can be an unfortunate wait for downstreams of RHEL. With the optional Rocky Linux security repository,

3mdeb announced on Thursday their release of Dasharo v0.9 for the Gigabyte MZ33-AR1 EPYC server motherboard. This is the first time seeing AMD openSIL and Coreboot available for a readily-available AMD EPYC server motherboard!

We have been longing for this milestone ever since AMD announced openSIL back in 2023 as their open-source CPU silicon initialization library to ultimately succeeded their AGESA software. While openSIL won't be reaching production status until Zen 6, the firmware consulting firm 3mdeb

For what originally began as an open-source Intel software project, Cloud Hypervisor continues seeing robust development outside the confines of Intel Corp these days with ongoing improvements driven by Microsoft, Cyberus Tech, Ant, and other organizations for this Rust-based VMM for cloud workloads.

Cloud Hypervisor 52 was released on Thursday and most notable with this release is now having confidential virtual machine support when using Linux's KVM on AMD SEV-SNP capable EPYC processors. AMD SEV-SNP confidential VMs can now be launched on KVM

Ahead of the Linux 7.1-rc4 release due out on Sunday, a variety of HID subsystem patches were merged overnight to Linux Git.

Among the HID changes now present for Linux 7.1 is adding support for newer Logitech Bluetooth keyboards to the logitech-hidpp driver. These additions enable various newer Logitech wireless keyboards to have full HID++ functionality under Linux. HID++ allows for for more advanced configuration, battery management, firmware updating, and other similar non-standardized HID functionality.

The latest

Vulkan 1.4.352 is out today as the latest minor spec update to this Khronos API. Besides just a few fixes/clarifications, there is one new extension and that is a NVIDIA vendor extension for cooperative matrix decode vector support.

VK_NV_cooperative_matrix_decode_vector is the new extension developed by NVIDIA and is for extending the decode callback added previously in VK_NV_cooperative_matrix2 to now support decoding multiple matrix elements per invocation. With most quantized weight formats