Join Mimi Zohar, Senior Technical Staff Member at IBM, TOMORROW at 9:00am PT for an interactive, complimentary Maintainer Session exploring: “My Life as a Linux Kernel Developer and Maintainer”. Learn more & register: #OpenSource# #Linux# #LinuxKernel# #LinuxMaintainer# #LinuxKernelDeveloper#

Join Mike Rapoport, Software Engineer at Microsoft, on Tuesday, November 3 at 9:00am PT for an interactive, complimentary Maintainer Session exploring: “My Life as a Linux Kernel Developer and Maintainer”. Learn more & register: #OpenSource# #Linux# #LinuxKernel# #LinuxMaintainer# #LinuxKernelDeveloper#

Got Linux appliances online? Attackers turned web shells into root on 25 of them and reached a US government network. The bug: CVE-2026-46300 in the Linux kernel (Fragnesia), now on CISA's exploited list. Check /etc/pam.d/su before rebooting, then patch.

Announcing linux-7.1-ck1. The -ck patchset aims to improve desktop/laptop responsiveness and interactivity mostly by replacing the CPU scheduler en-bloc with my MultiQueue Skiplist Scheduler. It's been 10 long years since the last -ck patchset. I wasn't planning on ever updating it because of the amount of time involved to resync with each new kernel version. However, I'd missed its improvements, and Claude AI has made it a fraction of the workload it used to be. So, here is the first updated patchset which is mostly just a resync of the old patches for the latest linux kernel. The only new changes are MuQSS now uses P/E core aware idle balancing. Only lightly tested and may not build on other configs, so use usual precautions.

Several unfixed Linux kernel vulnerabilities were accidentally disclosed on a public mailing list, including two rated CVSS 9.0. Some of the bugs could potentially allow remote code execution or privilege escalation. Patches are already being worked on, but some are still in testing. If you’re using SteamOS or another Linux distro, check for updates.

Linus Torvalds says the Linux kernel security mailing list is now almost impossible to manage due to a large number of bug reports from AI tools. In his latest update for Linux 7.1-rc4, he explained that the continued flood of AI reports has made the security list almost entirely unmanageable, with enormous duplication as different people find the same issues using the same tools. Maintainers spend a lot of time dealing with the same problems repeatedly and often reply that they were already fixed weeks ago. The security list is for private and important security problems, but AI reports are not secret and create too much extra work. Linus says AI tools are great but only if they actually help rather than cause unnecessary pain and pointless make-work.