RepoJournal
Arch Linux @archlinux
115 wires and counting

$ follow Arch Linux

Keep up with Arch Linux in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-08
stories 57
GitHub RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

configfs rmdir race fixed, Arch kernel v7.2.4-arch1 ships

By RepoJournal · Filed · About Arch Linux

George Rawlinson Linus Torvalds Vasileios Almpanis Andreas Radke heftig Caleb Maclennan Sven-Hendrik Haase
7 people shipped this
George Rawlinson @grawlinson 3 cited Linus Torvalds @torvalds 2 cited Vasileios Almpanis @vasilisalmpanis 2 cited Andreas Radke @andyrtr 1 cited heftig @heftig 1 cited Caleb Maclennan @alerque Sven-Hendrik Haase @svenstaro

Arch Linux released kernel v7.2.4-arch1 with a new sysctl to disable unprivileged user namespaces, while upstream configfs fixes close a symlink race that could read freed memory.

Arch Linux published kernel v7.2.4-arch1, to be applied on top of stable v7.2.4 [1]. It adds a sysctl to allow disabling unprivileged CLONE_NEWUSER, giving sysadmins a direct switch to restrict user namespace creation without patching or container runtime changes.

Upstream merged two configfs fixes targeting a use-after-free race [2][3]. A symlink racing with rmdir of its target could follow a freed dentry pointer; the fix unhashes the dentry before dropping the item in rmdir and pins the target's configfs_dirent instead of chasing ->ci_dentry [4]. Vasileios Almpanis explains that "the dentry is pinned by DCACHE_PERSISTENT, which configfs_remove_dir() releases via simple_rmdir() while the item is still alive" [3]. Stacked on the merge [4], this closes the window where get_target() could dereference freed memory.

Separately, perf tools received two fixes for v7.3: Intel PT decoding no longer uses separate debug files, and the PowerPC VPA DTL samples now report the correct raw data size [5]. And Arch dropped tp_smapi-lts from extra-x86_64 [6], while certbot-dns-route53, certbot-dns-rfc2136, and certbot-dns-ovh moved from extra-testing to extra [7][8][9].

Action items

References

  1. [1] Arch Linux kernel v7.2.4-arch1 ↗ archlinux/linux
  2. [2] configfs: unhash the dentry before dropping the item in rmdir ↗ archlinux/linux
  3. [3] configfs: pin the symlink target's dirent instead of chasing ->ci_dentry ↗ archlinux/linux
  4. [4] Merge tag 'configfs-7.3-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/leitao/linux ↗ archlinux/linux
  5. [5] Merge tag 'perf-tools-fixes-for-v7.3-2026-09-07' of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools ↗ archlinux/linux
  6. [6] remove tp_smapi-lts from extra-x86_64 ↗ archlinux/state
  7. [7] move certbot-dns-route53 from extra-testing-any to extra-any ↗ archlinux/state
  8. [8] move certbot-dns-rfc2136 from extra-testing-any to extra-any ↗ archlinux/state
  9. [9] move certbot-dns-ovh from extra-testing-any to extra-any ↗ archlinux/state

$ ls archlinux/reviews/ # the step-back reads

the week in review Arch kernel 7.2.3 ships with userns sysctl the month in review August's Arch: AUR hardening, kernel churn, and steady package flow
Topics: Infrastructure Full archive →

Quick answers

What shipped in Arch Linux on September 8, 2026?
Arch Linux released kernel v7.2.4-arch1 with a new sysctl to disable unprivileged user namespaces, while upstream configfs fixes close a symlink race that could read freed memory. In total, 56 commits and 1 releases landed.
Who contributed to Arch Linux on September 8, 2026?
7 developers shipped this update, including Andreas Radke, Caleb Maclennan, George Rawlinson, Sven-Hendrik Haase, heftig, Linus Torvalds, and Vasileios Almpanis.
What were the notable Arch Linux updates?
Arch Linux kernel v7.2.4-arch1, configfs: unhash the dentry before dropping the item in rmdir, and configfs: pin the symlink target's dirent instead of chasing ->ci_dentry.
♥

$ log @archlinux --recent

AUR push to deleted packages no longer grants maintainership 51 shipped pkgconf moves to core, asusctl and rule sets leave testing 53 shipped Yanked wnaf crate forces signstar dependency bump 51 shipped Arch kernel v7.2.3-arch1 ships with new userns sysctl 53 shipped

$ log --all # elsewhere on the wire

@openclaw Selective evidence collection and truthful reviewer prompts land in ClawSweeper AI Agents Cline desktop commands unblocked from slow backend startup

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Linux Anthropic OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.