RepoJournal
Linux

Linux

The kernel, distros, and the rigs of the moment

Keep up with Linux in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Wed 17 jun
  2. Thu 18 jun
  3. Fri 19 jun
  4. Sat 27 jun
  5. Sun 28 jun
  6. Mon 29 jun
  7. Tue 30 jun
  8. Wed 1 jul
  9. Thu 2 jul
  10. Fri 3 jul
  11. Sat 4 jul
  12. Sun 5 jul
  13. Mon 6 jul
  14. Tue 7 jul
  15. Fri 10 jul
  16. Sat 11 jul
  17. Sun 12 jul
  18. Mon 13 jul
  19. Tue 14 jul
  20. Wed 15 jul
  21. Thu 16 jul
  22. Fri 17 jul
  23. Sat 18 jul
  24. Sun 19 jul
  25. Mon 20 jul
  26. Tue 21 jul
  27. Wed 22 jul
  28. Thu 23 jul
  29. Fri 24 jul
  30. Today 25 jul
Topics: Infrastructure Full archive →

The Wire · Showcase

KVM HALTS UNDER CET VIRTUALIZATION — WORKAROUND LIVE

By RepoJournal · Filed · About Linux

Virtualized Control Enforcement Technology is hanging production hosts, and the kernel just gave you an off switch.

Paolo Bonzini merged emergency KVM fixes overnight, including a critical module parameter to disable CET virtualization entirely [1]. Host hangs tied to CET have been reported in the field, and rather than burn cycles on root cause analysis mid-cycle, maintainers chose the safer path: let operators kill the feature until it's bulletproof [1]. The same merge window brought arm64 pKVM improvements [2] addressing erratum 4193714, guest memory handling under nested virtualization, and a steal-time selftest fix — all essential for ARM deployments. Separately, liveupdate fixes landed [3] tightening kexec handover validation, fixing memfd preservation error handling, and preventing overflows when preserving memfds that exceed UINT_MAX page counts. If you're running virtualization at scale, this is a red flag on CET. If you're shipping arm64 guests or using liveupdate for zero-downtime patching, test these merges before rolling forward.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] KVM: VMX: introduce module parameter to disable CET torvalds/linux
  2. [2] Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm torvalds/linux
  3. [3] Merge tag 'fixes-2026-05-13' of git://git.kernel.org/pub/scm/linux/kernel/git/liveupdate/linux torvalds/linux

Quick answers

What shipped in Linux on May 14, 2026?
Virtualized Control Enforcement Technology is hanging production hosts, and the kernel just gave you an off switch. In total, 3 commits landed.
What were the notable Linux updates?
KVM: VMX: introduce module parameter to disable CET, Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm, and Merge tag 'fixes-2026-05-13' of git://git.kernel.org/pub/scm/linux/kernel/git/liveupdate/linux.

More from Linux

Linux Linux

IO_URING FIXES AND SOCKMAP USE-AFTER-FREE PATCH LAND IN 7.2-RC

Linus merged critical io_uring corrections and a high-impact sockmap race condition fix that closes a threading vulnerability in TCP BPF message handling.

Linus Torvalds Chengfeng Ye David Heinemeier Hansson correctmost +2
infra 83 shipped 1-min read
Linux Linux

KERNEL PATCHES CLOSE NAMESPACE PRIVILEGE ESCALATION GAPS IN TUNNEL DRIVERS

Two critical fixes close a privilege escalation hole in VXLAN and GENEVE tunnel changelink operations that allowed unprivileged callers in one namespace to rewrite devices whose underlay lives elsewhere.

Doruk Tan Ozturk Yuxiang Yang David Heinemeier Hansson Martín Ramírez Espinosa +2
infra 100 shipped 1-min read
Linux Linux

WATCHDOG UAF AND DIVISION-BY-ZERO FIXES LAND IN V7.2-RC5

Linus merged critical watchdog subsystem patches addressing a use-after-free vulnerability and a zero-division crash that could tank embedded systems in production.

Linus Torvalds David Heinemeier Hansson Softer codefiles
infra 40 shipped 1-min read
Linux Linux

KERNEL RC5 LANDS WITH HWMON FIXES AND KVM STABILITY PATCHES

Linux 7.2-rc5 rolls out critical hardware monitoring fixes and RISC-V virtualization patches that tighten KVM stability across multiple architectures.

Linus Torvalds Paolo Bonzini David Heinemeier Hansson codefiles +1
infra 47 shipped 2-min read

Daily updates, in your inbox

Follow Linux

Keep up with Linux in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

github-actions[bot] hntrl dependabot ak684 +6
ai-agents 28 shipped 1-min read
Local LLMs Local LLMs

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.

dhiltgen ParthSareen Xuan-Son Nguyen Johannes Gäßler +11
llms 210 shipped 2-min read
CachyOS @CachyOS

HYPRLAND V0.56 FIXES LAND, PACKAGE ECOSYSTEM ROLLS FORWARD

Hyprland configuration updated for v0.56 compatibility across multiple desks, while the AUR-derived ecosystem locked in four automated package bumps.

cantosun99 Jinra Aarrayy Valeri +7
infra 85 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

LIVEVIEW ASYNC CLEANUP FIX SHIPS ALONGSIDE RANGE OPTIMIZATIONS

Phoenix LiveView closes a critical async task test failure while Elixir cuts unnecessary abs calls from Range operations.

Barna Kovacs Alexander Gubarev SteffenDE José Valim +1
elixir 19 shipped 1-min read
Want every project, not just this one?