The Wire · Showcase
IO_URING USE-AFTER-FREE FIX LANDS ALONGSIDE CRYPTO DEADLOCK PATCH
By RepoJournal · Filed · About Linux
Linus pulled a critical io_uring thread pool fix that closes a use-after-free vulnerability in the io-wq hashing layer, while Herbert Xu's crypto stack tackles a rhashtable deadlock that could freeze systems under memory pressure.
The io_uring fix [1] addresses a hashing issue in the io-wq thread pool that could trigger use-after-free conditions, a high-severity bug for any workload relying on async I/O. Herbert Xu's crypto pull [2] lands a companion fix for the same underlying rhashtable problem: the merger introduces kvfree_atomic() to prevent blocking operations on the atomic path, plus a new bucket_table_free_atomic() helper that eliminates a potential deadlock when xattr processing contends with memory reclamation. XFS [3] and Btrfs [4] both landed small but necessary fixes around block group initialization and memory allocation warnings respectively. The documentation tree [5] merged Willy Tarreau's new security threat model document, intended to guide reporters on what constitutes a kernel security bug. Arch Linux's archinstall landed a usability win with enhanced log sharing [6] that now previews uploads before confirmation, while the omarchy subsystem cleaned house by removing obsolete suspend-then-hibernate cleanup steps [7].
Action items
- → Pull latest mainline to pick up io_uring use-after-free fix torvalds/linux [immediate]
- → Monitor rhashtable behavior in production if you run heavy xattr workloads torvalds/linux [monitor]
- → Update archinstall if you deploy Arch Linux installations with log sharing archlinux/archinstall [plan]
References
- [1] Merge tag 'io_uring-7.1-20260515' of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux torvalds/linux
- [2] Merge tag 'v7.1-p4' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 torvalds/linux
- [3] Merge tag 'xfs-fixes-7.1-rc4' of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux torvalds/linux
- [4] Merge tag 'for-7.1-rc3-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux torvalds/linux
- [5] Merge tag 'docs-7.1-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/docs/linux torvalds/linux
- [6] Enhance log sharing capability ↗ archlinux/archinstall
- [7] Remove suspend-then-hibernate cleanup steps (#5829) basecamp/omarchy
FAQ
- What changed in Linux on May 16, 2026?
- Linus pulled a critical io_uring thread pool fix that closes a use-after-free vulnerability in the io-wq hashing layer, while Herbert Xu's crypto stack tackles a rhashtable deadlock that could freeze systems under memory pressure.
- What should Linux teams do about it?
- Pull latest mainline to pick up io_uring use-after-free fix • Monitor rhashtable behavior in production if you run heavy xattr workloads • Update archinstall if you deploy Arch Linux installations with log sharing
- Which Linux repositories shipped on May 16, 2026?
- torvalds/linux, archlinux/archinstall, basecamp/omarchy