RepoJournal
Linux Linux
152 wires and counting

$ follow Linux

Keep up with Linux in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-16
stories 50
RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

IO_URING USE-AFTER-FREE FIX LANDS ALONGSIDE CRYPTO DEADLOCK PATCH

By RepoJournal · Filed · About Linux · Composed from the cited sources · methodology

svartkanin
1 person shipped this
svartkanin @svartkanin 1 cited

Linus pulled a critical io_uring thread pool fix that closes a use-after-free vulnerability in the io-wq hashing layer, while Herbert Xu's crypto stack tackles a rhashtable deadlock that could freeze systems under memory pressure.

The io_uring fix [1] addresses a hashing issue in the io-wq thread pool that could trigger use-after-free conditions, a high-severity bug for any workload relying on async I/O. Herbert Xu's crypto pull [2] lands a companion fix for the same underlying rhashtable problem: the merger introduces kvfree_atomic() to prevent blocking operations on the atomic path, plus a new bucket_table_free_atomic() helper that eliminates a potential deadlock when xattr processing contends with memory reclamation. XFS [3] and Btrfs [4] both landed small but necessary fixes around block group initialization and memory allocation warnings respectively. The documentation tree [5] merged Willy Tarreau's new security threat model document, intended to guide reporters on what constitutes a kernel security bug. Arch Linux's archinstall landed a usability win with enhanced log sharing [6] that now previews uploads before confirmation, while the omarchy subsystem cleaned house by removing obsolete suspend-then-hibernate cleanup steps [7].

Action items

References

  1. [1] Merge tag 'io_uring-7.1-20260515' of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux torvalds/linux ↗
  2. [2] Merge tag 'v7.1-p4' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 torvalds/linux ↗
  3. [3] Merge tag 'xfs-fixes-7.1-rc4' of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux torvalds/linux ↗
  4. [4] Merge tag 'for-7.1-rc3-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux torvalds/linux ↗
  5. [5] Merge tag 'docs-7.1-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/docs/linux torvalds/linux ↗
  6. [6] Enhance log sharing capability ↗ archlinux/archinstall
  7. [7] Remove suspend-then-hibernate cleanup steps (#5829) basecamp/omarchy ↗

$ ls linux/reviews/ # the step-back reads

the week in review Omarchy polkit PAM stack skipped system-auth the month in review Linux 7.3 rc cycle fixes cgroup kill, SMB corruption
Full archive → Weekly reviews →

Quick answers

What shipped in Linux on May 16, 2026?
Linus pulled a critical io_uring thread pool fix that closes a use-after-free vulnerability in the io-wq hashing layer, while Herbert Xu's crypto stack tackles a rhashtable deadlock that could freeze systems under memory pressure. In total, 45 commits and 5 pull requests landed.
Who contributed to Linux on May 16, 2026?
1 developer shipped this update, including svartkanin.
What were the notable Linux updates?
Merge tag 'io_uring-7.1-20260515' of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux, Merge tag 'v7.1-p4' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6, and Merge tag 'xfs-fixes-7.1-rc4' of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux.
♥

$ log Linux --recent

drm-fixes backs out dma-buf debug, vfs closes pathwalk use-after-frees 29 shipped Netlink stops hashing the net pointer, stmmac clears a stuck RGMII interrupt 27 shipped Poly1305 carry fix lands, Omarchy locks down N1x laptops and idle fingerprint readers 23 shipped Omarchy copies agent logins over SSH, kernel queues 7.4 merges 106 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training verl rejects conflicting vLLM engine_kwargs, open-instruct adds MILES OPD behind a Megatron learner Interpretability nnsight 0.8.0 cuts import time from 7.6s to 1.6s

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.