What were the notable Linux updates?

Merge tag 'vfs-7.1-rc5.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs, fix: restrict EFI partition permissions with fmask/dmask=0077 (#4506), and Add translation CI validation (#4519).

Linux

The kernel, distros, and the rigs of the moment

Pick a date

Topics: Infrastructure Full archive →

The Wire · Showcase

VFS FIXES LAND AS TRANSLATION BUGS EXPOSE ARCHINSTALL SECURITY GAP

By RepoJournal · Filed 06:02 UTC on May 19, 2026 · About Linux

The kernel's VFS layer got patched for netfslib bugs and an out-of-bounds write in idmapping [ref:1], while Arch's installer shipped a critical EFI permission fix that leaves random-seed world-readable without it [ref:7].

Christian Brauner merged a batch of VFS fixes [1] addressing netfslib bugs that have been piling up during the development cycle. The team also caught an out-of-bounds write when listing idmappings and return value issues in jfs_mkdir(), underscoring how AI-assisted review sometimes surfaces follow-up fixes faster than human review alone. Meanwhile, perf-tools synced header files for syscall tracing [4] and fixed format specifier warnings on 32-bit platforms [5]. On the Arch side, archinstall shipped a critical EFI partition fix [2] that mounts the ESP with fmask=0077 and dmask=0077 to prevent world-readable files like /efi/loader/random-seed, closing a privilege disclosure hole. The same release fixed a broken localization pipeline [3] where f-strings were evaluated before translation lookups, causing catalog misses, plus added CI validation to prevent future translation regressions. CIFS also got a patch for undefined variables introduced by a recent netfs teardown fix [6], caught by clang where gcc silently passed.

Action items

→ Test Arch archinstall EFI mount permissions immediately if deploying to production systems archlinux/archinstall [immediate]
→ Rebuild packages for 32-bit platforms using latest kernel to pick up HID format specifier fix torvalds/linux [plan]
→ Monitor for CIFS stability after undefined variable patch lands in your kernel version torvalds/linux [monitor]

References

[1] Merge tag 'vfs-7.1-rc5.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs torvalds/linux
[2] fix: restrict EFI partition permissions with fmask/dmask=0077 (#4506) archlinux/archinstall
[3] Add translation CI validation (#4519) archlinux/archinstall
[4] Merge tag 'perf-tools-fixes-for-v7.1-2026-05-18' of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools torvalds/linux
[5] HID: core: Fix size_t specifier in hid_report_raw_event() torvalds/linux
[6] cifs: Fix undefined variables torvalds/linux

Quick answers

What shipped in Linux on May 19, 2026?: The kernel's VFS layer got patched for netfslib bugs and an out-of-bounds write in idmapping [ref:1], while Arch's installer shipped a critical EFI permission fix that leaves random-seed world-readable without it [ref:7]. In total, 8 commits and 2 pull requests landed.
What were the notable Linux updates?: Merge tag 'vfs-7.1-rc5.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs, fix: restrict EFI partition permissions with fmask/dmask=0077 (#4506), and Add translation CI validation (#4519).

IO_URING FIXES AND SOCKMAP USE-AFTER-FREE PATCH LAND IN 7.2-RC

Linus merged critical io_uring corrections and a high-impact sockmap race condition fix that closes a threading vulnerability in TCP BPF message handling.

infra 83 shipped 1-min read

Linux 1 day ago

KERNEL PATCHES CLOSE NAMESPACE PRIVILEGE ESCALATION GAPS IN TUNNEL DRIVERS

Two critical fixes close a privilege escalation hole in VXLAN and GENEVE tunnel changelink operations that allowed unprivileged callers in one namespace to rewrite devices whose underlay lives elsewhere.

infra 100 shipped 1-min read

Linux 2 days ago

WATCHDOG UAF AND DIVISION-BY-ZERO FIXES LAND IN V7.2-RC5

Linus merged critical watchdog subsystem patches addressing a use-after-free vulnerability and a zero-division crash that could tank embedded systems in production.

infra 40 shipped 1-min read

Linux 3 days ago

KERNEL RC5 LANDS WITH HWMON FIXES AND KVM STABILITY PATCHES

Linux 7.2-rc5 rolls out critical hardware monitoring fixes and RISC-V virtualization patches that tighten KVM stability across multiple architectures.

infra 47 shipped 2-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.