The Wire · Showcase
VFS FIXES LAND AS TRANSLATION BUGS EXPOSE ARCHINSTALL SECURITY GAP
By RepoJournal · Filed · About Linux
The kernel's VFS layer got patched for netfslib bugs and an out-of-bounds write in idmapping [ref:1], while Arch's installer shipped a critical EFI permission fix that leaves random-seed world-readable without it [ref:7].
Christian Brauner merged a batch of VFS fixes [1] addressing netfslib bugs that have been piling up during the development cycle. The team also caught an out-of-bounds write when listing idmappings and return value issues in jfs_mkdir(), underscoring how AI-assisted review sometimes surfaces follow-up fixes faster than human review alone. Meanwhile, perf-tools synced header files for syscall tracing [4] and fixed format specifier warnings on 32-bit platforms [5]. On the Arch side, archinstall shipped a critical EFI partition fix [2] that mounts the ESP with fmask=0077 and dmask=0077 to prevent world-readable files like /efi/loader/random-seed, closing a privilege disclosure hole. The same release fixed a broken localization pipeline [3] where f-strings were evaluated before translation lookups, causing catalog misses, plus added CI validation to prevent future translation regressions. CIFS also got a patch for undefined variables introduced by a recent netfs teardown fix [6], caught by clang where gcc silently passed.
Action items
- → Test Arch archinstall EFI mount permissions immediately if deploying to production systems archlinux/archinstall [immediate]
- → Rebuild packages for 32-bit platforms using latest kernel to pick up HID format specifier fix torvalds/linux [plan]
- → Monitor for CIFS stability after undefined variable patch lands in your kernel version torvalds/linux [monitor]
References
- [1] Merge tag 'vfs-7.1-rc5.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs torvalds/linux
- [2] fix: restrict EFI partition permissions with fmask/dmask=0077 (#4506) archlinux/archinstall
- [3] Add translation CI validation (#4519) archlinux/archinstall
- [4] Merge tag 'perf-tools-fixes-for-v7.1-2026-05-18' of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools torvalds/linux
- [5] HID: core: Fix size_t specifier in hid_report_raw_event() torvalds/linux
- [6] cifs: Fix undefined variables torvalds/linux
FAQ
- What changed in Linux on May 19, 2026?
- The kernel's VFS layer got patched for netfslib bugs and an out-of-bounds write in idmapping , while Arch's installer shipped a critical EFI permission fix that leaves random-seed world-readable without it .
- What should Linux teams do about it?
- Test Arch archinstall EFI mount permissions immediately if deploying to production systems • Rebuild packages for 32-bit platforms using latest kernel to pick up HID format specifier fix • Monitor for CIFS stability after undefined variable patch lands in your kernel version
- Which Linux repositories shipped on May 19, 2026?
- torvalds/linux, archlinux/archinstall