RepoJournal
Linux

Linux

The kernel, distros, and the rigs of the moment

Keep up with Linux in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Fri 19 jun
  2. Sat 27 jun
  3. Sun 28 jun
  4. Mon 29 jun
  5. Tue 30 jun
  6. Wed 1 jul
  7. Thu 2 jul
  8. Fri 3 jul
  9. Sat 4 jul
  10. Sun 5 jul
  11. Mon 6 jul
  12. Tue 7 jul
  13. Fri 10 jul
  14. Sat 11 jul
  15. Sun 12 jul
  16. Mon 13 jul
  17. Tue 14 jul
  18. Wed 15 jul
  19. Thu 16 jul
  20. Fri 17 jul
  21. Sat 18 jul
  22. Sun 19 jul
  23. Mon 20 jul
  24. Tue 21 jul
  25. Wed 22 jul
  26. Thu 23 jul
  27. Fri 24 jul
  28. Sat 25 jul
  29. Sun 26 jul
  30. Mon 27 jul
Topics: Infrastructure Full archive →

The Wire · Showcase

LINUX 7.2 HARDENS ENCRYPTED VMS, SHIPS LIVE TDX PATCHING

By RepoJournal · Filed · About Linux

Intel's TDX confidential computing now supports in-place security updates without reboots, joining a wave of x86 hardening that lands across encrypted VM architectures.

The merge window opens with three major x86 security subsystems shipping simultaneously. TDX gets its biggest feature yet: live module updates [1], letting operators patch the trusted execution environment mid-boot just like CPU microcode. This kills the operational nightmare that's plagued confidential computing since day one. SEV follows with a cleanup pass [2] that strips redundant GHCB guards and adds hard-fail semantics for SNP preparation, tightening the error paths that were previously silent failures. Rick Edgecombe, who's been carrying TDX on the host side, gets promoted to official maintainer [3], a sign of how critical this attack surface has become. The x86 crew also shipped general cleanups [4] across the platform, nothing breaking but the foundation layer is getting harder. Meanwhile, arm64 [5] is taking a slower cycle on features to focus on fpsimd hardening and kernel image unpredictability work, trading velocity for security posture.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Merge tag 'x86_tdx_for_7.2-rc1' of gitolite.kernel.org:pub/scm/linux/kernel/git/tip/tip torvalds/linux
  2. [2] Merge tag 'x86_sev_for_v7.2_rc1' of gitolite.kernel.org:pub/scm/linux/kernel/git/tip/tip torvalds/linux
  3. [3] Merge tag 'x86_misc_for_7.2-rc1' of gitolite.kernel.org:pub/scm/linux/kernel/git/tip/tip torvalds/linux
  4. [4] Merge tag 'x86_cleanups_for_v7.2_rc1' of gitolite.kernel.org:pub/scm/linux/kernel/git/tip/tip torvalds/linux
  5. [5] Merge tag 'arm64-upstream' of gitolite.kernel.org:pub/scm/linux/kernel/git/arm64/linux torvalds/linux

Quick answers

What shipped in Linux on June 16, 2026?
Intel's TDX confidential computing now supports in-place security updates without reboots, joining a wave of x86 hardening that lands across encrypted VM architectures. In total, 50 commits landed.
What were the notable Linux updates?
Merge tag 'x86_tdx_for_7.2-rc1' of gitolite.kernel.org:pub/scm/linux/kernel/git/tip/tip, Merge tag 'x86_sev_for_v7.2_rc1' of gitolite.kernel.org:pub/scm/linux/kernel/git/tip/tip, and Merge tag 'x86_misc_for_7.2-rc1' of gitolite.kernel.org:pub/scm/linux/kernel/git/tip/tip.

More from Linux

Linux Linux

KERNEL STABILIZES BEFORE 7.2 FINAL WITH ACL, USB, AND BLOCK DEVICE FIXES

Linux 7.2-rc5 lands critical fixes for filesystem caching, USB device quirks, and a nasty emergency thaw deadlock that could hang your system during freeze operations.

Linus Torvalds Christian Brauner David Heinemeier Hansson
infra 59 shipped 1-min read
Linux Linux

RUST TOOLCHAIN FIXES LAND, OMARCHY TACKLES SUSPEND RACE AND HARDWARE DETECTION

Linus merged rust infrastructure updates and a cascade of subsystem fixes across firewire, LoongArch, and perf tooling, while the Omarchy team shipped five critical fixes addressing fingerprint reader false positives, zram configuration conflicts, and a dangerous screen-lock-to-suspend race condition.

Linus Torvalds David Heinemeier Hansson
infra 38 shipped 2-min read
Linux Linux

IO_URING FIXES AND SOCKMAP USE-AFTER-FREE PATCH LAND IN 7.2-RC

Linus merged critical io_uring corrections and a high-impact sockmap race condition fix that closes a threading vulnerability in TCP BPF message handling.

Linus Torvalds Chengfeng Ye David Heinemeier Hansson correctmost +2
infra 83 shipped 1-min read
Linux Linux

KERNEL PATCHES CLOSE NAMESPACE PRIVILEGE ESCALATION GAPS IN TUNNEL DRIVERS

Two critical fixes close a privilege escalation hole in VXLAN and GENEVE tunnel changelink operations that allowed unprivileged callers in one namespace to rewrite devices whose underlay lives elsewhere.

Doruk Tan Ozturk Yuxiang Yang David Heinemeier Hansson Martín Ramírez Espinosa +2
infra 100 shipped 1-min read

Daily updates, in your inbox

Follow Linux

Keep up with Linux in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

langchain-oss-model-profiles langchain-oss-model-profiles[bot] saoudrizwan
ai-agents 16 shipped 2-min read
Local LLMs Local LLMs

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

github-actions[bot] dhiltgen timkhronos Pascal +10
llms 125 shipped 1-min read
CachyOS @CachyOS

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

Piotr Gorski github-actions Vladislav Nepogodin ptr1337 +7
infra 97 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.

Benjamin Milde Alexander Gubarev lukaszsamson makoto-developer
elixir 10 shipped 1-min read
Want every project, not just this one?

We use privacy-friendly analytics (Google Analytics, IP-anonymized) to see which pages help readers. No ads, and we never sell your data. See our Privacy Policy.