RepoJournal
Linux Linux
152 wires and counting

$ follow Linux

Keep up with Linux in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-06-16
stories 50
RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

LINUX 7.2 HARDENS ENCRYPTED VMS, SHIPS LIVE TDX PATCHING

By RepoJournal · Filed · About Linux · Composed from the cited sources · methodology

Intel's TDX confidential computing now supports in-place security updates without reboots, joining a wave of x86 hardening that lands across encrypted VM architectures.

The merge window opens with three major x86 security subsystems shipping simultaneously. TDX gets its biggest feature yet: live module updates [1], letting operators patch the trusted execution environment mid-boot just like CPU microcode. This kills the operational nightmare that's plagued confidential computing since day one. SEV follows with a cleanup pass [2] that strips redundant GHCB guards and adds hard-fail semantics for SNP preparation, tightening the error paths that were previously silent failures. Rick Edgecombe, who's been carrying TDX on the host side, gets promoted to official maintainer [3], a sign of how critical this attack surface has become. The x86 crew also shipped general cleanups [4] across the platform, nothing breaking but the foundation layer is getting harder. Meanwhile, arm64 [5] is taking a slower cycle on features to focus on fpsimd hardening and kernel image unpredictability work, trading velocity for security posture.

Action items

References

  1. [1] Merge tag 'x86_tdx_for_7.2-rc1' of gitolite.kernel.org:pub/scm/linux/kernel/git/tip/tip torvalds/linux ↗
  2. [2] Merge tag 'x86_sev_for_v7.2_rc1' of gitolite.kernel.org:pub/scm/linux/kernel/git/tip/tip torvalds/linux ↗
  3. [3] Merge tag 'x86_misc_for_7.2-rc1' of gitolite.kernel.org:pub/scm/linux/kernel/git/tip/tip torvalds/linux ↗
  4. [4] Merge tag 'x86_cleanups_for_v7.2_rc1' of gitolite.kernel.org:pub/scm/linux/kernel/git/tip/tip torvalds/linux ↗
  5. [5] Merge tag 'arm64-upstream' of gitolite.kernel.org:pub/scm/linux/kernel/git/arm64/linux torvalds/linux ↗

$ ls linux/reviews/ # the step-back reads

the week in review Omarchy polkit PAM stack skipped system-auth the month in review Linux 7.3 rc cycle fixes cgroup kill, SMB corruption
Full archive → Weekly reviews →

Quick answers

What shipped in Linux on June 16, 2026?
Intel's TDX confidential computing now supports in-place security updates without reboots, joining a wave of x86 hardening that lands across encrypted VM architectures. In total, 50 commits landed.
What were the notable Linux updates?
Merge tag 'x86_tdx_for_7.2-rc1' of gitolite.kernel.org:pub/scm/linux/kernel/git/tip/tip, Merge tag 'x86_sev_for_v7.2_rc1' of gitolite.kernel.org:pub/scm/linux/kernel/git/tip/tip, and Merge tag 'x86_misc_for_7.2-rc1' of gitolite.kernel.org:pub/scm/linux/kernel/git/tip/tip.
♥

$ log Linux --recent

drm-fixes backs out dma-buf debug, vfs closes pathwalk use-after-frees 29 shipped Netlink stops hashing the net pointer, stmmac clears a stuck RGMII interrupt 27 shipped Poly1305 carry fix lands, Omarchy locks down N1x laptops and idle fingerprint readers 23 shipped Omarchy copies agent logins over SSH, kernel queues 7.4 merges 106 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training verl rejects conflicting vLLM engine_kwargs, open-instruct adds MILES OPD behind a Megatron learner Interpretability nnsight 0.8.0 cuts import time from 7.6s to 1.6s

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.