What were the notable Linux updates?

Merge tag 'probes-fixes-v7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace, tracing/fprobe: Fix NULL pointer dereference in fprobe_fgraph_entry(), and tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg.

Linux

The kernel, distros, and the rigs of the moment

Pick a date

Topics: Infrastructure Full archive →

The Wire · Showcase

KERNEL PROBES GET EMERGENCY FIXES AFTER NULL POINTER CRASHES

By RepoJournal · Filed 06:02 UTC on July 1, 2026 · About Linux

The Linux kernel's dynamic tracing subsystem shipped critical fixes overnight to prevent general protection faults and crashes in fprobe handlers under concurrent registration.

A major NULL pointer dereference in fprobe_fgraph_entry() has been patched [1] [2]. The bug occurred when new fprobes registered on live instrumentation points became visible mid-operation, causing the shadow-stack fill walk to process exit handlers that the sizing walk never counted, writing past reserved bounds. This is not a theoretical race condition - it crashes production systems running concurrent kprobe registration. The kernel team also removed a WARN_ON_ONCE that users could trigger trivially [3], fixing developer experience when adding kprobe events with BTF parameters at raw addresses. In related fixes, the tracing subsystem now enforces mandatory $ prefix for comm access [4] to prevent ambiguity with event fields, and corrected a double-offset calculation bug in field dereference parsing [5] that corrupted memory access patterns. All five changes land in the probe fixes batch for v7.2-rc1.

Action items

→ Pull probes-fixes-v7.2-rc1 into your next kernel build if running kprobes or fprobes in production torvalds/linux [immediate]
→ Review any live kprobe registration scripts for $ prefix usage on comm variables torvalds/linux [plan]
→ Monitor systems using dynamic tracing for GPF events - patch before they surface torvalds/linux [immediate]

References

[1] Merge tag 'probes-fixes-v7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace torvalds/linux
[2] tracing/fprobe: Fix NULL pointer dereference in fprobe_fgraph_entry() torvalds/linux
[3] tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg torvalds/linux
[4] tracing/probes: Make the $ prefix mandatory for comm access torvalds/linux
[5] tracing/probes: Fix double addition of offset for @+FOFFSET torvalds/linux

Quick answers

What shipped in Linux on July 1, 2026?: The Linux kernel's dynamic tracing subsystem shipped critical fixes overnight to prevent general protection faults and crashes in fprobe handlers under concurrent registration. In total, 7 commits landed.
What were the notable Linux updates?: Merge tag 'probes-fixes-v7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace, tracing/fprobe: Fix NULL pointer dereference in fprobe_fgraph_entry(), and tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg.

KERNEL STABILIZES BEFORE 7.2 FINAL WITH ACL, USB, AND BLOCK DEVICE FIXES

Linux 7.2-rc5 lands critical fixes for filesystem caching, USB device quirks, and a nasty emergency thaw deadlock that could hang your system during freeze operations.

infra 59 shipped 1-min read

Linux 2 days ago

RUST TOOLCHAIN FIXES LAND, OMARCHY TACKLES SUSPEND RACE AND HARDWARE DETECTION

Linus merged rust infrastructure updates and a cascade of subsystem fixes across firewire, LoongArch, and perf tooling, while the Omarchy team shipped five critical fixes addressing fingerprint reader false positives, zram configuration conflicts, and a dangerous screen-lock-to-suspend race condition.

infra 38 shipped 2-min read

Linux 3 days ago

IO_URING FIXES AND SOCKMAP USE-AFTER-FREE PATCH LAND IN 7.2-RC

Linus merged critical io_uring corrections and a high-impact sockmap race condition fix that closes a threading vulnerability in TCP BPF message handling.

infra 83 shipped 1-min read

Linux 4 days ago

KERNEL PATCHES CLOSE NAMESPACE PRIVILEGE ESCALATION GAPS IN TUNNEL DRIVERS

Two critical fixes close a privilege escalation hole in VXLAN and GENEVE tunnel changelink operations that allowed unprivileged callers in one namespace to rewrite devices whose underlay lives elsewhere.

infra 100 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.