What were the notable Linux updates?

Merge tag 'vfio-v7.2-rc2' of https://github.com/awilliam/linux-vfio, Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf, and Merge tag 'net-7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.

Linux

The kernel, distros, and the rigs of the moment

Pick a date

Topics: Infrastructure Full archive →

The Wire · Showcase

V7.2-RC2 TIGHTENS SECURITY SCREWS ACROSS VFIO, BPF, AND NETWORKING

By RepoJournal · Filed 06:02 UTC on July 3, 2026 · About Linux

Linux 7.2-rc2 lands critical fixes for race conditions in device passthrough, hardened BPF JIT protection against code injection, and a critical use-after-free in the network stack.

The VFIO subsystem [1] closes dangerous bitfield race conditions in both the core vfio-pci driver and the mlx5 variant that could corrupt device state under concurrent access. This is a hard stop before shipping any virtualization workloads on 7.2. Meanwhile, the BPF fixes [2] address a serious security gap: the verifier now masks pseudo pointer values in logs to prevent information leaks, and JIT hardening blocks instruction pointer spraying attacks that could bypass code placement randomization. The networking patch [3] restores critical RCU grace periods in TCP AO socket destruction and patches a use-after-free on shutdown that hits real deployments. Hardware monitoring [4] gets defensive: divide-by-zero guards in fan RPM calculations, coefficient overflow detection in power supply monitors, and buffer safety checks across aspeed and asus drivers prevent panics from malformed sensor data. These are polishing merges, not show-stoppers, but the VFIO race condition is worth a rebuild.

Action items

→ Rebuild and test with 7.2-rc2 if running VFIO or nested virtualization torvalds/linux [plan]
→ Monitor for rc3 if you depend on TCP AO or netpoll in production torvalds/linux [monitor]
→ Verify hardware monitoring sensor readings after upgrade torvalds/linux [plan]

References

[1] Merge tag 'vfio-v7.2-rc2' of https://github.com/awilliam/linux-vfio torvalds/linux
[2] Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf torvalds/linux
[3] Merge tag 'net-7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net torvalds/linux
[4] Merge tag 'hwmon-for-v7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging torvalds/linux

Quick answers

What shipped in Linux on July 3, 2026?: Linux 7.2-rc2 lands critical fixes for race conditions in device passthrough, hardened BPF JIT protection against code injection, and a critical use-after-free in the network stack. In total, 8 commits landed.
What were the notable Linux updates?: Merge tag 'vfio-v7.2-rc2' of https://github.com/awilliam/linux-vfio, Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf, and Merge tag 'net-7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.

KERNEL STABILIZES BEFORE 7.2 FINAL WITH ACL, USB, AND BLOCK DEVICE FIXES

Linux 7.2-rc5 lands critical fixes for filesystem caching, USB device quirks, and a nasty emergency thaw deadlock that could hang your system during freeze operations.

infra 59 shipped 1-min read

Linux 2 days ago

RUST TOOLCHAIN FIXES LAND, OMARCHY TACKLES SUSPEND RACE AND HARDWARE DETECTION

Linus merged rust infrastructure updates and a cascade of subsystem fixes across firewire, LoongArch, and perf tooling, while the Omarchy team shipped five critical fixes addressing fingerprint reader false positives, zram configuration conflicts, and a dangerous screen-lock-to-suspend race condition.

infra 38 shipped 2-min read

Linux 3 days ago

IO_URING FIXES AND SOCKMAP USE-AFTER-FREE PATCH LAND IN 7.2-RC

Linus merged critical io_uring corrections and a high-impact sockmap race condition fix that closes a threading vulnerability in TCP BPF message handling.

infra 83 shipped 1-min read

Linux 4 days ago

KERNEL PATCHES CLOSE NAMESPACE PRIVILEGE ESCALATION GAPS IN TUNNEL DRIVERS

Two critical fixes close a privilege escalation hole in VXLAN and GENEVE tunnel changelink operations that allowed unprivileged callers in one namespace to rewrite devices whose underlay lives elsewhere.

infra 100 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.