RepoJournal
Linux Linux
152 wires and counting

$ follow Linux

Keep up with Linux in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-07-03
stories 8
RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

V7.2-RC2 TIGHTENS SECURITY SCREWS ACROSS VFIO, BPF, AND NETWORKING

By RepoJournal · Filed · About Linux · Composed from the cited sources · methodology

Linux 7.2-rc2 lands critical fixes for race conditions in device passthrough, hardened BPF JIT protection against code injection, and a critical use-after-free in the network stack.

The VFIO subsystem [1] closes dangerous bitfield race conditions in both the core vfio-pci driver and the mlx5 variant that could corrupt device state under concurrent access. This is a hard stop before shipping any virtualization workloads on 7.2. Meanwhile, the BPF fixes [2] address a serious security gap: the verifier now masks pseudo pointer values in logs to prevent information leaks, and JIT hardening blocks instruction pointer spraying attacks that could bypass code placement randomization. The networking patch [3] restores critical RCU grace periods in TCP AO socket destruction and patches a use-after-free on shutdown that hits real deployments. Hardware monitoring [4] gets defensive: divide-by-zero guards in fan RPM calculations, coefficient overflow detection in power supply monitors, and buffer safety checks across aspeed and asus drivers prevent panics from malformed sensor data. These are polishing merges, not show-stoppers, but the VFIO race condition is worth a rebuild.

Action items

References

  1. [1] Merge tag 'vfio-v7.2-rc2' of https://github.com/awilliam/linux-vfio torvalds/linux ↗
  2. [2] Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf torvalds/linux ↗
  3. [3] Merge tag 'net-7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net torvalds/linux ↗
  4. [4] Merge tag 'hwmon-for-v7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging torvalds/linux ↗

$ ls linux/reviews/ # the step-back reads

the week in review Omarchy polkit PAM stack skipped system-auth the month in review Linux 7.3 rc cycle fixes cgroup kill, SMB corruption
Full archive → Weekly reviews →

Quick answers

What shipped in Linux on July 3, 2026?
Linux 7.2-rc2 lands critical fixes for race conditions in device passthrough, hardened BPF JIT protection against code injection, and a critical use-after-free in the network stack. In total, 8 commits landed.
What were the notable Linux updates?
Merge tag 'vfio-v7.2-rc2' of https://github.com/awilliam/linux-vfio, Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf, and Merge tag 'net-7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.
♥

$ log Linux --recent

drm-fixes backs out dma-buf debug, vfs closes pathwalk use-after-frees 29 shipped Netlink stops hashing the net pointer, stmmac clears a stuck RGMII interrupt 27 shipped Poly1305 carry fix lands, Omarchy locks down N1x laptops and idle fingerprint readers 23 shipped Omarchy copies agent logins over SSH, kernel queues 7.4 merges 106 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training verl rejects conflicting vLLM engine_kwargs, open-instruct adds MILES OPD behind a Megatron learner Interpretability nnsight 0.8.0 cuts import time from 7.6s to 1.6s

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.