Who contributed to Linux on July 13, 2026?

6 developers shipped this update, including Jaewon Yang, Linus Torvalds, correctmost, BlackCatOfficialytb, chrislongros, and renovate.

What were the notable Linux updates?

tpm: Make the TPM character devices non-seekable, Merge tag 'staging-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging, and Merge tag 'usb-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.

Linux

The kernel, distros, and the rigs of the moment

Pick a date

Topics: Infrastructure Full archive →

The Wire · Showcase

TPM DEVICE HEAP READ VULNERABILITY CLOSES, STAGING AND USB FIXES LAND

By RepoJournal · Filed 06:57 UTC on July 13, 2026 · About Linux

6 people shipped this

Linus Torvalds @torvalds 3 cited

Jaewon Yang @R4mbb 1 cited

correctmost @correctmost 1 cited

BlackCatOfficialytb @BlackCatOfficialytb 1 cited

chrislongros @chrislongros

renovate @renovate

The kernel just closed a critical TPM character device vulnerability that could leak heap memory through seekable file offsets, while rc3 merges sweep in fixes across staging, USB, s390, and tracing subsystems.

Linux kernel maintainers fixed a dangerous out-of-bounds heap read in TPM character devices by disabling seek operations [1]. The vulnerability allowed attackers to pass arbitrary offsets to tpm_common_read(), bypassing response_length bounds checks and exposing sensitive kernel memory. This was a clean security win: the TPM interface is inherently sequential, so seeking made no sense anyway.

Greg KH merged staging driver fixes targeting rtl8723bs WiFi and vme_user validation bugs [2], followed immediately by a larger USB subsidy pull addressing serial driver use-after-free issues, gadget rndis exploits from malicious hosts, and typec driver regressions [3]. These aren't show-stoppers individually but they've been accumulating in rc3. S390 also landed speculative execution mitigations in diag310 and fixed alignment mask truncation bugs .

Steven Rostedt's tracing fixes address a synthetic event memory leak in the error path and a subtle ring_buffer_event_length() bug on 8-byte aligned architectures [4]. On the archinstall side, type checking coverage expanded for test code while Vietnamese language support reached 61% translation [5] [6].

Action items

→ Review TPM device changes [ref:1] if you maintain security-sensitive code paths torvalds/linux [plan]
→ Test rc3 merges on USB and staging hardware before production kernel builds torvalds/linux [monitor]
→ Watch tracing subsystem for ring_buffer correctness on 8-byte aligned platforms torvalds/linux [monitor]

References

[1] tpm: Make the TPM character devices non-seekable torvalds/linux
[2] Merge tag 'staging-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging torvalds/linux
[3] Merge tag 'usb-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb torvalds/linux
[4] Merge tag 'trace-v7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace torvalds/linux
[5] Enable more mypy and Pylint checks for test_tooling/ ↗ archlinux/archinstall
[6] Add Vietnamese to Archinstall ↗ archlinux/archinstall

Quick answers

What shipped in Linux on July 13, 2026?: The kernel just closed a critical TPM character device vulnerability that could leak heap memory through seekable file offsets, while rc3 merges sweep in fixes across staging, USB, s390, and tracing subsystems. In total, 14 commits and 10 pull requests landed.
Who contributed to Linux on July 13, 2026?: 6 developers shipped this update, including Jaewon Yang, Linus Torvalds, correctmost, BlackCatOfficialytb, chrislongros, and renovate.
What were the notable Linux updates?: tpm: Make the TPM character devices non-seekable, Merge tag 'staging-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging, and Merge tag 'usb-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.

X86 FIXES PATCH KERNEL RESOURCE LEAKS AND SECURITY HOLES OVERNIGHT

Linus pulled urgent x86 and io_uring patches that close resource leaks, fix a perf security hole leaking kernel addresses to userspace, and restore critical RCU read sections that were dropped mid-merge window.

infra 9 shipped 1-min read

Linux 2 days ago

SMB3 CLIENT FIXES LAND AS RC2 SWEEP CONTINUES

Linux 7.2-rc2 pushed a massive SMB3 client update overnight that closes a critical buffer overflow in ioctl_query_info and fixes broken symlink handling on mounted filesystems.

infra 11 shipped 1-min read

Linux 3 days ago

NETWORKING FIXES LAND AHEAD OF 7.2-RC3 AS MEMORY LEAKS AND BUFFER OVERREADS GET PLUGGED

The kernel is shipping critical fixes for in-flight packet handling, MAC address spoofing vectors, and heap overreads that could crash your network stack.

infra 14 shipped 1-min read

Linux 6 days ago

KERNEL HOTFIX BLITZ LANDS 20 MM PATCHES, DESAULNIERS RETURNS TO MAINTAINERS

Andrew Morton just merged 20 memory management fixes into mainline, with 12 tagged for stable backports and a familiar face reclaiming the clang toolchain desk.

infra 2 shipped 1-min read

— or follow the whole beat:

Elsewhere on the wire

Elixir & Phoenix about 6 hours ago

ELIXIR FIXES SPEC AND ARITY BUGS ACROSS CORE MODULES

Elixir core shipped three precision fixes overnight that tighten specs on IEx and EEx utilities, catching the kind of type mismatches that slip past dialyzer.

elixir 7 shipped 1-min read

Mobile platforms about 6 hours ago

FLUTTER CLEANS HOUSE ON ANALYSIS RULES WHILE SWIFT FIXES C-INTEROP CRASHES

Flutter is migrating away from deprecated strict analysis modes in favor of lint rules, while Swift patches critical crashes in bit-field accessors and C interoperability.

mobile 21 shipped 1-min read

@dotnet about 6 hours ago

ASPNETCORE VALIDATION GENERATOR FIXED, MSBUILD SYNCS ROSLYN AND NUGET

ASP.NET Core's validation source generator now correctly unwraps array types, closing a gap that could slip validation past your models.

dotnet 6 shipped 1-min read

@spring-projects about 6 hours ago

SPRING-AI FIXES CRITICAL TOOL CALLING BUG THAT BROKE OPENAI STRICT MODE

The `strict` parameter in OpenAI tool calling was silently failing across all Spring AI implementations because it was serialized in the wrong place in the payload.

java 8 shipped 1-min read