Who contributed to Linux on July 14, 2026?

3 developers shipped this update, including Linus Torvalds, dhh, and renovate.

What were the notable Linux updates?

Merge tag 'cgroup-for-7.2-rc3-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup, Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma, and Merge tag 'sched_ext-for-7.2-rc3-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/sched_ext.

Linux

The kernel, distros, and the rigs of the moment

Pick a date

Topics: Infrastructure Full archive →

The Wire · Showcase

KERNEL RC3 PLUGS CGROUP DIVIDE-BY-ZERO, RDMA DOS HOLE

By RepoJournal · Filed 06:57 UTC on July 14, 2026 · About Linux

3 people shipped this

Linus Torvalds @torvalds 5 cited

renovate @renovate 2 cited

dhh @dhh 1 cited

Linux 7.2-rc3 lands critical fixes for memory node rebinding crashes and RDMA traffic amplification attacks.

A cpuset division-by-zero vulnerability is patched [1] when task mempolicy rebinds during CPU hotplug, now rebinding against effective nodes instead of potentially empty ones. The RDMA pull [2] hardens against DOS with certain RMPP traffic patterns, fixes mac address comparison for proper CMA operation on InfiniBand, and closes several irdma crashes around memory registration alongside uninitialized values in erdma and mana drivers. The sched_ext subsystem [3] gets lifecycle fixes addressing two use-after-frees and an enable-failure path that left half-initialized schedulers linked, plus two dispatch-path locking bugs including a spurious abort from migration races. RTLA tracing tools [4] fix build failures on uclibc systems by adding missing unistd includes and linking ctype dependencies. NFSD [5] patches a use-after-free when unlocking filesystems post-shutdown. On the userspace front, Omarchy 3.8.3 [6] ships tmux pane improvements with Alt+Enter splitting and CSI-u encoding across Alacritty, Foot, Ghostty, and Kitty. ArchInstall closes out the cycle with routine mypy upgrades [7] [8] to v2.3.0 across pre-commit and dependencies.

Action items

→ Rebase off rc3 before merging any cgroup-related memory hotplug changes torvalds/linux [immediate]
→ Review RDMA configurations for RMPP traffic patterns, patch irdma/erdma/mana if running those drivers torvalds/linux [plan]
→ Monitor sched_ext dispatch behavior if using custom schedulers, upgrade after rc3 torvalds/linux [monitor]

References

[1] Merge tag 'cgroup-for-7.2-rc3-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup torvalds/linux
[2] Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma torvalds/linux
[3] Merge tag 'sched_ext-for-7.2-rc3-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/sched_ext torvalds/linux
[4] Merge tag 'trace-tools-v7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace torvalds/linux
[5] Merge tag 'nfsd-7.2-1' of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux torvalds/linux
[6] v3.8.3 ↗ basecamp/omarchy
[7] Update pre-commit hook pre-commit/mirrors-mypy to v2.3.0 ↗ archlinux/archinstall
[8] Update dependency mypy to v2.3.0 ↗ archlinux/archinstall

Quick answers

What shipped in Linux on July 14, 2026?: Linux 7.2-rc3 lands critical fixes for memory node rebinding crashes and RDMA traffic amplification attacks. In total, 5 commits, 2 pull requests, and 1 releases landed.
Who contributed to Linux on July 14, 2026?: 3 developers shipped this update, including Linus Torvalds, dhh, and renovate.
What were the notable Linux updates?: Merge tag 'cgroup-for-7.2-rc3-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup, Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma, and Merge tag 'sched_ext-for-7.2-rc3-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/sched_ext.

TPM DEVICE HEAP READ VULNERABILITY CLOSES, STAGING AND USB FIXES LAND

The kernel just closed a critical TPM character device vulnerability that could leak heap memory through seekable file offsets, while rc3 merges sweep in fixes across staging, USB, s390, and tracing subsystems.

infra 24 shipped 1-min read

Linux 2 days ago

X86 FIXES PATCH KERNEL RESOURCE LEAKS AND SECURITY HOLES OVERNIGHT

Linus pulled urgent x86 and io_uring patches that close resource leaks, fix a perf security hole leaking kernel addresses to userspace, and restore critical RCU read sections that were dropped mid-merge window.

infra 9 shipped 1-min read

Linux 3 days ago

SMB3 CLIENT FIXES LAND AS RC2 SWEEP CONTINUES

Linux 7.2-rc2 pushed a massive SMB3 client update overnight that closes a critical buffer overflow in ioctl_query_info and fixes broken symlink handling on mounted filesystems.

infra 11 shipped 1-min read

Linux 4 days ago

NETWORKING FIXES LAND AHEAD OF 7.2-RC3 AS MEMORY LEAKS AND BUFFER OVERREADS GET PLUGGED

The kernel is shipping critical fixes for in-flight packet handling, MAC address spoofing vectors, and heap overreads that could crash your network stack.

infra 14 shipped 1-min read

— or follow the whole beat:

Elsewhere on the wire

@cachyos about 4 hours ago

CACHYOS LINUX 7.2-RC3 SHIPS WITH HARDWARE FIXES AND EXPANDED LANGUAGE SUPPORT

CachyOS Linux 7.2-rc3-1 is live with Razer Blade speaker fixes and v4l2loopback updates, while the package installer now speaks Turkish and Azerbaijani.

infra 63 shipped 1-min read

Elixir & Phoenix about 4 hours ago

PHOENIX LIVE VIEW PATCHES SCHEME VALIDATION BYPASS

Phoenix LiveView 1.2.7 ships an emergency security fix for a scheme validation bypass that could let attackers inject malicious URLs into your application.

elixir 6 shipped 1-min read

@dotnet about 4 hours ago

RUNTIME FIXES DECIMAL AND BIGINTEGER ROUNDING BUGS THAT LOST PRECISION

Three critical numeric conversion bugs that silently corrupted precision in decimal, BigInteger, and floating-point math are now fixed across the stack.

dotnet 122 shipped 1-min read

@spring-projects about 4 hours ago

SPRING BOOT PLUGS FILE HANDLE LEAK IN IMAGE BUILDPACK

Spring Boot's image buildpack was leaking file handles and orphaning temp files when resolving missing builder images, but a fix just landed to clean up both the streams and the intermediate artifacts.

java 16 shipped 1-min read