Who contributed to Linux on August 5, 2026?

5 developers shipped this update, including Lincoln Wallace, Linus Torvalds, lukewalker2010, defer, and dhh.

What were the notable Linux updates?

ima: fix out-of-bounds read in xattr_verify(), Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost, and Merge tag 'locking-urgent-2026-08-04' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.

Linux

The kernel, distros, and the rigs of the moment

Pick a date

Topics: Infrastructure Full archive →

The Wire · Showcase

KERNEL FIXES INTEGER UNDERFLOW IN IMA, VHOST/VDPA PULLS CRITICAL PATCHES

By RepoJournal · Filed 06:57 UTC on August 5, 2026 · About Linux

5 people shipped this

Linus Torvalds @torvalds 4 cited

Lincoln Wallace @locnnil 1 cited

lukewalker2010 @lukewalker2010

defer @defer

dhh @dhh

Linux mainline absorbed a batch of urgent fixes overnight: an integer underflow in IMA's xattr verification that could trigger out-of-bounds reads, plus critical vhost-scsi and futex race condition patches.

The IMA fix [1] addresses a type mismatch in xattr_verify() where sizeof() returns size_t but gets mixed with signed arithmetic, causing underflows on truncated xattrs instead of proper bounds checking. This same fix lands again in the integrity merge [4], which bundles it with LSM hook instantiation work. The vhost/vdpa pull [2] rejects feature changes after endpoint setup, flushes backends after device ioctls, and validates T10 PI scatterlist counts. Futex also got attention: a robust futex exit race [3] that could leave processes in an inconsistent state. On the NFS desk [5], three fixes landed: pinning 'struct nfs_server' during FREE_STATEID calls, proper refcount decrements on allocation failures, and corrected size accounting for nfs4_listxattr. These are all release-blocking material rolled up before 7.2 final.

Action items

→ Rebase against the IMA and integrity fixes if you maintain kernel security tooling torvalds/linux [immediate]
→ Test vhost-scsi workloads if running virtualization; validate feature negotiation still works post-patch torvalds/linux [plan]
→ Monitor NFS clients for listxattr edge cases; the size accounting fix may shift behavior slightly torvalds/linux [monitor]

References

[1] ima: fix out-of-bounds read in xattr_verify() torvalds/linux
[2] Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost torvalds/linux
[3] Merge tag 'locking-urgent-2026-08-04' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip torvalds/linux
[4] Merge tag 'integrity-v7.2-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity torvalds/linux
[5] Merge tag 'nfs-for-7.2-3' of git://git.linux-nfs.org/projects/anna/linux-nfs torvalds/linux

Quick answers

What shipped in Linux on August 5, 2026?: Linux mainline absorbed a batch of urgent fixes overnight: an integer underflow in IMA's xattr verification that could trigger out-of-bounds reads, plus critical vhost-scsi and futex race condition patches. In total, 17 commits and 3 pull requests landed.
Who contributed to Linux on August 5, 2026?: 5 developers shipped this update, including Lincoln Wallace, Linus Torvalds, lukewalker2010, defer, and dhh.
What were the notable Linux updates?: ima: fix out-of-bounds read in xattr_verify(), Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost, and Merge tag 'locking-urgent-2026-08-04' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.

KERNEL MEMORY FLUSH BUG HITS PAGE TABLE RECLAIM, SOC FIXES LAND ACROSS QUALCOMM AND BROADCOM

A critical memory management bug in direct page table reclaim is flushing the wrong address, potentially corrupting TLB state on architectures that depend on precise invalidation.

infra 20 shipped

Linux Aug 4

FSVERITY REGRESSION FIXED, CGROUP TIMER BUG PATCHED, OMARCHY SHELL RESTART UNCONDITIONAL

Linus pulled three critical filesystem and scheduler fixes overnight while Omarchy shipped a shell restart mandate that kills stale QML loading.

infra 20 shipped

Linux Aug 3

LINUS PULLS RISC-V MEMORY FIX AND VFS SAFETY PATCH INTO 7.2-RC6

The kernel hit three critical fixes overnight across RISC-V, VFS, and s390 as 7.2-RC6 tightens before final release.

infra 10 shipped

Linux Aug 2

I2C FIXES LAND FOR 7.2-RC6, OMARCHY NETWORK SETTINGS SHIP

Kernel i2c subsystem gets probe ordering and power management fixes across three drivers, while Omarchy adds DNS and QR code controls to its Setup menu.

infra 31 shipped

Elsewhere on the wire

AI Agents Aug 6

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

ai-agents 54 shipped

Local LLMs Aug 6

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.

+10

llms 240 shipped

@CachyOS Aug 6

WIKI TRANSLATION ROLLBACK CHAOS, MIRROR STACK HOLDING STEADY

CachyOS wiki maintainers are caught in a revert loop over German translations while the status infrastructure logs 55 commits without incident.

infra 57 shipped

Elixir & Phoenix Aug 6

ELIXIR BUMPS ZIZMOR SECURITY SCANNER TO 1.28.0

The Elixir repo updated its CI security action overnight, pulling in the latest zizmor static analysis tooling.

elixir 1 shipped

Want every project, not just this one?

Follow Linux