RepoJournal
Linux Linux
125 wires and counting

$ follow Linux

Keep up with Linux in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-08-05
stories 20
RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

KERNEL FIXES INTEGER UNDERFLOW IN IMA, VHOST/VDPA PULLS CRITICAL PATCHES

By RepoJournal · Filed · About Linux · Composed from the cited sources · methodology

Linus Torvalds Lincoln Wallace lukewalker2010 defer dhh
5 people shipped this
Linus Torvalds @torvalds 4 cited Lincoln Wallace @locnnil 1 cited lukewalker2010 @lukewalker2010 defer @defer dhh @dhh

Linux mainline absorbed a batch of urgent fixes overnight: an integer underflow in IMA's xattr verification that could trigger out-of-bounds reads, plus critical vhost-scsi and futex race condition patches.

The IMA fix [1] addresses a type mismatch in xattr_verify() where sizeof() returns size_t but gets mixed with signed arithmetic, causing underflows on truncated xattrs instead of proper bounds checking. This same fix lands again in the integrity merge [4], which bundles it with LSM hook instantiation work. The vhost/vdpa pull [2] rejects feature changes after endpoint setup, flushes backends after device ioctls, and validates T10 PI scatterlist counts. Futex also got attention: a robust futex exit race [3] that could leave processes in an inconsistent state. On the NFS desk [5], three fixes landed: pinning 'struct nfs_server' during FREE_STATEID calls, proper refcount decrements on allocation failures, and corrected size accounting for nfs4_listxattr. These are all release-blocking material rolled up before 7.2 final.

Action items

References

  1. [1] ima: fix out-of-bounds read in xattr_verify() torvalds/linux ↗
  2. [2] Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost torvalds/linux ↗
  3. [3] Merge tag 'locking-urgent-2026-08-04' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip torvalds/linux ↗
  4. [4] Merge tag 'integrity-v7.2-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity torvalds/linux ↗
  5. [5] Merge tag 'nfs-for-7.2-3' of git://git.linux-nfs.org/projects/anna/linux-nfs torvalds/linux ↗

$ ls linux/reviews/ # the step-back reads

the week in review Omarchy closes installer security holes, traces land in 7.3-rc2 the month in review Linux 7.2 closes and 7.3 opens amid kernel hardening and Omarchy's security push
Topics: Infrastructure Full archive → Weekly reviews →

Quick answers

What shipped in Linux on August 5, 2026?
Linux mainline absorbed a batch of urgent fixes overnight: an integer underflow in IMA's xattr verification that could trigger out-of-bounds reads, plus critical vhost-scsi and futex race condition patches. In total, 17 commits and 3 pull requests landed.
Who contributed to Linux on August 5, 2026?
5 developers shipped this update, including Lincoln Wallace, Linus Torvalds, lukewalker2010, defer, and dhh.
What were the notable Linux updates?
ima: fix out-of-bounds read in xattr_verify(), Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost, and Merge tag 'locking-urgent-2026-08-04' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.
♥

$ log Linux --recent

Btrfs filesystem IDs stabilize again in 7.3-rc3 2 shipped SMB client fixes land for 7.3, Elsewhen becomes a default Omarchy plugin 30 shipped TCP fast path tightens ACK validation, ALSA fixes a use-after-free 17 shipped PowerPC KVM fixes land as Omarchy closes two reset and path bugs 8 shipped

$ log --all # elsewhere on the wire

@openclaw Cold-start Gateway diagnostics stop crying wolf, doctor repairs plugin drift Agentic Coding Cline desktop bundles shrink, goose unblocks its own clicks

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Anthropic OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.