$ the-wire · showcase
Linux 7.3-rc3 fixes span netfs, printk, Landlock, and a namespace use-after-free
By RepoJournal · Filed · About Linux · Composed from the cited sources · methodology
Linus Torvalds merged a batch of 7.3-rc3 fix trees covering an uninitialized return in netfs unbuffered writes, printk kthread wakeups, Landlock UAF and NULL deref, plus a namespace reference bug that can sleep under the RCU read lock.
The vfs-7.3-rc3.fixes pull addresses netfs unbuffered and direct I/O paths: an uninitialized return value in netfs_unbuffered_write() when preparing the first subrequest fails, partial unbuffered/DIO writes now return the amount transferred rather than an error, i_size is updated with bytes actually written when a partial transfer ends in error, and a subrequest reference leak is closed [1].
Separately, the printk tree for 7.3-rc3 switches nbcon_irq_work to IRQ_WORK_LAZY for waking printk kthreads, flushes pending irq_work before destroying printk kthreads, drops a redundant WARN() when a kthread can't be created, and fixes a typo [2]. The Landlock pull fixes a use-after-free and a lockdep assert NULL dereference, and truncates too-long strings printed by a Landlock tracepoint, with most of the change coming from new tests [3]. Mickaël Salaün describes it as fixing "a use-after-free and a lockdep assert NULL dereferencing" [3].
nstree has the sharper one: legitimize_ns() takes a reference on the candidate namespace before may_list_ns() decides whether the caller may see it, and the __free(ns_put) cleanup on the denied path can drop the last reference to a mount namespace while the RCU read lock is still held, where put_mnt_ns() may sleep [4]. The commit notes this is the same problem fixed for the put_user() path by 2ec2aff3c8e2 [4]. The virtio tree lands 27 commits that Michael Tsirkin summarizes as "Just a ton of small fixes all over the place," including vduse compat ioctl handling, virtio_input callback ordering and reset-on-failure, plus virtio and virtio-rng MAINTAINERS updates [5].
On the Omarchy side, basecamp-cli is now a lazy-installed mise tool mirroring the hey-cli stub, so the wrapper in ~/.local/bin installs and upgrades on first run and the CLI tracks releases instead of going stale as a manually dropped binary [6]. The Hermes Desktop installer is fixed: _write_desktop_build_stamp moved from hermes_cli.main to hermes_cli.main_desktop, so installing Hermes Desktop 2026.9.7 through AI → Hermes raised an ImportError before recording the build stamp and launching the app, and the fix imports from main_desktop when that module exists while retaining the old import for earlier releases [7][8]. Omarchy also saw one item reverted as premature: dhh said "Lots of great discussions, but it's for Omarchy Cinque, if it happens. This repo is for Quattro for now" [9].
Action items
- → Rebase netfs or DIO-heavy kernel work onto 7.3-rc3 once tagged torvalds/linux [plan]
- → Audit kernels carrying the nstree legitimize_ns() ordering bug before 2ec2aff3c8e2-style backports torvalds/linux [monitor]
- → Re-run Hermes Desktop installs now that the build-stamp import is patched basecamp/omarchy [plan]
- → Confirm basecamp-cli resolves through the ~/.local/bin mise wrapper on first run basecamp/omarchy [monitor]
References
- [1] Merge tag 'vfs-7.3-rc3.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs ↗ torvalds/linux
- [2] Merge tag 'printk-for-7.3-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/printk/linux ↗ torvalds/linux
- [3] Merge tag 'landlock-7.3-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux ↗ torvalds/linux
- [4] nstree: check listing permission before taking a namespace reference ↗ torvalds/linux
- [5] Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost ↗ torvalds/linux
- [6] Add basecamp (basecamp-cli) as a lazy-installed mise tool (#10943) ↗ basecamp/omarchy
- [7] Fix Hermes desktop installation and align menu icons ↗ basecamp/omarchy
- [8] Merge pull request #10846 from omacom/fix-hermes-desktop-stamp-import ↗ basecamp/omarchy
- [9] Premature to have this included like this ↗ basecamp/omarchy
