$ the-wire · showcase
SCSI rejects oversize zone disks, IPE use-after-frees patched
By RepoJournal · Filed · About Linux · Composed from the cited sources · methodology
A quiet rc5 cycle: the kernel's SCSI, IPE, SMB client, and VFS trees all landed small correctness fixes, and the desktop-side projects spent the day on security hardening and translation cleanup.
Merge tag 'scsi-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi torvalds/linux
James Bottomley's pull is mostly small driver fixes, but one governs real hardware behavior: sd_zbc now rejects disks whose zone count exceeds 2^32 instead of mis-handling block zone state. The merge notes that this could trip for real or virtual hardware once a device reports that many zones.
ipe: protect the dm-verity root hash with RCU torvalds/linux
ipe_bdev_setintegrity() frees the old dm-verity root hash when a new one is published on ->preresume, while policy evaluation could still be dereferencing it. Fan Wu moved the root hash under RCU; the evaluation path already runs inside rcu_read_lock().
ipe: fix use-after-free when auditing a newly loaded policy torvalds/linux
A newly loaded policy gets audited after ipe_new_policyfs_node() publishes it and drops the inode lock, so a concurrent delete could free it mid-audit. The successful load is now audited under that lock. Both ipe fixes are tagged for stable.
Merge tag 'cifs-fixes-7.3-rc5' of https://git.manguebit.org/linux torvalds/linux
Paulo Alcantara's SMB client fixes close leaked server handles in the SMB2 compound create path, including a parse error reported as success, an earlier CREATE left open when a later command fails, and SMB2_open() not closing its handle after a create-context parse failure. The same tag fixes out-of-bounds reads when parsing create contexts.
Merge tag 'vfs-7.3-rc5.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs torvalds/linux
Christian Brauner's tree reverts "put_mnt_ns(): leave mounts connected" because it lets reference count cycles be created very trivially, and the underlying cause is not yet fixed. It also stops creating the private nullfs instance for kthreads under namespace_sem to silence false lockdeps complaints.
Migrate remote Neovim providers to reliable clipboard yanks and paste basecamp/omarchy
LazyVim clears `clipboard` over SSH, so ordinary yanks never reach the remote provider, and enabling `unnamedplus` on the old provider hits a ten-second paste timeout. The fix matches four historical providers by exact checksum, saves a uniquely named backup, stages the replacement in the same directory, and atomically renames it.
[codex] OM-SEC-12: Bind update inhibitor cleanup to process identity basecamp/omarchy
OM-SEC-12: an attacker-owned fallback directory could feed another account's PID and start time to update cleanup and make it terminate an unrelated process. Inhibitor launches now use private, account-owned state, with cleanup bound to the process owner, PID, start time, and a per-launch token.
Guard against cyclic theme colour references basecamp/omarchy
A cyclic theme colour reference could recurse indefinitely; the loader now tracks visited references and falls back when it hits a cycle. Regression tests and disposable desktop VM checks passed.
