$ cat linux/week/2026-09-14.log
the week in review · Sep 14 – Sep 20, 2026
Omarchy closes installer security holes, traces land in 7.3-rc2
By RepoJournal · composed from the cited sources · human-reviewed weekly · methodology
Three Omarchy hardening fixes and kernel tracing, cgroup, and PowerPC KVM fixes define the week.
Merge tag 'trace-v7.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace torvalds/linux
Steven Rostedt's tracing pull fixes user event fields being destroyed before the event is removed from visibility, where a failed removal can leave state inconsistent. If you tools against tracefs user events, that path is the one to re-test.
Merge pull request #7902 from dicemans/rdp-password-not-in-argv basecamp/omarchy
The Windows VM password no longer travels through the RDP client's argument list, where any local user could read it from process listings. The release notes say the fix keeps the password out of argv entirely.
Remove unsafe project bin PATH injection (#11336) basecamp/omarchy
Project bin directories are no longer injected into PATH, and legacy Mise trust grants are revoked and hardened. If your setup relied on that implicit path, you now declare the trust yourself.
[Security] Keep screen-recording state out of world-writable /tmp (#8374) basecamp/omarchy
Screen-recording state moves out of world-writable /tmp into the state directory, closing a path where another local process could tamper with a recording session's state.
Migrate to linux-omarchy except on T2 Macs basecamp/omarchy
Existing x86_64 systems migrate to linux-omarchy and linux-omarchy-headers, covering stock Linux, LTS, Zen, and both previous Panther Lake kernels. T2 Macs are excluded, and the old kernels stay installed for recovery.
Treat kernel headers as part of the base system basecamp/omarchy
Kernel headers are now part of the base system: the ISO installs matching headers for every selected kernel before hardware setup, and the NVIDIA, Xbox, Broadcom, Tuxedo, YT6801, and Cam Link installers drop their own kernel/header selection. DKMS consumers simply install their drivers.
Merge tag 'cgroup-for-7.3-rc3-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup torvalds/linux
The cgroup task iterator could pick up a dying task whose refcount had already hit zero and resurrect it, leading to a use-after-free when reading cgroup.procs. Tejun Heo's tag lands the fix in 7.3-rc3.
KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() torvalds/linux
by Amit Machhiwal
kvmhv_emulate_tlbie_all_lpid() drops mmu_lock without holding a reference on the nested-guest pointer it got from the IDR, so a concurrent vCPU can free it underneath. PowerPC Book3S HV hosts running nested guests carry the exposure.
$ ls linux/week/ # the briefings behind this review
Keep up with Linux in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.