Omarchy v4.0.4 releases a custom Linux kernel optimized for desktop responsiveness, gaming compatibility, and hardware reliability. The update improves Btrfs performance, power management, and fixes audio, touchpad, display, and startup issues across various systems.
A developer asks about handling eBPF verifier packet pointer tracking limits when dealing with high-volume socket drops, specifically regarding bypassing userspace layer 7 bottlenecks through layer 4 transport splicing techniques.
Gravity Linux is a project using clean-room reverse engineering to bring Linux support to Apple Silicon M4 Macs, with the goal of upstreaming this support into the mainline Linux kernel and other distributions. The team plans to release their first version soon.
A developer has released an early preview of GEFS, a crash-safe copy-on-write file system originally written for 9front, now being ported to OpenBSD. The port is not production-ready and data loss is expected, but remaining issues are understood and the code is available for testing and development.
A security researcher exploited a public Linux kernel bug in Google's kernelCTF challenge by manipulating CPU TLB shootdown behavior to maintain a stale memory mapping, then convinced the kernel to recycle the underlying physical page as a page table, ultimately gaining control to retrieve the flag. The exploit leveraged existing public vulnerability details rather than discovering a new bug.
A security team reduced eBPF agent CPU costs by ~90% through inode-based memoization, caching policy lookups instead of repeatedly walking directory trees for file access checks. The optimization stores mount namespace, mount ID, and inode number as cache keys to avoid redundant path traversals, particularly benefiting applications like Postgres that repeatedly access files in the same directory subtree.
Apple released iOS 27 with over 100 security fixes and iOS 26.7 with over 80 fixes, addressing kernel vulnerabilities including potential root access and Bluetooth remote code execution. No active exploits are known, but unpatched devices are now at risk following the publication of vulnerability details.
Matthew Macy was contracted to port WireGuard into FreeBSD's kernel for Netgate's routers, but his implementation contained numerous bugs and security issues that went largely unreviewed before being committed to FreeBSD 13.0. WireGuard founder Jason Donenfeld discovered the problems and, along with Kyle Evans and Matt Dunwoodie, replaced nearly all of Macy's code in an intensive week-long effort to fix critical issues before release.
A developer discovered that enabling swap in production caused Go's garbage collector to experience 40ms stop-the-world pauses when GC metadata was evicted to swap, resulting in major page faults during collection cycles. The issue stems from the kernel evicting least-recently-accessed pages to swap under memory pressure, forcing the GC to incur costly disk I/O during critical pause phases.
A security researcher describes OEMpocalypse, an exploitation strategy that takes unprivileged Android apps to root on Samsung, Xiaomi, Oppo, OnePlus, and Realme devices by targeting page Use-After-Free vulnerabilities in OEM-specific kernel drivers combined with OEM-specific sandbox escapes. The approach prioritizes reliability, portability, and universal coverage across multiple device manufacturers and models.
FreeBSD developers discovered remaining GPL code in their kernel despite efforts to remove all copyleft software, including GPL snippets in a header file copied from Linux for Qualcomm SoCs and in the Device Tree. However, most GPL pieces are also licensed under BSD, which satisfies the project's goal of avoiding copyleft licensing.
A Go developer discovered that enabling swap in production caused severe garbage collector stop-the-world pauses of up to 40ms when GC metadata pages were evicted to swap storage, with the pauses caused by page faults during garbage collection cycles reading metadata that had been moved to disk.
Xiaomi Book Pro 14 2026 requires Linux kernel 7.1.5 and kernel boot parameter fixes to resolve GPU corruption and keyboard issues on CachyOS. Disabling Xe display power-saving features (PSR, panel replay, FBC, DC) is necessary to prevent framebuffer corruption on newer kernel versions.
The article discusses challenges in testing race conditions in multi-threaded software, particularly in the Linux kernel, and presents MAccConc, a tooling suite that automatically explores possible thread interleavings to help discover and verify concurrency bugs. The tools include automatic testing of all possible interleavings, a terminal UI, and a GUI for manual exploration.
A technique for executing ELF binaries in memory without creating named files uses O_TMPFILE to allocate an anonymous inode and execveat(AT_EMPTY_PATH) to execute it, leaving only a /tmp/#N (deleted) trace in process telemetry. The method works on Linux 3.19+ by bypassing directory entry creation, making it invisible to file monitoring tools like inotify and fanotify.
A repository containing a RISC-V instruction set emulator with Linux kernel support, including an rv32ima emulator, minimal device emulation, build configurations for a custom Linux kernel, device tree definitions, and init programs needed to boot a complete Linux system from scratch.
A verification project in September 2026 confirmed that a 166-page Lean formalization of claimed finite-time blowup for the 3D Navier–Stokes equations passes kernel checks across three independent environments, depending only on three standard axioms with no additional assumptions. The verification does not confirm the correctness of the underlying proof but only that the machine-checkable formalization is consistent and axiomatically sound.
The Haiku project released its August 2026 report highlighting recent development work including live audio output switching in the Media Kit, continued Bluetooth support improvements, and enhanced USB audio device compatibility. The update also covers progress on CPU architecture support, power management, and kernel fixes across multiple platforms.
A mock interview with an early UNIX creator discusses the system's development, debugging approaches, and influences from Multics. The interviewee reflects on early UNIX versions, preferences for print debugging over debuggers, and dismisses Multics despite acknowledging it influenced certain UNIX design decisions like the file system.
Andreas Hindborg has developed a Rust implementation of the null block driver (rnull) that achieves feature parity with the existing C version, demonstrating that simple block drivers can now be written using the kernel's Rust APIs. The driver uses Rust abstractions and pinning mechanisms to manage initialization and device operations, with each block device represented by a NullBlkDevice structure that implements the Operations trait for handling disk requests.