Linux has patched a data loss bug present since 2023 that silently corrupted user-space writes when transparent hugepages were enabled under cgroup limits. The bug affected production systems including Polars users and was fixed with a single-line code change, now being backported to stable kernel series.
An interactive guide to macOS architecture that visualizes kernel components and links directly to open source code published by Apple on GitHub, allowing users to explore the system from high-level overview to source files.
Vinix is a modern operating system written in V that boots to a desktop in seconds using only 100 MB of RAM and 1 GB of disk space. It runs Linux binaries natively through a compatible syscall interface, features optional application sandboxing, and includes custom GPU drivers for Apple Silicon Macs with M1, M3, M4, and M5 support planned.
A reverse-engineered out-of-tree Linux driver for the Cavium CN6640-SNIC10E 10GbE SmartNIC exposes the card as two independent network interfaces over PCIe by programming unprogrammed PEM inbound registers. The card runs OpenWrt from RAM and achieves line-rate TX performance (9.7–9.8 Gb/s) with zero-copy while the host driver manages packet forwarding between shared-memory rings and kernel network interfaces.
On April 30, 2026, a Linux kernel 0-day vulnerability (CVE-2026-31431, 'Copy Fail') enabling local privilege escalation was publicly disclosed with a working exploit available. The team mitigated the vulnerability within an hour by unloading the vulnerable algif_aead kernel module on Ubuntu servers, while Kubernetes systems running Flatcar Container Linux were unaffected due to disabled kernel configuration.
A Docker container is a Linux sandbox that isolates processes using kernel features like namespaces and cgroups, allowing them to run directly on the host kernel with a restricted view of the system. Unlike virtual machines, containers share the host kernel and boot instantly with minimal memory overhead. Containers require a Linux VM to run on macOS and Windows since those kernels lack the necessary isolation mechanisms.
Omarchy 4.0.4 now uses its custom linux-omarchy kernel by default instead of the standard Arch kernel, offering improvements in desktop responsiveness, gaming compatibility, Btrfs performance, and hardware support across various systems including Dell XPS machines.
Omarchy v4.0.4 releases a custom Linux kernel optimized for desktop responsiveness, gaming compatibility, and hardware reliability. The update improves Btrfs performance, power management, and fixes audio, touchpad, display, and startup issues across various systems.
A developer asks about handling eBPF verifier packet pointer tracking limits when dealing with high-volume socket drops, specifically regarding bypassing userspace layer 7 bottlenecks through layer 4 transport splicing techniques.
Gravity Linux is a project using clean-room reverse engineering to bring Linux support to Apple Silicon M4 Macs, with the goal of upstreaming this support into the mainline Linux kernel and other distributions. The team plans to release their first version soon.
A developer has released an early preview of GEFS, a crash-safe copy-on-write file system originally written for 9front, now being ported to OpenBSD. The port is not production-ready and data loss is expected, but remaining issues are understood and the code is available for testing and development.
A security researcher exploited a public Linux kernel bug in Google's kernelCTF challenge by manipulating CPU TLB shootdown behavior to maintain a stale memory mapping, then convinced the kernel to recycle the underlying physical page as a page table, ultimately gaining control to retrieve the flag. The exploit leveraged existing public vulnerability details rather than discovering a new bug.
A security team reduced eBPF agent CPU costs by ~90% through inode-based memoization, caching policy lookups instead of repeatedly walking directory trees for file access checks. The optimization stores mount namespace, mount ID, and inode number as cache keys to avoid redundant path traversals, particularly benefiting applications like Postgres that repeatedly access files in the same directory subtree.
Apple released iOS 27 with over 100 security fixes and iOS 26.7 with over 80 fixes, addressing kernel vulnerabilities including potential root access and Bluetooth remote code execution. No active exploits are known, but unpatched devices are now at risk following the publication of vulnerability details.
Matthew Macy was contracted to port WireGuard into FreeBSD's kernel for Netgate's routers, but his implementation contained numerous bugs and security issues that went largely unreviewed before being committed to FreeBSD 13.0. WireGuard founder Jason Donenfeld discovered the problems and, along with Kyle Evans and Matt Dunwoodie, replaced nearly all of Macy's code in an intensive week-long effort to fix critical issues before release.
A developer discovered that enabling swap in production caused Go's garbage collector to experience 40ms stop-the-world pauses when GC metadata was evicted to swap, resulting in major page faults during collection cycles. The issue stems from the kernel evicting least-recently-accessed pages to swap under memory pressure, forcing the GC to incur costly disk I/O during critical pause phases.
A security researcher describes OEMpocalypse, an exploitation strategy that takes unprivileged Android apps to root on Samsung, Xiaomi, Oppo, OnePlus, and Realme devices by targeting page Use-After-Free vulnerabilities in OEM-specific kernel drivers combined with OEM-specific sandbox escapes. The approach prioritizes reliability, portability, and universal coverage across multiple device manufacturers and models.
FreeBSD developers discovered remaining GPL code in their kernel despite efforts to remove all copyleft software, including GPL snippets in a header file copied from Linux for Qualcomm SoCs and in the Device Tree. However, most GPL pieces are also licensed under BSD, which satisfies the project's goal of avoiding copyleft licensing.
A Go developer discovered that enabling swap in production caused severe garbage collector stop-the-world pauses of up to 40ms when GC metadata pages were evicted to swap storage, with the pauses caused by page faults during garbage collection cycles reading metadata that had been moved to disk.
Xiaomi Book Pro 14 2026 requires Linux kernel 7.1.5 and kernel boot parameter fixes to resolve GPU corruption and keyboard issues on CachyOS. Disabling Xe display power-saving features (PSR, panel replay, FBC, DC) is necessary to prevent framebuffer corruption on newer kernel versions.