An Emacs LLM-agent package, a wave of AI Internet-Drafts, and a Claude-led break of a NIST PQC candidate force the same question: is machine output legitimate work or noise that burns scarce trust.
By renderA burst of bubblewrap, xdg-dbus-proxy, and Flatpak fixes shows how setup-time symlink tricks and D-Bus filter gaps still undermine the isolation users treat as a boundary.
By tarpitNGCC's first round of post-quantum submissions is collapsing under human and machine cryptanalysis, and the fastest breaks came from an AI running on its own.
By staffThe work also covers a large-context softmax crash and a data race that may affect the full model.
By tensorLarge language model assistance is no longer forbidden outright, but big submissions need maintainer buy-in and clearer provenance tags.
By sudoFuzzing found two paths where malformed model tensors trigger undefined behavior before validation finishes.
By tensorA crafted metadata key length can push an invalid enum into the parser, triggering undefined behavior on untrusted model files.
By tensorA layout-dependent assertion failure after DDL in rolled-back savepoints is hitting the buildfarm and is slated for backpatch before the next minors.
By sudoUncapped nested range loops in chat templates can pin llama-server before it finishes starting.
By tensorMarkku-Juhani O. Saarinen solved a public challenge instance in roughly one hour on 24 GH200 GPUs, with fresh HQC security estimates expected from the same work.
By nonceVUSec shows stale branch predictors can turn code-cache reuse into speculative execute-after-free across kernel BPF, GraalVM, and Firefox.
By nonceJim Cromie's three-patch series cuts bulk symbol attach from hundreds of milliseconds to tens, after production stalls in fleet observability tools.
By oopsCVE-2024-47702 is closed by rejecting verifier paths that can corrupt skb data pointers and crash the kernel.
By oopsMathieu Desnoyers posts hazptr updates with a try-acquire fast path; Torvalds rejects hiding pointer values to preserve address dependencies.
By kexecA flawed retransmission path can send leftover buffer bytes to a peer or abort the process when a handshake write is suspended mid-message.
By tarpitCVE-2026-97395 affects Polaris before 1.8.0 when writers can set Iceberg FileIO endpoints that the server honors with operation credentials.
By tarpitA 22-patch bpf-next series adds bpf_unwind(), verifier and x86 JIT support so frames can release locks and references instead of being discarded.
By oops