Linux Kernel: Merge Window Cleanup Hits Use-After-Free Bugs Across the Stack
This late release-candidate cycle pulled together fixes from ksmbd, DRM, VFS, XFS, Xen, GPIO, and ACPI trees, with a clear cross-cutting theme: use-after-free and reference-counting bugs in file-serving and driver subsystems, plus a steady stream of boundary-check hardening across the tree.
Duration: PT2M44S
Episode overview
This episode is a short developer briefing from Linux Kernel.
It explains recent repository work in plain language.
- Show: Linux Kernel
- Published: 2026-07-04T13:11:02Z
- Audio duration: PT2M44S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good day, and welcome to Linux Kernel briefing for July 4th, 2026.
The signal in today's merges is memory safety. Across completely unrelated subsystems, maintainers are converging on the same class of bugs: use-after-free, reference-counting races, and missing bounds checks — and fixing them right before this release solidifies.
Start with ksmbd, the in-kernel SMB server. Steve French's pull, merged by Linus in commit 1e9cdc2, is dominated by use-after-free fixes in durable handle reconnect, session supersede, and oplock handling. Several commits fix ownership and lifetime races where a stale session or file reference could be used by a…
That same theme shows up in the VFS pull, commit 71dfdfb: AFS gets fixes for null pointer dereferences and refcount leaks, cachefiles fixes a double file-put and a double-unlock bug, and iomap and netfs get several page-extraction and writeback-locking fixes. And it shows up again in Xen fixes, commit 4dbc94b, where…
The second theme is defensive hardening against malformed or crafted input. ksmbd rejects undersized security descriptor DACLs and validates ACE data before parsing. VFS fixes stop minix and freevxfs from crashing on crafted disk…
Smaller…
Nearby episodes from Linux Kernel
- Breaking Up the Device ID Header Monolith
- Low-Level Architecture Overhaul
- Weekly Recap - Timer Infrastructure Modernization
- Late-Cycle Maintainer Transition and Hardware Fixes
- Memory Safety and Resource Management Fixes
- Release Candidate Stabilization Push
- Security Fix and Late-Stage Bug Resolution
- Critical Memory Safety and Validation Fixes