Linux Kernel Daily: Network DoS Hardening and Btrfs Zoned Fixes
Networking dominates with two denial-of-service fixes for deep NSH segmentation recursion and TLS empty-record floods, alongside a broader net fixes pull. Btrfs also lands zoned-mode reliability and leak fixes.
Duration: PT2M25S
Episode overview
This episode is a short developer briefing from Linux Kernel Daily.
It explains recent repository work in plain language.
- Show: Linux Kernel Daily
- Published: 2026-11-13T06:01:48Z
- Audio duration: PT2M25S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
It’s Friday, November 13th, 2026, and you’re listening to Linux Kernel Daily.
The headline is network resilience. Two separate fixes close denial-of-service paths where a peer can keep the kernel busy or overflow its stack with cheap, crafted traffic.
First, Network Service Header segmentation. Research tooling showed a large offload packet built from stacked eight-byte headers can recurse through the MAC segmentation path once per header. A sixty-four kilobyte packet can hold roughly eight thousand of them, enough to hit the stack guard page and panic. That…
Second, Transport Layer Security empty records. The standard allows zero-length data records for cover traffic, but there was no bound on back-to-back processing. A sender streaming them faster than decryption keeps the receiver in the kernel, starves signals, grows the peek queue, and for read-socket consumers like…
Separately, Btrfs lands zoned-mode reliability fixes: correct active-zone counting, requeueing block groups when a zone reset bails out, avoiding underflow in unusable space accounting, plus a z-std workspace leak fix and tree-checker hardening.
Also notable, a physical-layer fix for BASE-T-1 Ethernet prevents…
Nearby episodes from Linux Kernel Daily
- SMB Data Loss Fix and ARM64 Reliability Push
- VFS Reclaim, Pipe Simplification, and Mount Races
- Page Allocator Races and Filesystem Hardening
- Keys and Probe Safety Hardening
- Weekly Recap - Storage Hardening and Core Stabilization
- Core CPU and Storage Stabilization for 7.4
- Filesystem Hardening and Driver Stabilization
- 7.4 Stabilization Across Arm, NVMe, and Filesystems