All posts by corbet

Security updates for Friday

Post Syndicated from corbet original https://lwn.net/Articles/1018912/

Security updates have been issued by AlmaLinux (thunderbird), Debian (libbpf), Fedora (golang-github-openprinting-ipp-usb, ImageMagick, mingw-libsoup, mingw-poppler, and pgbouncer), SUSE (glib2, govulncheck-vulndb, libsoup-2_4-1, libxml2-2, mozjs60, ruby2.5, and thunderbird), and Ubuntu (linux, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-hwe-5.4, linux-ibm, linux-kvm, linux-oracle, linux-oracle-5.4, linux-aws, linux-aws-5.4, linux-gcp-5.4, linux-iot, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-hwe-6.8, linux-ibm-5.4, linux-oracle-5.15, openssh, and php-twig).

[$] Some __nonstring__ turbulence

Post Syndicated from corbet original https://lwn.net/Articles/1018486/

New compiler releases often bring with them new warnings; those warnings
are usually welcome, since they help developers find problems before they
turn into nasty bugs. Adapting to new warnings can also create disruption
in the development process, though, especially when an important developer
upgrades to a new compiler at an unfortunate time. This is just the
scenario that played out with the 6.15-rc3
kernel release
and the implementation of
-Wunterminated-string-initialization in GCC 15.

[$] DMA addresses for UIO

Post Syndicated from corbet original https://lwn.net/Articles/1017449/

The Userspace
I/O (UIO) subsystem
was first added to the kernel by
Hans J. Koch for the 2.6.32 release in 2007. Its purpose is to facilitate
the writing of drivers (mostly) in user space; to that end, it provides
access to a number of resources that user-space code normally cannot touch.
One piece that is missing, though, is DMA addresses. A proposal to
fill that gap
from Bastien Curutchet is running into some opposition,
though.

Security updates for Tuesday

Post Syndicated from corbet original https://lwn.net/Articles/1018444/

Security updates have been issued by AlmaLinux (java-1.8.0-openjdk, kernel, libxslt, mod_auth_openidc:2.3, and webkit2gtk3), Fedora (c-ares, giflib, jupyterlab, perl, perl-Devel-Cover, perl-PAR-Packer, prometheus-podman-exporter, python-notebook, python-pydantic-core, rpki-client, ruby, rust-adblock, rust-cookie_store, rust-gitui, rust-gstreamer, rust-icu_collections, rust-icu_locid, rust-icu_locid_transform, rust-icu_locid_transform_data, rust-icu_normalizer, rust-icu_normalizer_data, rust-icu_properties, rust-icu_properties_data, rust-icu_provider, rust-icu_provider_macros, rust-idna, rust-idna_adapter, rust-litemap, rust-ron, rust-sequoia-openpgp, rust-sequoia-openpgp1, rust-tinystr, rust-url, rust-utf16_iter, rust-version-ranges, rust-write16, rust-writeable, rust-zerovec, rust-zip, thunderbird, and uv), SUSE (erlang, erlang26, and govulncheck-vulndb), and Ubuntu (mosquitto).

EU OS: A European Proposal for a Public Sector Linux Desktop (The New Stack)

Post Syndicated from corbet original https://lwn.net/Articles/1018058/

The New Stack looks
at EU OS
, an attempt to create a desktop system for the European public
sector.

EU OS is not a brand-new Linux distribution in the traditional
sense. Instead, it is a proof-of-concept built atop Fedora’s
immutable KDE Plasma spin (Kinoite). EU OS takes a layered approach
to customization. The project’s vision is to provide a standard,
adaptable Linux base that can be extended with national, regional
or sector-specific customizations, making it suitable for a wide
range of European public sector needs.

[$] The problem of unnecessary readahead

Post Syndicated from corbet original https://lwn.net/Articles/1016860/

The final session in the memory-management track of the 2025 Linux Storage,
Filesystem, Memory-Management, and BPF Summit was a brief, last-minute
addition run by Kalesh Singh. The kernel’s readahead mechanism is
generally good for performance; it ensures that data is present by the time
an application gets around to asking for it. Sometimes, though, readahead
can go a little too far.

[$] Memory controller performance improvements

Post Syndicated from corbet original https://lwn.net/Articles/1016856/

The kernel’s memory controller works within the control-group mechanism to
enforce memory-usage limits on groups of processes. This component has
often had performance problems, so there is continual interest in
optimizing it. Shakeel Butt led a session during the memory-management
track of the 2025 Linux Storage, Filesystem, Memory-Management, and BPF
Summit to look at the current state of the memory controller and what can
be done to reduce its overhead.

[$] Improvements for the contiguous memory allocator

Post Syndicated from corbet original https://lwn.net/Articles/1016844/

As a system runs, its memory becomes fragmented; it does not take long
before the allocation of large, physically contiguous memory ranges becomes
difficult or impossible. The contiguous memory
allocator (CMA)
is a kernel subsystem that attempts to address this
problem, but it has never worked as well as some would like. Two sessions
in the memory-management track at the 2025 Linux Storage, Filesystem,
Memory-Management, and BPF Summit looked at how CMA can be improved; the
first looked at providing guaranteed allocations, while the second
addressed some inefficiencies in CMA.

MITRE Warns CVE Program Faces Disruption (Security Week)

Post Syndicated from corbet original https://lwn.net/Articles/1017565/

Security Week is one of several outlets reporting
that the funding for the CVE program at MITRE disappears as of
April 16.

Maintained by MITRE Corporation, a not-for-profit organization that
operates federal R&D centers, the CVE program is funded through
multiple channels, including the U.S. government, industry
partnerships, and international organizations.

Earlier this month, in anticipation of the US government funding
cuts, MITRE initiated layoffs that affected more than 400 employees
in its Virginia office. The cuts were ordered after the Trump
administration announced more than $28 million in canceled
contracts for the company.

[$] Automatic tuning for weighted interleaving

Post Syndicated from corbet original https://lwn.net/Articles/1016842/

It is common, on NUMA systems, to try to allocate all memory on the local
node, since it will be the fastest. That is not the only possible policy,
though; another is weighted interleaving,
which seeks to distribute allocations across memory controllers to maximize
the bandwidth utilization on each. Configuring such policies can be
challenging, though. At the 2025 Linux Storage, Filesystem,
Memory-Management, and BPF Summit, Joshua Hahn ran a session in the
memory-management track about how that configuration might be automated.

[$] The state of the memory-management development process, 2025 edition

Post Syndicated from corbet original https://lwn.net/Articles/1016724/

Andrew Morton, the lead maintainer for the kernel’s memory-management
subsystem, tends to be quiet during the Linux Storage, Filesystem,
Memory-Management, and BPF Summit, preferring to let the developers work
things out on their own. That changes, though, when he leads the
traditional development-process session in the memory-management track. At
the 2025 gathering, this discussion covered a number of ways in which the
process could be improved, but did not unearth any significant problems.