Daily update · Aug 30–31, 2026
Linux 7.3-rc1: OpenRISC security fix, tracing and I2C corrections
The first 7.3 release candidate is out, along with fixes for an OpenRISC kernel memory access bug, several tracing use-after-free issues, and I2C controller quirks.
In brief
Linux 7.3-rc1 opens the 7.3 development cycle. This batch also includes a security fix for the OpenRISC architecture, multiple tracing and ring-buffer fixes, and assorted I2C, ARM, and Rust corrections.
Release
Linux 7.3-rc1 tagged
The first release candidate of the 7.3 development cycle was tagged.
Why it matters: This is the starting point for testing the merge window changes before the final 7.3 release.
Bug fixes
OpenRISC: close kernel memory access hole in or1k_atomic syscall
The or1k_atomic syscall swapped words at two user pointers without checking them or adding fault fixups, so a kernel address could be read and written directly. The fix adds access_ok() checks and handles faults safely.
Why it matters: On OpenRISC systems, an unprivileged process could previously use this syscall to read or modify kernel memory; the hole is now closed.
Tracing: fix use-after-free and error-path bugs
Several tracing fixes landed: trace_pipe readers could dereference freed ring-buffer pages after a sub-buffer size change; same-name hist triggers left a dangling list entry; user_events could copy a stale mm pointer into child processes; kthread_stop() was called on error pointers in the event self-test; and boot instance creation failures logged '(null)' instead of the instance name. Ring-buffer reader swap retry logic was also corrected.
Why it matters: These fix potential crashes or memory corruption in tracing paths involving runtime buffer resizing, named triggers, fork, and thread creation failures.
372f8534244da7318172aa33390f6bd8583d649bc7df3e5de0d3aed7b12c5eab74874d11a9a01be2834a
I2C: fix debugfs use-after-free and controller quirks
The core I2C adapter removal path could free debugfs state while a racing sysfs write still used it. Driver fixes also cover lost interrupts on HJMC3001 DesignWare controllers, target-register access on i.MX LPI2C controllers without target mode, frequency-table timing on IPQ5424, autosuspend cleanup on Qualcomm CCI, and a Device Tree channel-node leak in the mux core.
Why it matters: These changes prevent a crash during adapter removal and improve reliability of I2C on several Qualcomm, DesignWare, and NXP platforms.
b15b548d52b477549d01edec27c9445be86ba4f3fbccb65df98d49864821385c7af4e3b9
Rust: fix UB in Bounded conversions and build issues
A From<bool> conversion could create a signed Bounded value that violates its invariants and lead to undefined behavior. Other fixes keep Rust kernel builds working with CFI, LTO, inline helpers, and cross-architecture rusttest runs.
Why it matters: These are mostly build and safety fixes for the in-kernel Rust support; the Bounded fix removes a way for safe Rust code to reach undefined behavior.
7dd6343fc12729b03d1de967993f235c4af40bff7711c19b5febf432df1c1b0bab4a873fdea1bf38143f
ARM: PREEMPT_RT fault handling, debugfs lock, and Risc PC eBPF JIT
ARM now enables interrupts before sending signals for unhandled user faults, which is required on PREEMPT_RT. The page-table dump for user faults takes the mmap write lock to avoid a race with munmap(), and the eBPF JIT is disabled on Risc PC because its bus cannot do half-word accesses. ARM also stops reserving breakpoint type 0x03 for CFI unless CFI is in use.
Why it matters: These fix a PREEMPT_RT sleep-in-atomic bug, a potential use-after-free when user_debug is enabled, a broken eBPF JIT on the Risc PC, and give userspace debuggers a breakpoint type back on ARM.
Core kernel: revert locking guard change, fix eventfs and sample modules
A recent switch of cleanup guards to _irq variants was reverted after a fuzzing report found wrapped code that manually toggles interrupts. The eventfs code now initializes list heads before error paths can inspect them, two ftrace sample modules no longer pass ERR_PTR to kthread_stop(), and UML now uses asm-generic/timex.h instead of the host architecture header.
Why it matters: The revert avoids a subtle locking failure; the eventfs and sample fixes prevent false warnings and module-unload crashes; the UML change fixes builds on x86 hosts.
46094a7708b71704aaaf5d22d79fb758e7e26727b7618f4964f74d8f7288
Source commits56 entries +
ARM: 9473/1: kprobes: test: add MODULE_DESCRIPTION
Arnd Bergmann · May 5, 2026 · 1 files
ARM: 9477/1: Disable broken eBPF JIT on the Risc PC
Ethan Nelson-Moore · Jun 14, 2026 · 1 files
ARM: 9478/1: Remove references to removed CONFIG_CPU_ARM92x_CPU_IDLE options
Ethan Nelson-Moore · Jun 14, 2026 · 4 files
ARM: 9480/1: entry: expand comment in __switch_to
Linus Walleij · Jun 30, 2026 · 1 files
ARM: 9481/2: breakpoint: CFI breakpoints only on demand
Linus Walleij · Jul 4, 2026 · 1 files
ARM: 9483/1: select HAVE_POSIX_CPU_TIMERS_TASK_WORK
Karl Mehltretter · Jul 24, 2026 · 1 files
coccinelle: double_lock: improve performance when no double lock exists
Sang-Heon Jeon · Jul 25, 2026 · 1 files
coccinelle: misc: minmax: improve performance when no candidate exists
Sang-Heon Jeon · Jul 25, 2026 · 1 files
coccinelle: misc: minmax: drop unneeded parentheses
Julia Lawall · Jul 26, 2026 · 1 files
coccinelle: misc: minmax: check for the presence of if cases
Julia Lawall · Jul 26, 2026 · 1 files
coccinelle: misc: minmax: avoid unhelpful isomorphisms
Julia Lawall · Jul 26, 2026 · 1 files
coccinelle: mini_lock: improve performance when searching loops
Sang-Heon Jeon · Jul 27, 2026 · 1 files
ARM: 9484/1: enable interrupts when unhandled user faults are triggered
Xie Yuanbin · Jul 28, 2026 · 1 files
ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults
Xie Yuanbin · Jul 28, 2026 · 1 files
coccinelle: update Coccinelle website URL
相浦彰 / AIURA，AKIRA · Jul 30, 2026 · 3 files
openrisc: drop unneeded semicolon
Julia Lawall · Aug 1, 2026 · 1 files
coccinelle: api: check for macro context
Julia Lawall · Aug 2, 2026 · 1 files
i2c: imx-lpi2c: avoid accessing target registers on master-only controllers
Carlos Song · Aug 3, 2026 · 1 files
objtool/rust: add one more `noreturn` Rust function
Miguel Ojeda · Aug 5, 2026 · 1 files
tracing: Fix logged instance name on creation failure
Vincent Donnefort · Aug 7, 2026 · 1 files
coccinelle: misc: struct_size: drop unneeded parentheses
Sang-Heon Jeon · Aug 9, 2026 · 1 files
rust: jump_label: skip arch-specific asm in `testlib` builds
FUJITA Tomonori · Aug 9, 2026 · 1 files
scripts: coccinelle: devm_free: reduce false positives
Julia Lawall · Aug 9, 2026 · 1 files
rust: kernel: list: fix incorrect pop_back example comment
Nikolai Grlica · Aug 10, 2026 · 1 files
i2c: qcom-geni: update frequency table to fix timing parameters
Kathiravan Thirumoorthy · Aug 12, 2026 · 1 files
i2c: core: fix debugfs UAF on adapter removal
Vasileios Almpanis · Aug 12, 2026 · 1 files
i2c: qcom-cci: fix autosuspend cleanup
Guangshuo Li · Aug 12, 2026 · 1 files
tracing: Fix use-after-free with same-name named triggers
Hui Su · Aug 16, 2026 · 1 files
kbuild: rust: preserve unreachable traps with inline helpers
Miguel Ojeda · Aug 16, 2026 · 3 files
kbuild: rust: keep Rust objects out of Clang LTO with inline helpers
Miguel Ojeda · Aug 16, 2026 · 2 files
tracing: Fix crash passing ERR_PTR to kthread_stop()
Hui Su · Aug 17, 2026 · 1 files
tracing: Fix use-after-free in trace_pipe read on sub-buffer order change
Deepanshu Kartikey · Aug 17, 2026 · 1 files
um: Use asm-generic/timex.h over the host architecture one
Thomas Weißschuh · Aug 19, 2026 · 1 files
rust: cfi: disable function merging if CFI is enabled
Gary Guo · Aug 20, 2026 · 1 files
openrisc: fix arbitrary kernel memory access via or1k_atomic syscall
Ali Ahmet Memis · Aug 21, 2026 · 1 files
rust: num: restrict bool conversion to unsigned Bounded
Younes Akhouayri · Aug 22, 2026 · 1 files
coccinelle: remove obsolete pci_free_consistent.cocci
Sang-Heon Jeon · Aug 23, 2026 · 1 files
coccinelle: alloc_cast: drop removed allocators
Sang-Heon Jeon · Aug 23, 2026 · 1 files
coccinelle: zalloc-simple: drop the kmem_alloc rules
Sang-Heon Jeon · Aug 23, 2026 · 1 files
coccinelle: pool_zalloc-simple: drop the pci_pool_alloc rules
Sang-Heon Jeon · Aug 23, 2026 · 1 files
coccinelle: kfree_mismatch: drop vmalloc_exec
Sang-Heon Jeon · Aug 23, 2026 · 1 files
coccinelle: atomic_as_refcounter: drop atomic_long_dec_and_lock
Sang-Heon Jeon · Aug 23, 2026 · 1 files
coccinelle: ifnulldev_put: update outdated helper names
Sang-Heon Jeon · Aug 23, 2026 · 1 files
i2c: mux: Fix channel node leak on adapter add failure
Ahmad Byagowi · Aug 23, 2026 · 1 files
rust: kbuild: disambiguate `zerocopy_derive` for `rusttest`
Miguel Ojeda · Aug 23, 2026 · 1 files
locking: Revert switching guards to _irq_{disable,enable}()
Peter Zijlstra · Aug 24, 2026 · 2 files
eventfs: Initialize ei->children and ei->list in init_ei()
Deepanshu Kartikey · Aug 24, 2026 · 1 files
tracing: Fix retry exhaustion in simple ring buffer reader swap
Ivan Immanuel Shaji · Aug 25, 2026 · 1 files
ring-buffer: Stop remote reader update when page swap fails
Ivan Immanuel Shaji · Aug 25, 2026 · 1 files
samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-modify
Haotian Zhang · Aug 26, 2026 · 1 files
samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify
Haotian Zhang · Aug 26, 2026 · 1 files
i2c: designware: Enable interrupt mask workaround for HJMC3001
Hongbo Yao · Aug 26, 2026 · 1 files
tracing/user_events: Clear copied tracing state before fork duplication
Jérémy Jean · Aug 27, 2026 · 1 files
CREDITS/mailmap: add some info about Darrick J. Wong
Darrick J. Wong · Aug 28, 2026 · 2 files
coccinelle: ifnulldev_put: update error message
Julia Lawall · Aug 30, 2026 · 1 files
Linux 7.3-rc1
Linus Torvalds · Aug 30, 2026 · 1 files