OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability.

https://openssh.com/releasenotes.html#10.6p2

If you operate a Linux system that uses musl libc without PAM (Alpine Linux is one example) then stop reading and set PasswordAuthentication=no or disable SSH for these systems IMMEDIATELY.

This vulnerability does not exist on non-Linux systems, Linux/glibc systems and Linux systems that use PAM for password authentication.

We consider the root cause of this bug to be outside OpenSSH itself, but we're in a good position to deliver a mitigation quickly.

We are making this release as fast as possible (we learned of the problem yesterday) because we have recently observed multiple cases of rapid bug rediscovery by AI agents, sometimes within hours, and so now consider long embargo periods to be a dangerous practice that primarily benefits attackers.

Thanks for Özgün Kültekin of Wakefield (wakefield.co) for reporting this problem to us and for the Alpine Linux developers for making an updated release available at very short notice.

For the past three years, Linux'n'Beer has been bringing people together in Zurich for a relaxed evening of conversations about Linux, the kernel, open source and whatever else comes up over a beer.

We are meeting again on Friday, 23 October at 7:30pm at Kennedy's Irish Pub.

If you happen to be around, feel free to drop by, have a pint and join the conversation.

We made it! 🚗💨 Switzerland ➡️ Ukraine, Lviv.

It was a long drive, but every single kilometer was worth it. Yesterday, we officially handed over our car to the Ukrainian defenders. The war demands an immense amount of resources, and dependable 4x4s, cars, and vans are constantly needed to keep defenders moving and save lives.

Now our beloved car has a new home and a noble mission. Freedom isn't free - thank you to the defenders who pay the price for it every single day for a sovereign Ukraine. 🇺🇦

If you have a vehicle to spare or want to support frontline mobility, let us know and we'll tell you how.

#CarForUkraine #ConvoyToUkraine #HelpUkraine #SwissWithUkraine #SlavaUkraini

October is coming which means Linux Plumbers Conference 2026 in Prague, where I am running Devicetree Microconference track (6th of Oct). There will be talks about:

- Current progress with OF_UPSTREAM (@superna9999),
- Status of getting DT bindings compliance (me),
- Combining ACPI with Devicetree because the more firmware the merrier (Srinivas Kandagatla),
- Upstreaming your DTS faster than maintainers can review (Amit Kucheria),
- The never-ending saga of hot-pluggable extension boards (Hervé Codina),
- Another never-ending sagas of managing multiple boards with overlays (Doug Anderson, Hans de Goede and Agathe Porte).


Full schedule:
https://lpc.events/event/20/sessions/252/#20261006

Don't hesitate to grab me in the hallway track if you have some questions, e.g. why I still did not review your patch :), or just want to get a selfie with me (yes, it does happen, I am not making it up!). This year I am not attending the co-located ELCE, so only chance to catch up is LPC. See you in Prague!

The guy who shut down the Strait of Hormuz is telling Ukraine to halt strikes on Russian diesel fuel because it's causing shortages.

We are living in Idiocracy.

Some moron is running out of water bodies to rename after his ego. There was a gulf, now a lake. So I guess there is gonna be a river, sea and ocean soon? I'm happily avoiding all technical conferences as a speaker in a country ruled by said moron.

If someone asked me 5 years ago, I would not believe that I could produce such a statement about major SoC vendor:
https://lore.kernel.org/all/2509536d-cdec-448d-bf20-80d2b3d6728a@kernel.org/

Qualcomm and Linaro were upstreaming before significant amount of code to the Linux kernel for supporting their SoCs , but around 2021-2022 things changed significantly. Just to recap major milestones of:

2022 November: One day after public announcement of new Snapdragon 8 Gen 2 flagship SoC (SM8550), Qualcomm Landing Team in Linaro posted basic support for it:
https://lore.kernel.org/all/20221116103146.2556846-1-abel.vesa@linaro.org/

2023 October: One day after public announcement of next flagship Snapdragon 8 Gen 3 (SM8650), same team posts almost full (not basic!) support for it:
https://lore.kernel.org/all/20231025-topic-sm8650-upstream-dt-v1-0-a821712af62f@linaro.org/

2024 October: One day after public announcement of next flagship Snapdragon 8 Elite (SM8750), Linaro and Qualcomm team posts comprehensive support for it:
https://lore.kernel.org/all/20241021232114.2636083-1-quic_molvera@quicinc.com/

2025 September: Same day of public announcement of Snapdragon 8 Elite Gen 5 (Kaanapali), Qualcomm posts comprehensive support for it:
https://lore.kernel.org/all/20250924-knp-dts-v1-0-3fdbc4b9e1b1@oss.qualcomm.com/

Now things changed:

2026 March and from now on: Qualcomm posts patches for unannounced SoC yet, getting way ahead, for example:
Hawi: https://lore.kernel.org/all/20260330-clk-hawi-v1-0-c2a663e1d35b@oss.qualcomm.com/
Maili: https://lore.kernel.org/all/20260522-maili-pinctrl-v1-0-0a6636f5c277@oss.qualcomm.com/
(I don't know which models are these, what I know is they are not yet announced)

And this list above does not include upstreaming of many other models from different segments.

People really missed how big transformation Qualcomm did in upstream Linux kernel involvement.

their real worry is that the Ukrainians will find a way to improve the Patriot and then produce them at scale faster and for much less money than what the existing production lines in the U.S. could do

Yes, read this again.

Linux kernel Devicetree sources:

With my recent patches entire ARM, arm64 (except Broadcom Stingray and Apple) and RISC-V DTS files pass the dt-check-style linter, in default relaxed mode, so any new DTS is expected to not introduce new warnings.

IOW, in your contributions be sure that new DTS is dt-check-style warning-free.

I am working on fixing false positives for the strict mode and have some successes, but that is not yet ready.

Linux needs more maintainers. Myself must be overloaded, and heading for a burn-out:
$ git log --oneline MAINTAINERS | grep -i myself | head -3
51f449308506269e MAINTAINERS: make myself the maintainer of the Qualcomm QCE driver
12933e2bc5e07e15 MAINTAINERS: dmaengine/ti: Remove myself and add Vignesh as maintainer
4452b868d669fbf6 MAINTAINERS: Add myself as SCD30 maintainer
$ git log --oneline MAINTAINERS | grep -i myself | wc -l
348

[$] Development statistics for the 7.1 kernel

Linus Torvalds released the 7.1 kernel as expected on June 14. This development cycle brought in a lot of new features — and a lot of new developers as well. The time has come for [...]

https://lwn.net/Articles/1077425/ #LWN #Linux #kernel #SUSE #RedHat #ArchLinux #Rust #Git #io_uring

This is the first time I'm posting anything here but I figured this may be the right audience.

I've never run into something like this and I don't quite know what to make of it. I'm the author and maintainer of libgpiod. The official git repository is the one at kernel.org[1]. There's also a github mirror[2] as well as a documentation page[3] at readthedocs that I maintain.

I noticed (purely by chance) that there's a new website at libgpiod.com that's been created recently. I have nothing to do with it. It's clearly AI-generated but it redirects to my github. It's a 2 month old domain, anonymized registrar, protected by Cloudflare and NeoProtect and a Swedish host behind that.

Clearly someone went to great lengths to stay anonymous. I'm afraid of falling victim to some new elaborate supply chain attack. What should I do about it (if anything)? Has anyone else experienced something similar?

[1] https://git.kernel.org/pub/scm/libs/libgpiod/libgpiod.git/
[2] https://github.com/brgl/libgpiod
[3] https://libgpiod.readthedocs.io/

In a week, I will be presenting on the Open Source Summit India 2026 in Mumbai. I have two talks:

1. Semi-BoF titled "Guide to Becoming a Linux Kernel Maintainer" (https://sched.co/2KNFb) where I would be happy to have bigger discussion. I don't have many slides on that, so please come to the session and participate in the talk.

2. My standard Devicetree speech for beginners (DTS101, https://sched.co/2KNF4).

If you are going to attend OSS India, please come say hi. If you are already a Linux kernel maintainer, I can also sign GPG keys (I need printed `gpg --fingerprint` though!).

This one shows just people responding, deliberately not patch submissions (because Greg's and Sasha's stable patchbombs just dwarf everyone).

So, these are the people who are hitting "Reply All", and it's not even the full picture, because it only includes the LKML.

Embedded Recipes 2026 has officially kicked off!
It's fantastic to see so many talented engineers and developers gathered in one place to share knowledge, exchange ideas, and push the boundaries of embedded systems. Looking forward to two days of insightful talks and meaningful connections.

[ANNOUNCEMENT / CFP] LPC 2026 Devicetree MC CFP

There will be a dedicated Devicetree Microconference on Linux Plumbers
2026 in October in Prague. Call For Papers is currently open.

https://lpc.events/event/20/contributions/2317/

Topics suggested for discussion are mentioned in "Ongoing problems" in
session description (link above), but of course are not limited to
these. Topics should obviously follow standard Microconference
expectation, that is to be discussion oriented.

Allocated time per slot will be between 15 to 30 minutes (20 minutes
last year).

Proposals can be submitted here:
https://lpc.events/event/20/abstracts/

Please remember to choose "Devicetree MC" as the track.

AI slop in Open Source is not only about receiving poor quality LLM generated junk patches. It is also about receiving replies generated by LLM to reviewer's comments. Such replies are overly long, overly polite, unnecessarily "You are right, <here goes very long explanation>".

Reading an LLM generated answer to my review comment on the mailing list is a waste of my time.

If you are a contributor to an open source project, understand that maintainer has absolutely ZERO interest in talking to your LLM through you.

Drodzy Uczestnicy!

Sesja Linuksowa już trwa!
Jeżeli nie możecie pojawić się na miejscu, zapraszamy na streama z konferencji: https://www.youtube.com/watch?v=ZeS7QtMYXyw

Miłej zabawy!

In two weeks, I hope to tell a few weird things how Linux kernel is being developed during my speech "Peculiarities of Linux Kernel Development" at the "Sesja Linuksowa" conference in Wrocław, Poland. That will be my first speech in my home country. :)

Detailed schedule is on https://sesja.linuksowa.pl/

If you around, come say hi, I will stay at the conference through most of the Saturday.

P.S. The talk will be in English.

My speech proposals for OSS India 16-17 June were accepted (yay!) but the conference organizers weirdly ask to have slides ready TWO months before:
"Slide Submission Deadline: Monday, 15 April"
https://events.linuxfoundation.org/open-source-summit-india/program/speaker-guide/#welcome

Yeah, right. Dream on. I can send you the title slide on 15th of April.