Linux 7.1-rc4: security list "almost unmanageable" from AI bug reports

zdkaster1 pts1 comments

Linux 7.1-rc4 [LWN.net]

LWN<br>.net<br>News from the source

Content Weekly Edition<br>Archives<br>Search<br>Kernel<br>Security<br>Events calendar<br>Unread comments

LWN FAQ<br>Write for us

User:<br>Password: |

Log in /<br>Subscribe /<br>Register

Linux 7.1-rc4

From :<br>Linus Torvalds<br>To :<br>Linux Kernel Mailing List<br>Subject :<br>Linux 7.1-rc4<br>Date :<br>Sun, 17 May 2026 14:29:22 -0700<br>Message-ID :

Archive-link :<br>Article

You all know the drill by now - another week, another release candidate.

Things continue to look fairly normal (where "normal" is the "new<br>normal" with a fair amount of changes). Drivers are about half the<br>patch, with GPU leading the way as is tradition. But there's a little<br>bit of everything in driver land.

The rest is mostly networking, core kernel, filesystems, and arch updates.

Some of the documentation updates might be worth highlighting: the<br>continued flood of AI reports has basically made the security list<br>almost entirely unmanageable, with enormous duplication due to<br>different people finding the same things with the same tools. People<br>spend all their time just forwarding things to the right people or<br>saying "that was already fixed a week/month ago" and pointing to the<br>public discussion.

Which is all entirely pointless churn, and we're making it clear that<br>AI detected bugs are pretty much by definition not secret, and<br>treating them on some private list is a waste of time for everybody<br>involved - and only makes that duplication worse because the reporters<br>can't even see each other's reports.

AI tools are great, but only if they actually help, rather than cause<br>unnecessary pain and pointless make-believe work. Feel free to use<br>them, but use them in a way that is productive and makes for a better<br>experience.

The documentation may be a bit less blunt than I am, but that's the<br>core gist of it. So just to make it really clear: if you found a bug<br>using AI tools, the chances are somebody else found it too. If you<br>actually want to add value, read the documentation, create a patch<br>too, and add some real value on *top* of what the AI did. Don't be the<br>drive-by "send a random report with no real understanding" kind of<br>person. Ok?

Linus

Aaron Sacks (1):<br>KVM: Reject wrapped offset in kvm_reset_dirty_gfn()

Aboorva Devarajan (1):<br>powerpc/hv-gpci: fix preempt count leak in sysfs show paths

Adrien Burnett (1):<br>ALSA: hda/realtek: Add mute LED quirk for HP Pavilion Laptop 16-ag0xxx

Alain Michaud (1):<br>HID: logitech-hidpp: Add support for newer Bluetooth keyboards

AlanCui4080 (1):<br>Revert "nvme: add quirk NVME_QUIRK_IGNORE_DEV_SUBNQN for 144d:a808"

Alex Williamson (1):<br>vfio/pci: fix dma-buf kref underflow after revoke

Alexandru Elisei (1):<br>KVM: arm64: Handle permission faults with guest_memfd

Alice Ryhl (1):<br>genetlink: free the skb on 'group >= family->n_mcgrps'

Allison Henderson (1):<br>net/rds: reset op_nents when zerocopy page pin fails

Ally Heev (1):<br>powerpc: 82xx: fix uninitialized pointers with free attribute

Andrea Righi (4):<br>selftests/sched_ext: Fix build error in dequeue selftest<br>sched_ext: Fix ops->priv clobber on concurrent attach/detach<br>sched_ext: Clear ops->priv on scx_alloc_and_add_sched() error paths<br>sched_ext: Use HK_TYPE_DOMAIN_BOOT to detect isolcpus= domain isolation

Andy Shevchenko (1):<br>ALSA: hda/cs35l56: Drop malformed default N from Kconfig

Arnd Bergmann (1):<br>ring-buffer remote: Avoid unexpected symbol warnings (arm, s390)

Arthur Kiyanovski (2):<br>net: ena: PHC: Fix potential use-after-free in get_timestamp<br>net: ena: PHC: Check return code before setting timestamp output

Arvind Yadav (1):<br>drm/xe/madvise: Track purgeability with BO-local counters

Avi Radinsky (1):<br>Documentation: riscv: cmodx: fix typos

Ayaan Mirza Baig (2):<br>platform/x86: samsung-galaxybook: Refactor camera lens cover input device<br>platform/x86: samsung-galaxybook: Handle ACPI hotkey notifications

Bart Van Assche (2):<br>ice: fix locking in ice_dcb_rebuild()<br>powerpc/powermac: Remove pmac_low_i2c_{lock,unlock}()

Ben Horgan (3):<br>arm_mpam: Fix monitor instance selection when checking for hardware NRDY<br>arm_mpam: Pretend that NRDY is always hardware managed<br>arm_mpam: Improve check for whether or not NRDY is hardware managed

Ben Morris (1):<br>sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

Benjamin Tissoires (2):<br>HID: pass the buffer size to hid_report_raw_event<br>HID: core: introduce hid_safe_input_report()

Borislav Petkov (AMD) (1):<br>x86/mce: Restore MCA polling interval halving

Breno Leitao (2):<br>workqueue: Release PENDING in __queue_work() drain/destroy reject path<br>workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path

Calvin Owens (1):<br>btrfs: always pass __GFP_NOWARN from add_ra_bio_pages()

Carlos López (1):<br>virt: sev-guest: Do not use host-controlled page order in cleanup path

Casey Chen (1):<br>block: recompute nr_integrity_segments in blk_insert_cloned_request

Chaitanya Kumar Borah (1):<br>drm/i915/dp: Fix VSC dynamic range signaling for RGB formats

Chen Wandun (1):<br>cgroup/cpuset: move PF_EXITING...

linux list from documentation free sched_ext

Related Articles