For maintainers of smaller projects buried under low-quality AI bug reports, the shift may offer some relief, though Torvalds says most other areas are not there yet.
Servers running multipath TCP listeners face the highest risk until distributions ship kernel fixes for the flaw.
Servers running affected Linux kernels can be taken over as root by attackers who combine the flaw with PHP weaknesses, so patching is the immediate step.
Federal agencies have until October 29, 2026 to patch, and tens of millions of PHP services still run a vulnerable version.
The driver updates point to active bring-up of RDNA 5 discrete Radeon GPUs, even as AMD keeps specs and timing under wraps.
Federal agencies must rapidly patch and investigate Linux and Zyxel devices as exploits and public PoC code drive real‑world attacks.