Linux News Digest (Sept 21, 2026): Linux 7.3-rc4 Released with LLM Bugfixes, Severe CISA Deadlines, and a Critical Btrfs Rollback

 If you missed the weekend drama because you were busy grinding old-school games or watching anime in your dark room, don't worry. I’ve compiled the absolute juiciest IT and open-source updates from the past 24 hours. Let's look at how things are breaking down under the hood.

1. Linus Torvalds Releases Linux Kernel 7.3-rc4: Caught by LLMs?

A few hours ago, Linus Torvalds officially pushed out Linux 7.3-rc4, and the changelog is unusually large for this stage of the development cycle. While driver updates still occupy about a third of the patch, Torvalds noted an interesting surge in filesystem activity, particularly around SMB and NTFS. 

But here is the real kicker for fellow tech cynics: a huge portion of the fixes merged into 7.3-rc4 are minor error-path cleanups caught by various Large Language Models (LLMs). Yes, developers are now aggressively pointing AI tools at the kernel source code to find hidden bugs. Torvalds admitted that while these automated AI-found patches look "big" on paper, most of them won't be noticeable in normal daily desktop use. Still, it means our sacred kernel is increasingly being rewritten by machines. The final stable release of Linux 7.3 remains on track for October. 

2. Today is the CISA Critical Deadline for Exploited Linux Flaws

If you run any internet-facing servers or home labs, check your uptime right now. Today, September 21, 2026, is the strict federal deadline set by the US Cybersecurity and Infrastructure Security Agency (CISA) for emergency kernel patching. 

CISA recently added three severe Linux kernel vulnerabilities (CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964) to its Known Exploited Vulnerabilities catalog due to active exploitation in the wild. The bugs are pure nightmare fuel: a CVSS 9.8 flaw in the kTLS receive path allowing memory disclosure, a race condition in AF_ALG sockets that crashes cryptographic operations, and an out-of-bounds write allowing local privilege escalation to full root access. 

To make matters worse, a security researcher just publicly dropped working exploit code for four additional local privilege escalation flaws (including the infamous DirtyAH6 and DiagSpill). If your server infrastructure hasn't been updated and rebooted past these holes by tonight, you are essentially leaving your digital backdoor wide open for ransomware gangs. 

3. Btrfs Backwards Compatibility Disaster Fixed in 7.3-rc4

Fascinating drama for the file system purists: the developers had to panic-merge a rollback for Btrfs ahead of the 7.3-rc4 launch to fix an absolute disaster. 

Back in the Linux 7.2 development cycle, a change was introduced regarding how the fs_fsid identifier was derived. Unfortunately, this completely broke backwards compatibility because the ID began shifting across reboots. For normal users, this sounds boring, but for user-space applications that rely on a stable ID to encrypt and decrypt VPN key files—like NetworkManager OpenConnect—it was catastrophic. Users upgrading to Linux 7.2 on Btrfs suddenly found their VPN access completely dead. 

Thankfully, the kernel team swallowed their pride and reverted the logic in 7.3-rc4, meaning the FSID is once again derived from the stable filesystem UUID. They also patched an annoying bug that prevented GRUB2 from detecting the Btrfs root device on systems booting without an initramfs. 

Quick Hits from the Basement:

• Linux Kernel 7.4 Speed Gains: Early v3 patches for the Linux 7.4 Kbuild infrastructure are showing insane efficiency improvements. Full kernel builds are up to 36% faster, and incremental builds are seeing up to a 70% speed reduction. My potato PC might actually compile packages before I grow old. 
• Intel Panther Lake Fixes: Code has been merged to stop Intel's Fast Request and Execution Architecture (FRED) from causing hard freezes and crashes when running modern video games under Wine or Steam Play.