Meta Infrastructure Chief Steps Down as Microsoft Finds 59 Linux Bugs

Enterprise cloud leadership, artificial intelligence vulnerability discovery, and collaborative software tools marked three major technology developments on Wednesday as Meta announced a transition atop its global infrastructure division, Microsoft’s FORGE Lab detailed 59 upstream Linux kernel bug reports, and Google Labs launched its experimental Tabletop workspace.

Meta Infrastructure Head Santosh Janardhan Passes Baton to Dave Brown

Santosh Janardhan, Meta’s longtime head of infrastructure and co-head of engineering who joined the company in 2009, will step down from his executive role and transition into an advisory position on Meta Compute before departing next year. Following an internal memo first reported by Bloomberg in which Janardhan cited the need to “pass the baton,” Meta confirmed that he will be succeeded by Dave Brown, who joined Meta earlier in 2026 as vice president of infrastructure after spending 19 years working on compute, cloud, and artificial intelligence at Amazon. Earlier this year, Janardhan had been tapped to lead Meta Compute to scale the company’s data center strategy.

Microsoft FORGE Lab Reports 59 Linux Kernel Bugs and 33 CVEs

At Microsoft’s FORGE Lab, one full-time researcher and one intern used an AI-assisted system codenamed MDASH from late May to mid-June 2026 to scan Linux kernel networking, filesystem, and security subsystems on two servers (64 cores/256 GB RAM and 32 cores/128 GB RAM). Code scanning relied on Sonnet 4.6 (71.1% of tokens), GPT-5.4 (20.1%), and GPT-5.5 (7.1%) to generate 26,502 raw findings in two weeks, which screening agents narrowed to 11,769 candidates before QEMU proof-of-concept agents using GPT-5.5 (77.3%), Opus 4.6 (13.2%), and GPT-5.5-cyber (9.4%) produced 621 reproducible cases—including 266 (42.8%) sharing root causes, 163 (26.2%) with limited impact, and 133 (21.4%) already reported upstream.

Following four person-months of human triage beginning with a first public report on June 27, 2026, and 55 posted by September 1, the effort yielded 59 upstream reports (9.5% of PoC cases), 33 assigned CVEs—including 24 rated High or above with a CVSS v3.1 score of at least 7.0—and 38 mainline fixes merged in a median of 41 days (up to 108 days). Across the 59 reports, the average bug was 8.1 years old, led by a 21-year-old cls_u32 bug (CVE-2026-74544), six bugs aged 15 to 19 years, and three at least 20 years old. Researchers confirmed local root privilege-escalation exploits for eight CVEs: CVE-2026-64554, CVE-2026-64563 (an 8-year-old rhashtable state-reset bug introduced in a 2018 commit affecting Linux and Android via Netlink’s socket diagnostics, also independently found by Yuan Tan and exploited by Frank Wu of NebuSec), CVE-2026-64580, CVE-2026-74561, CVE-2026-74562, CVE-2026-89789, CVE-2026-98222 (a 16-bit length heap buffer overflow), and CVE-2026-98364.

Google Labs Introduces Tabletop for Real-Time Group Collaboration

Meanwhile, Google Labs introduced Tabletop, an experimental collaborative platform rolling out via waitlist in the United States for users aged 18+ at labs.google/tabletop. By uploading links, files, and ideas and prompting @tabletop or choosing a starter template, groups can generate interactive trip itineraries, dinner polls, expense splitters, and tournament brackets that multiple participants can edit simultaneously in real time.