Post #2278247

2026-05-01 14:21 UTC

In light of copyfail yesterday I had a quick look at the stable kernel changelogs, and almost half the patches look like they could have a security impact. Everyone should just regularly update regardless, even more nowadays with AI VCs financing vuln research in open source projects.

Replies (1)

@kernellogger@hachyderm.io 2026-05-01 14:45

@Aissen@social.treehouse.systems and on general purpose systems use at least the latest longterm kernel, as explained by Greg here: http://www.kroah.com/log/blog/2018/08/24/what-stable-kernel-should-i-use/ They also got the fix (a664bf3d603dc3 ("crypto: algif_aead - Revert to operating out-of-place")) earlier: * v7.0-rc7 (2026-04-06 00:26:23), * v6.19.12 (2026-04-11 14:29:58), * v6.18.22 (2026-04-11 14:26:52), * v6.12.85 (2026-04-30 11:14:47), * v6.6.137 (2026-04-30 11:17:22), * v6.1.170 (2026-04-30 11:19:11), * v5.15.204 (2026-04-30 11:24:38), * v5.10.254 (2026-04-30 11:25:29)]

Open ##2385848