The Linux kernel, distributions and the wider open-source ecosystem.
Critical Linux kernel TCP flaw CVE-2026-98432 enables remote code execution via crafted IPv4 packets against MPTCP listeners, patched upstream while distributions race to ship fixes.
Linus Torvalds released Linux 7.4-rc1 after the largest merge window in kernel history, and he credits AI-assisted fixes arriving earlier in the cycle.
CISA listed CVE-2026-46300 on its Known Exploited Vulnerabilities catalog on October 28 with a federal deadline of October 31. The flaw, part of the Dirty Frag class, chains with PHP2Shell to give an unauthenticated remote attacker full root on any exposed Linux server. Dream Security traced a campaign that already did exactly that on 25 machines across four countries.
A critical vulnerability in Linux's TCP implementation allows unauthenticated remote attackers to corrupt kernel memory or crash systems via standard IPv4 traffic.
Tencent Zhuque Lab's Corvus AI system found a memory corruption bug in Linux's vhost subsystem that spans nearly a decade of kernels and breaks both the user/root and guest/host boundaries.
Citrix disclosed CVE-2026-88779, a SAML-triggered memory overflow in NetScaler ADC and Gateway, on October 4. CISA added it to the KEV catalog the same day and gave federal agencies until October 7 to mitigate.
Linux 7.3-rc7 shipped on October 12 with half the patch made up of selftests and an ext4 data=journal deprecation on board, keeping the stable release on track for October 18.
Linus Torvalds released Linux 7.3-rc5 on September 27, 2026, with an unusual diffstat where drivers account for less than a third of changes and selftests make up roughly a quarter.
Qualcomm used Snapdragon Summit 2026 to commit to official Debian and Ubuntu support on its X2-series ARM chips, with a working Debian build by year-end and Ubuntu certification on select laptops in early 2027.
CISA has added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities catalog, citing active exploitation and setting a tight federal patching deadline.
Canonical has moved Ubuntu 26.10 'Stonking Stingray' from the Linux 7.2 kernel to Linux 7.3, with the newer kernel now rolling into the beta archive ahead of schedule.
Security researcher Asim Manizada publicly disclosed four local root exploits, dubbed DirtyAH6, TUNderflow, PPPoEject, and DiagSpill, affecting Linux kernel networking code for 10 to 21 years. Fixes have landed in stable branches, while on the same day, CISA cited active exploitation of three different Linux kernel CVEs.
The third release candidate for Linux kernel 7.3 has been deployed, featuring a substantial set of patches focused on file system integrity and hardware driver enhancements.
Grml 2026.09, the Debian-based rescue live system codenamed Hättiwaritätti, ships with Linux 7.1.8, exFAT boot support, and grml-live changes that drop 32-bit i386.
Linus Torvalds released Linux 7.3-rc1 after a two-week merge window containing 15,267 commits, the second-highest total in kernel history, pushing the codebase to nearly 41 million lines.
Maintainers say a third to half of the net-next patches for the Linux 7.3 development cycle appear to be low-priority AI-generated fixes.
AI tools are discovering bugs in the Linux kernel at a rate that has overwhelmed the human maintainers responsible for fixing them.
Linux kernel 7.2 officially released with cache-aware scheduling, USB4STREAM support, Apple M3 boot capability, RISC-V expansion, AMD ISP4 driver improvements, and NVIDIA Nova infrastructure
Canonical's August 13 Ubuntu HWE kernel release patches critical XFRM ESP-in-TCP logic flaws that enable local privilege escalation and container escape, alongside network stack hardening across the broader Linux ecosystem.
OpenAI has released a worldwide preview of its ChatGPT desktop application for Linux on August 11, 2026, adding x64 and ARM64 support via RPM and Debian packages while completing official native client coverage across all major operating systems.
Manjaro 26.1 "Bian-May" arrives with Linux 7.1, GNOME 50, KDE Plasma 6.7, and a hardware compatibility change that will catch some NVIDIA users off guard.
Linus Torvalds released Linux 7.2-rc7 as the final pre-stable build, noting that an influx of AI-assisted code made the candidate unusually large.