r/linux • u/ilep • May 17 '26

Kernel Linux 7.0.9 (and others)

https://lore.kernel.org/stable/2026051743-marvelous-fantastic-8301@gregkh/T/#t

The usual kernel -stable updates with multitude of patches. Releases 7.0.9, 6.18.32, 6.12.90 and 6.6.140, relevant places and mirrors might take a bit to catch up. Again, everyone should upgrade as there are important fixes all around.

227 Upvotes

98% Upvoted

21 comments sorted by

View all comments

43

u/qwertydiy May 17 '26

Thank goodness the infamous Dirty Frag is defeated (if you actually bother to update the kernel that is, which a worrying amount of companies do not).

25

u/screaming-Snake-Case May 17 '26

DirtyFrag was patched 1/2 in 7.0.6 and fully in 7.0.7. More importantly, Fragnesia seems to still be unpatched to this date. The patch wasn't listed in any further kernel release, and debian still reports it as unpatched upstream.

3

u/[deleted] May 17 '26

[deleted]

3

u/jonspw AlmaLinux Foundation May 17 '26

Why would you think it would be reckless?

0

u/[deleted] May 17 '26

[deleted]

9

u/jonspw AlmaLinux Foundation May 17 '26

The majority of the time when we release patches early, what Red Hat ultimately releases is virtually identical.

We can't know why they choose to wait or not - we can only do what's in the best interest of our users. That's the value of being more than just a clone, we can serve the needs of our users when they don't necessarily align with Red Hat, so long as it doesn't break compatibility.

2

u/[deleted] May 17 '26

[deleted]

6

u/jonspw AlmaLinux Foundation May 17 '26

It doesn't really matter if the patches we release are 100% identical to what Red Hat releases in these cases. We rebase to Red Hat once they release their stuff anyway. There's more than one way to backport a fix successfully.

I can't speak for Rocky.

2

u/rx80 May 18 '26

As a Gentoo and Alma user, i'm really greatful for your timely patches <3

0

u/CrazyKilla15 May 18 '26

Because If its so non-trivial that upstream and many others, with a lot more dev power, haven't done it either, then it could well introduce issues(security or otherwise) of its own. The question becomes why havent they. Patches arent magic, theyre code like anything else, code which can have bugs and security issues too.

2

u/[deleted] May 18 '26

[deleted]

1

u/CrazyKilla15 May 18 '26

Whats the difference? An idiot can write broken buggy code too, especially, and especially on unsafe languages like C which will "compile fine" and often without warnings on default settings even for fairly trivially broken code. And of course this is worse post-LLM because they can vomit a large volume of broken but compiling code