Linux 3452 Published by

Greg Kroah-Hartman released seven more maintained Linux stable kernel branches today, in a single batch spanning versions 7.2.14 down through 5.10.273. The standard stable-issue work brought no new features but shipped a batch of backported bug fixes and security patches, most notably Christian Brauner's coredump-integrity overhaul, Jens Axboe and Josef Bacik's io_uring remediation, and a keys subsystem patch that hardens keyring indexes against KASLR disclosure. The batch's standout detail is a growing crop of "Assisted-by: Claude," Codex, and DeepSeek sign-off lines in the changelogs, a concrete signal of the AI-assisted development Linus Torvalds has dubbed the kernel's new normal. With the 5.15 and 5.10 long-term lines projected to reach end of life in December 2026, users are again urged to take the full LTS point release and reboot rather than cherry-pick individual fixes.





Seven Linux Stable Kernels Ship at Once, With AI in the Credits

The October 30 batch from Greg Kroah-Hartman is standard stable-issue work. The changelogs tell a different story.

The Linux stable maintainer shipped seven more maintained kernel branches in a single release. Versions 7.2.14, 6.18.60, 6.12.115, 6.6.161, 6.1.191, 5.15.224, and 5.10.273 all got tagged within roughly six minutes of one another by UTC clocks. Sasha Levin and a rotating group of distro maintainers backport and QA each set.

As is standard for stable releases, there are no new features here. These builds take bug fixes and security hardening from mainline and reapply them to each series. This batch happens to be a convenient snapshot of where the kernel sits right now, both technically and culturally.

The headline isn't a single patch. It's the sign-off lines. Scan the changelogs and you'll find tags like "Assisted-by: Claude" and "Co-Authored-By: Claude Fable 5.1," alongside Codex, DeepSeek, and plain "LLM" credits threaded through the keys, io_uring, netfilter, tracing, and ksmbd fixes.

That's a concrete, on-the-wire signature of what Linus Torvalds has repeatedly called the kernel's new normal.

Kernel

What actually shipped in the batch

The fixes themselves land in three clusters. Christian Brauner led a process and coredump overhaul. It stops crash dumps from being silently truncated. Without it, an io_uring completion or a livepatch can repeatedly kick a task sitting in uninterruptible sleep, and the resulting core file loses most of its data. The new code adds a PF_NO_NOTIFY_SIGNAL guard so only SIGKILL or freezing can interrupt a dump, and it fixes a session-leader exit bug that drops SIGHUP for foreground process groups.

Next comes a heavy io_uring fixup, about a dozen patches, from Jens Axboe and Josef Bacik. They cover drain ordering, timeout cancellation, poll reference counting, and, tellingly for real-time systems, waking SCHED_FIFO waiters from interrupt context on PREEMPT_RT. Those late wakeups reportedly dropped from about 1,040 microseconds to 18.

Then there's security. The keys subsystem got the most attention, capped by a patch making keyring indexes independent of kernel addresses. It closes an information-disclosure path where an unprivileged user could read the KASLR slide to predict key ordering and recover the kernel image address. The analysis suggests 45 keys did the trick.

Several of these same clusters ride down into every supported line, which is the backport pipeline working as intended.

The older trees are near the end. Versions 5.15 and 5.10 are both projected to reach end of life in December 2026. This makes batches like this one potentially among their final upstream fixes. Nearly out of gas.

That's why the kernel team's advice keeps landing on the same thing: take the whole LTS point release and reboot. Don't cherry-pick individual CVEs.

Keep in mind that the CVE machine has grown enormous. The kernel team became the world's largest CVE issuer in 2025, on the order of 50 a week. Most security-relevant stable fixes never get an individual CVE at all and aren't ranked, so taking the full release is the only way to avoid leaving gaps.

This batch continues a line of networking hardening. The immediately prior set, from October 15, fixed CVE-2026-99999 in skb_checksum_help(), a flaw Michael S. Tsirkin described as letting bad checksum metadata corrupt network headers.

What the AI lines actually mean

The AI help here isn't the kernel shipping features written by a model. It's patches to bugs and vulnerabilities that AI tools helped find, then reviewed, backported, and signed off by humans. The person in the loop still matters. Shipping a 7.2 fix down to 5.10 means reconciling code that has drifted since the original, and the verbose [ Backport to 5.10.y: ... ] notes in these changelogs spell that work out in detail.

For scale: the 7.2 merge window logged 13,412 non-merge commits, the busiest in years. Torvalds has called the security mailing list "almost entirely unmanageable" from AI-fueled reports packed with duplication, yet he's pushed anyone who'd fork off the tooling rather than keep the kernel secure. The 7.3 mainline is already in its rc cycle, so 7.2 stays the current feature baseline while its stable line keeps taking fixes.

Canonical has already started reacting. In September it announced faster, weekly security-kernel delivery, further evidence that the volume change is real and structural.

The kernel team's standing guidance is unchanged this cycle: upgrade to the whole LTS point release and reboot rather than hand-pick fixes.

Most distros already ship longterm kernels derived from these trees, so you'll likely reach the update through your normal package manager instead of building mainline yourself. For the supported LTS lines, 6.18, 6.12, 6.6, 6.1, the sensible posture is to take the newest release. If you're on 5.15 or 5.10 now, plan a migration to 6.1 or newer before December.

Linux kernel 7.2.14 released

Linux kernel version 7.2.14 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.14.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v7.x/patch-7.2.14.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.14.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v7.2.14/v7.2.13

Linux kernel 6.18.60 released

Linux kernel version 6.18.60 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.60.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.18.60.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.60.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v6.18.60/v6.18.59

Linux kernel 6.12.115 released

Linux kernel version 6.12.115 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.12.115.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.12.115.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.12.115.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v6.12.115/v6.12.114

Linux kernel 6.6.161 released

Linux kernel version 6.6.161 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.6.161.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.6.161.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.6.161.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v6.6.161/v6.6.160

Linux kernel 6.1.191 released

Linux kernel version 6.1.191 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.1.191.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.1.191.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.1.191.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v6.1.191/v6.1.190

Linux kernel 5.15.224 released

Linux kernel version 5.15.224 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.15.224.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v5.x/patch-5.15.224.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.15.224.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v5.15.224/v5.15.223

Linux kernel 5.10.273 released

Linux kernel version 5.10.273 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.10.273.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v5.x/patch-5.10.273.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.10.273.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v5.10.273/v5.10.272