Greg Kroah-Hartman released seven stable kernel updates, covering versions 5.10.267 through 7.1.11, with the 5.10 branch reaching its end-of-life. The security patch addresses critical vulnerabilities, including a malicious Hyper-V host exploit and kernel memory leaks identified by Jann Horn. A major focus of this release is the NFC subsystem, which received eight fixes for out-of-bounds access issues discovered partly through automated AI-assisted tooling. Administrators should apply these updates immediately to secure the networking stack, XFS filesystems, and HID input subsystems across all supported branches.

Linux Kernel 7.1.11 and stable updates land, with eight NFC fixes and a Hyper-V crash

The stable kernel tree just got a massive security injection. Greg Kroah-Hartman pushed seven kernel updates to the stable tree on Thursday, August 27, 2026. The release covers the entire current support range, including 5.10.267, 5.15.218, 6.1.185, 6.6.154, 6.12.106, 6.18.47 and 7.1.11.

NFC Stack Siege and Virtualization Risks

The NFC subsystem took the biggest hit this cycle. Eight separate security fixes landed in the same round, targeting out-of-bounds reads, kernel memory corruption, and use-after-free bugs. The scope of the sweep is notable, especially given that the vulnerabilities were discovered using automated security-research tooling by 0sec.ai. AI-assisted auditing is no longer a novelty; it's doing the heavy lifting in kernel security.

If you're running a device with near-field communication, you should patch immediately.

Beyond NFC, there's a serious virtualization risk. A malicious Hyper-V host can crash a guest kernel by sending a malformed HID report descriptor length. The guest reads past the VMBus packet and hits a bounds violation. If you're hosting guests on a multi-tenant platform you don't fully trust, this is a hard stop.

Jann Horn of Google Project Zero also identified a HID core pointer and type confusion bug. A long-format report descriptor causes kernel pointer bytes to leak into dmesg as a number. That gives attackers the kernel memory layout they need for further exploitation.

Memory Management and Filesystem Fixes

The xfrm subsystem has a double-free race condition between per-socket policy changes and the UDP transmit fast path. An unprivileged user in a user and network namespace can trigger this without root access.

XFS mount-time log recovery also got a bounds check. A crafted XFS image with a small blf_len and a bitmap bit past the buffer end drives a memcpy() past the allocation. Anyone who can get a crafted image mounted corrupts adjacent kernel heap.

Libceph has an out-of-bounds read triggered by a malicious OSD in a multi-tenant deployment. Garbage gets passed to kzalloc_objs() as a watcher count. No additional privileges beyond OSD session establishment are required.

IPv6 forwarding has a use-after-free bug after lwtunnel_xmit() reallocates the skb head. A stale destination address pointer computes the nexthop and looks up neighbor entries. The consequences include kernel data leaks, neighbor table pollution, traffic misdirection, or system crashes.

Cross-Version Network Improvements

Several cross-version network fixes also landed. Eric Dumazet's GRO BIG TCP validation fix appears in 6.1, 6.6, and 6.12. Non-TCP packets were previously aggregating beyond the 64KB limit, violating the requirement that only plain IPv4 or IPv6 TCP flows qualify.

Bluetooth fixes from Chengfeng Ye include clearing the LE white list when resetting the controller and properly storing the Resolv list size. MPTCP address timeout handling was also adjusted to ensure forward progress when addresses time out.

Keep in mind that 5.10 is the final cycle for that branch. This is the last release for 5.10.y. If you're still on 5.10, consider migrating to 6.1 or later for continued long-term support.

Linux kernel 5.10.267 released

Linux kernel version 5.10.267 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.10.267.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v5.x/patch-5.10.267.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.10.267.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v5.10.267/v5.10.266

Linux kernel 5.15.218 released

Linux kernel version 5.15.218 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.15.218.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v5.x/patch-5.15.218.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.15.218.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v5.15.218/v5.15.217

Linux kernel 6.1.185 released

Linux kernel version 6.1.185 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.1.185.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.1.185.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.1.185.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v6.1.185/v6.1.184

Linux kernel 6.6.154 released

Linux kernel version 6.6.154 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.6.154.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.6.154.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.6.154.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v6.6.154/v6.6.153

Linux kernel 6.12.106 released

Linux kernel version 6.12.106 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.12.106.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.12.106.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.12.106.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v6.12.106/v6.12.105

Linux kernel 6.18.47 released

Linux kernel version 6.18.47 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.47.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.18.47.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.47.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v6.18.47/v6.18.46

Linux kernel 7.1.11 released

Linux kernel version 7.1.11 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.1.11.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v7.x/patch-7.1.11.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.1.11.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v7.1.11/v7.1.10