Linux Kernel 7.1.7 is now available, shipping a critical security update that addresses the Safe RET Interrupt Injection vulnerability on AMD Zen 1 through Zen 4 processors. The patch, authored by AMD's Borislav Petkov, hardens the kernel against local attackers who could previously bypass Spectre v2 mitigations by injecting timed interrupts into the return stack protection sequence. While the proof-of-concept leak rate is modest at roughly 5.47 bytes per second, the fix is essential for systems requiring strict isolation between untrusted local users. The release includes only this security modification, making it a low-risk upgrade for administrators managing AMD-based server and desktop infrastructure.

Linux Kernel 7.1.7 Lands With Critical Fix for AMD Zen Processors

Greg Kroah-Hartman shipped Linux 7.1.7 on August 6, 2026. It's a small release, but it does one very important thing. The stable kernel now patches a Spectre-class vulnerability that bypasses Safe RET protections on AMD processors. If you run Zen 1 through Zen 4 hardware, this update is mandatory.

The vulnerability was reported by an external researcher and acknowledged by AMD. It lets local attackers inject timed interrupts during the Safe RET mitigation sequence. This disrupts the CPU's Branch Target Buffer eviction and leaks kernel memory. The proof-of-concept leak rate sits at roughly 5.47 bytes per second. It's slow, but it's enough to pull credentials or hashes over time.

The Fix Explained

Borislav Petkov from AMD authored the patch. The commit, titled "x86/bugs: Make Safe-RET robust against interrupt injection," adds 124 lines across five files. The change is surgical. It masks interrupts while the Safe RET sequence runs. This ensures the protection completes atomically and can't be disrupted.

The patch modifies arch/x86/include/asm/nospec-branch.h, arch/x86/kernel/cpu/bugs.c, arch/x86/lib/retpoline.S, and arch/x86/entry/entry_64.S. It also bumps the version in the Makefile. There's no feature bloat. Just a hardened x86 security path.

Keep in mind that this vulnerability only triggers if Spectre v2 mitigations are enabled. That's the default on most distributions. The attack requires local code execution on the target system. Remote exploitation isn't possible. Still, any system with untrusted local users needs this patch.

What Else Is in 7.1.7?

Nothing else. The release is purely a security hardening update. It's a stark contrast to the Linux 7.1 mainline from June 14, 2026. That release brought NTFS rewrites, BPF-powered io_uring, and sched_ext support. 7.1.7 just keeps your AMD CPUs secure.

The upgrade path is straightforward. The source tarball weighs in at about 151 MB compressed. You can grab it from cdn.kernel.org/pub/linux/kernel/v7.x/. Backport patches are also available in the linux-stable.git repository if you need to apply this to an older tree.

CPU security is a moving target. You fix one bypass, another surfaces. This patch closes the current hole. Update your systems. The kernel is waiting for you at kernel.org.

Linux kernel 7.1.7 released

Linux kernel version 7.1.7 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.1.7.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v7.x/patch-7.1.7.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.1.7.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v7.1.7/v7.1.6