Linux Kernel 7.1.8 Drops with Security Patches, Graphics Fixes, and a Few Subsystem Updates
Greg Kroah-Hartman pushed Linux 7.1.8 to kernel.org this morning, bringing over 200 commits of bug fixes and security patches to the 7.1 stable branch. If you're running anything on a 7.1.x kernel right now, it's worth an update.
The patch hit around 20:27 UTC+2. Stable maintenance has always been Greg's wheelhouse, and this one keeps the engine running smoothly while the mainline crew sorts out the next release candidate.
Security and Driver Housekeeping
The headline grabs here are all use-after-free and overflow fixes in the networking stack. SCTP, TIPC, SMC, FOU, and WiFi/mac80211 all got patched. There's also a uint32_t overflow correction in the amdkfd EOP ring buffer and peer transport count overflow prevention in SCTP. If your network stack ever started behaving oddly under heavy load, this is exactly the sort of thing you'd want in your chroots and servers.
Stack info leaks in the ALSA usb-audio driver also got closed up. Two use-after-free vulnerabilities in the ALSA timer core were fixed alongside Thunderbolt validation patches that finally cap XDomain response copies at actual frame sizes. USB serial drivers saw heap overflow corrections in kl5kusb105 and io_ti, while the UCSI Type-C driver finally got its port unregistration race conditions sorted out.
Valve's been talking about memory shortages affecting shipping dates for months, and the kernel team isn't immune to similar supply chain headaches when it comes to driver development cycles. This round of UCSI fixes might look small, but it's exactly the kind of race condition that shows up after thousands of hours of continuous Type-C handshake testing. You probably never noticed the hangs. You will notice them gone.
AMD's got a handful of display tweaks, including idle optimization handling, HDMI AV mute wait adjustments, and a divide-by-zero fix in some display calculations. Intel Xe graphics got external BO kernel fence waiting improvements, and VMware's vmwgfx driver got overflow protection for shader sizes plus cursor size limit enforcement. Nothing earth-shattering, but it's the kind of polish that keeps multi-OS environments from throwing errors at you during peak hours.
The 7.1 Feature Set Keeps Building
The 7.1 feature branch, which originally landed back in June, is still getting its share of stability work. The container management story is probably the most immediately useful for anyone running cloud workloads. Three new clone3() flags, CLONE_AUTOREAP, CLONE_NNP, and CLONE_PIDFD_AUTOKILL, give process managers tighter control over child lifecycles. Mount namespaces can now be created with filesystems attached in a single call via FSMOUNT_NAMESPACE.
The BPF story keeps expanding, too. io_uring can now hand execution over to extendible event loops controlled by BPF programs, which cuts out unnecessary userspace transitions. That zero-copy AF_XDP path through io_uring is going to matter for anyone pushing heavy network traffic through containers. Keep in mind that you'll need a BPF program loaded to actually trigger the override, but the door is firmly open.
Swap table phase three finally dropped the static swap_map. It saves roughly 30 percent of memory allocated for static swap metadata. That's 256MB gone just for mounting a 1TB swap device. You won't notice it on a desktop, but cloud instances will thank you.
Intel's FRED architecture is now enabled by default on supported hardware, which speeds up privilege-level transitions without forcing users to opt in. NTFSPLUS continues to mature as a cross-platform file sharing option, and the Rust for Linux bindings keep growing with gem shmem support and a new hardware register access macro. On the subsystem leadership front, Wolfram Sang officially handed off the I2C maintainership to Andi Shyti after 13.5 years. The transition wrapped up during this stable cycle, which means the 7.2 cycle will see Andi's fingerprints all over I2C submissions.
The 7.1 stable branch will keep receiving patches through roughly September 2026, though distribution maintainers will likely backport critical fixes well past that window. You can grab the source, the tarball, or the full 409K-line changelog from kernel.org. If you're tracking development, v7.2-rc6 is already posted to the main tree.
Linux kernel 7.1.8 released
Linux kernel version 7.1.8 is now available:
Full source: https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.1.8.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v7.x/patch-7.1.8.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.1.8.tar.sign
You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v7.1.8/v7.1.7
