Linux 7.2.15 ships as the final kernel in a series already sent to end-of-life
Greg Kroah-Hartman just pulled the plug on Linux 7.2. This is the last 7.2 release, and he wants you on 7.3.y immediately.
Greg Kroah-Hartman has retired the Linux 7.2 stable series. Kernel 7.2.15 went out today and it is the final drop from the 7.2.y tree. No more bugfixes follow.
His release note was blunt, and he did not hedge. "Note, this is the LAST 7.2.y kernel release," he wrote on the stable mailing lists. "After this one the 7.2.y kernel tree is end-of-life. Please move to 7.3.y at this time." A few lines down: "All users of the 7.2 kernel series must upgrade."
On paper it is a shriveled update. 15 files touched, 498 insertions, 109 deletions. The timing is the actual story here.
Greg said 7.2 was being wrapped up a bit sooner than the normal cycle. Keeping eight branches alive at once is, in his words, "a taxing task under the best of times." Linux 7.3 has been out since October 18, so retiring 7.2 now just means the stable team has one tree to babysit.
It is worth remembering this is not an LTS retirement. 7.2 never had years of support ahead of it, but it was still weeks away from where it might have gone. The math is pragmatic: fewer branches to test means fewer breakages for the people who actually ship your distro.
A small release, some real bites
Even a dead branch drops real fixes, and a few here bite. The set bundles eight patches from seven contributors, and a couple of them are security-relevant.
The sharpest one is networking. Stefan Metzmacher of Samba shipped three patches for the smbdirect path, which pushes SMB traffic over RDMA or InfiniBand hardware. The key fix stops failed connections piling up against the listen backlog. After about ten of them, ksmbd starts rejecting new connections with -EBUSY, letting an unauthenticated peer wedge the server so it stops accepting SMB-Direct connections entirely.
Namjae Jeon's ksmbd patch closes another remote hole: the receive thread could read a new request before negotiation finished, mistaking a pipelined SMB2 message for an older SMB1 one. The fix blocks a read-beyond-the-buffer bug and follows up on an earlier slab-out-of-bounds patch.
Then there is the one you should care about most. Zizhen Liu's patch on net/skbuff restores a lost marker in skb_zerocopy(). The missing SKBFL_SHARED_FRAG flag breaks an invariant that later in-place writers lean on. Per the commit, a packet could then be decrypted in place, letting an unprivileged user write into the page cache of a root-owned, read-only file. Easily the most significant change in the batch.
None of these carried a fresh CVE when they landed. They were backported stable fixes, so check the kernel.org security list against existing advisories before you go hunting for a case number.
The detail hiding in plain sight is a line showing up in several commit messages. Stefan's three patches and Radek Podgorny's Bluetooth fix both carry an "Assisted-by: Claude:claude-opus-5" tag. That is the marker worth tracking. AI-assisted work now routinely appears upstream, and reaching production-quality stable code is a different bar. Phoronix and others have already logged the surge in AI-fueled fixes across recent kernels. This release just dates the moment.
Not everything is machine-written here. Radek also fixed a Bluetooth quirk where an adapter keeps chasing a stale resolvable private address after a peer reveals its real identity, breaking reconnection once a device drops Bluetooth privacy. Small patch. Probably touches more phones than you'd guess.
Smaller touches round it out: André Draszik killed a kbuild third-pass kallsyms failure that used to need a make KALLSYMS_EXTRA_PASS=1 workaround, Christian Brauner patched a race between execve() and coredumps, and two drivers got accuracy and autoload fixes for a laptop ambient-light sensor and a Turris Omnia router. The whole thing was tested-by a broad crew including folks from Debian, the Linux Foundation, Broadcom, and Critical Infrastructure Protection.
It helps to recall why 7.2 mattered at all. Linus Torvalds shipped it on August 16 over a codebase now past 43 million lines, and it was a performance pass: cache-aware task scheduling, a "fairer" DRM scheduler (pulled back to experimental after it froze Plasma on AMD GPUs), better memory reclaim, swap table phase IV, USB4STREAM for shoving packets over a Thunderbolt cable, and a new dm-inlinecrypt encryption target. 7.3 landed a month later toward virtualization, and the 7.4 merge window is opening this weekend with a final aimed at late December, which could be this year's LTS.
If you are still on 7.2 right now, your options narrow fast. You can move to 7.3 or park on an LTS. The current longterm list is 6.18, 6.12, 6.6, 6.1, 5.15, and 5.10. 7.2 does not belong there, so your clock is ticking.
Linux kernel 7.2.15 released
Linux kernel version 7.2.15 (EOL) is now available:
Full source: https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.15.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v7.x/patch-7.2.15.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.15.tar.sign
You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v7.2.15/v7.2.14
