Linux ships 7.2.8 and 6.18.54, leaning hard on SMB and AMD GPU fixes
The weekly stable update lands today with 438 and 397 commits, focused on networking file-sharing hardening and graphics stability.
The Linux kernel picked up two more point releases today. Greg Kroah-Hartman and the stable team signed off on Linux 7.2.8 and 6.18.54 just minutes apart, both dated 25 September 2026, keeping the project's roughly weekly cadence on track.
These aren't feature drops. Both are the usual bug-fix and security backports pulled from mainline, applied to two separate branches at once. 7.2.8 rides the current stable line with roughly 438 commits. 6.18.54 sits on the LTS branch and is good until at least December 2028 and brings around 397 commits.
What actually changed
wifi led both batches, as it has for much of the year. 7.2.8 handed the wireless subsystem about 57 patches, with DRM/graphics close behind at 35. 6.18.54 tracked closely, with 58 wifi patches and networking and DRM tied at 24.
The biggest single theme across both is SMB/CIFS networking hardening. Red Hat's Frank Sorenson, Paulo Alcantara, Namjae Jeon, and others packed in a wall of bounds-check fixes. One path, smb3_enum_snapshots, was leaking adjacent slab memory to userspace. That's the kind of bug that makes a kernel developer reach for the coffee. Adjacent slab memory left unguarded is never a good thing.
They also fixed a use-after-free on a stale next_buffer pointer, an integer overflow in a NextCommand bounds check, and a leaked smbdm.Connection on RDMA session errors.
Then there's the usability fix. April Cardenas of Canonical addressed lease-break acknowledgements going through the wrong session on multiuser mounts. That resolves the repeated "Bad File Descriptor" errors you'd hit when copying files from NetApp ONTAP or Azure NetApp Files through GNOME Nautilus. Not the flashiest change in the batch, but it's one you feel in daily workflow.
There's a subtle backporting wrinkle worth flagging too. Namjae Jeon reverted a September change whose SMB1 prerequisite wasn't actually present in the stable tree. That revert had produced a malformed negotiate response that killed Windows connections. It reads like a textbook example of how fiddly stable-tree backporting really is.
AMD graphics and compute got a steady dose of stability work. The one most worth your attention is a drm/ttm use-after-free. Swapped-out GPU buffers were stuck in their bulk_move range, leaving a dangling cursor that could trigger list_del corruption or NULL dereferences minutes or even hours after hibernation. The upstream issue had already crashed five of 18 tested hibernation cycles before this landed. If you run Linux off a suspend state regularly, this is a genuine one.
There's also a PCIe link misreporting fix. A helper change had made amdgpu_device_gpu_bandwidth() query the host port instead of the GPU, so a Gen4 x8 card was reporting as Gen5 x16. Now both ends of the physical link are cached, so at least your task manager lies to you truthfully.
IPsec and xfrm got a performance win alongside the security fixes. Nvidia's Jianbo Liu refactored the state lock across hardware crypto-offload paths, which matters a lot with RSS multi-queue NICs. iperf tests reportedly pushed throughput up to about 65 percent more with 12 to 16 queues over a single IPsec SA. That's meaningful for anyone running hardware crypto offload.
Wireless security closed out the batch. Daehyeon Ko and Eric Biggers made libipw reject TKIP frames lacking a full eight-byte Michael MIC, after a short frame could let payload length wrap and read past the buffer. Biggers also consolidated duplicate michael_mic() code into cfg80211. Devin Wittmayer fixed a monitor-interface NULL dereference in mac80211 that crashed ath9k when someone set a monitor interface active from the command line.
Memory management and filesystems rounds things out. Darrick Wong and Christoph Hellwig fixed XFS transaction-block under-reservation during shortform directory repair, a bug that could trip an assertion and force a filesystem shutdown mid xfs_scrub. Bytedance's Qi Zheng and Usama Arif removed a leftover gate that was short-circuiting XFS inode reclaim under memory pressure. Lorenzo Stoakes and Zi Yan fixed memory unaccounting on mmap_prepare() failure, clearing real-world regressions for GPU and driver mmaps.
Linux kernel 7.2.8 released
Linux kernel version 7.2.8 is now available:
Full source: https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.8.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v7.x/patch-7.2.8.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.8.tar.sign
You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v7.2.8/v7.2.7
Linux kernel 6.18.54 released
Linux kernel version 6.18.54 is now available:
Full source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.54.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.18.54.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.54.tar.sign
You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v6.18.54/v6.18.53
