Greg Kroah-Hartman released seven stable kernel updates across the active longterm and maintenance trees, covering versions from 5.10.269 through 7.1.13. The batch prioritizes critical security hardening, featuring backported fixes for use-after-free vulnerabilities in the USB subsystem and out-of-bounds writes in the IPsec networking stack across all branches. In a notable shift for open source development, this cycle officially introduces Assisted-by: commit metadata crediting AI models like Claude and Codex for their role in identifying and resolving upstream bugs

Greg Kroah-Hartman Drops Seven Kernel Updates, Officially Credits AI in Upstream Commits

The weekly stable batch lands with heavy IPsec hardening, a new LTS line, and a notable shift in how open source tracks machine-assisted bug fixes.

Greg Kroah-Hartman pushed out seven stable kernel releases on Wednesday, rounding out the standard longterm and maintenance trees. If you're scanning the commit logs, you'll notice something new. For the first time, several upstream fixes carry formal Assisted-by: tags crediting AI models like Claude, Codex, and custom internal tools.

These weekly drops follow a predictable rhythm, but this week's batch carries a few milestones. The 7.1 series officially hit end-of-life, giving way to 7.2.3. The 5.15 line is also two months from the wall.

The Security Focus

The dominant theme across all seven releases is IPsec and USB hardening. Greg's team backported fixes for use-after-free races in the espintcp socket path, out-of-bounds writes in IPv6 segment routing via IPIP decapsulation, and a couple of slab corruption bugs in USB endpoints. None of these are theoretical.

The USB usbfs flaw, patched by Miguel Peñaranda, triggers a use-after-free reachable by unprivileged processes through /dev/bus/usb. The Novation usb-audio OOB write from Marouane El Moufid turns a malicious endpoint descriptor into a kernel memory overwrite. KASAN confirmed both.

If you're keeping score, the USB subsystem still dominates the vulnerability landscape. It's one of the largest physical attack surfaces in any operating system, and this cycle's fixes target exactly that. The coordinated backporting across seven branches dropped within a five-minute window, which is Greg's signature workflow. You know the tree is healthy when every longterm branch gets the same critical patches in the same afternoon.

The AI Credit Shift

Here's where it gets interesting. The Assisted-by: attributions are no longer throwaway footnotes. Claude:claude-opus-5 gets a credit on the usbfs fix. Codex:gpt-5.4 pops up on several Nebusec.ai researchers' patches. Griffin Kroah-Hartman, Greg's son, is contributing USB fixes under the banner gkh_clanker_t1000.

It's a deliberate cultural shift. AI-assisted development isn't being hidden anymore. Organizations like Nebusec.ai and AuditCode are treating LLMs as first-class partners in vulnerability discovery, and the kernel maintainers are recording it. The credits cover everything from network stack bounds checks to SELinux policy parsing hardening.

The kernel community is clearly embracing the productivity boost, but the maintainers' job just got harder when it comes to verifying what a model actually understood versus what it guessed. For now, the credits are transparent, and the fixes compile and pass KASAN checks. That's enough to get the stamp of approval.

Keep in mind that 5.15.220 is roughly three months out from end-of-life in December, so if you're still running that tree, now's the time to plan an upgrade. And if you were on 7.1, that's EOL too. You'll want to jump to 7.2.3 for active support.

It's a solid week of maintenance. The IPsec and USB fixes tackle real attack surfaces, and the transparent AI credits set a precedent other projects will likely follow. However, at the same time, the sheer volume of machine-assisted patches means reviewers will need to dig deeper before merging. The kernel tree stays stable, but the human-in-the-loop just got more important, not less.

If you manage a fleet of servers or embedded devices, check your running kernel against the seven releases listed below. Patch managers should pick up the appropriate -stable package for your distro this week.

Linux kernel 5.10.269 released

Linux kernel version 5.10.269 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.10.269.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v5.x/patch-5.10.269.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.10.269.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v5.10.269/v5.10.268

Linux kernel 5.15.220 released

Linux kernel version 5.15.220 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.15.220.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v5.x/patch-5.15.220.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.15.220.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v5.15.220/v5.15.219

Linux kernel 6.1.187 released

Linux kernel version 6.1.187 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.1.187.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.1.187.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.1.187.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v6.1.187/v6.1.186

Linux kernel 6.6.156 released

Linux kernel version 6.6.156 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.6.156.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.6.156.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.6.156.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v6.6.156/v6.6.155

Linux kernel 6.12.108 released

Linux kernel version 6.12.108 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.12.108.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.12.108.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.12.108.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v6.12.108/v6.12.107

Linux kernel 6.18.49 released

Linux kernel version 6.18.49 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.49.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.18.49.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.49.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v6.18.49/v6.18.48

Linux kernel 7.1.13 released

Linux kernel version 7.1.13 (EOL) is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.1.13.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v7.x/patch-7.1.13.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.1.13.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v7.1.13/v7.1.12