XanMod Ships Kernels 7.1.5 and 6.18.40 with Security Hardening and Performance Patches
XanMod has released updated builds for its Mainline and LTS kernel branches, bringing the 7.1.5 and 6.18.40 upstream releases to your system with extensive optimizations layered on top. Both versions are available now, and if you're running a Debian-based distro on x86-64, you should probably take a look at what's inside.
Created and maintained by Alexandre Frade since 2015, XanMod doesn't just repackage the vanilla kernel. It applies LLVM ThinLTO with software pipelining, tweaks core scheduling for heavy workloads, defaults to Google's BBRv3 congestion control, and ships the AMD 3D V-Cache optimizer as a loadable module. The patchset hits both the mainline 7.1 and longterm 6.18 trees.
Security Work Takes Priority
The upstream releases from Greg Kroah-Hartman landed on July 24 with a noticeable emphasis on fixing race conditions and buffer overflows. The most critical target is ksmbd, the kernel-side SMB server. Multiple vulnerabilities allow an authenticated client to escape the exported share directory through a path resolution race, alongside stack overflows during multichannel session key operations. XanMod's builds include the upstream fixes, which root the create walk at the share boundary and enforce opener credentials for FSCTL mutations.
Thomas Gleixner also closed a long-standing use-after-free in POSIX CPU timers triggered when a non-leader process calls exec(). The fix uses proper memory ordering barriers and retries the task lookup instead of bailing on a NULL pointer. If you're running services that rely on SMB shares or bind mounts, these patches probably matter more to you than scheduler tweaks.
NTFS and NTFS3 saw extensive bounds-checking hardening across both branches. Out-of-bounds reads, stack overflows in index buffer lookups, and attribute validation gaps got patched. It's the kind of security work that rarely makes headlines until a malicious drive image causes trouble, but it's the exact reason you keep a security-focused kernel up to date.
Performance and Compatibility Notes
Both XanMod builds default to the sched_ext scheduler class and include Cloudflare's TCP collapse processing for high-throughput networks. If you're running an AMD Zen processor with 3D V-Cache, the amd_3d_vcache driver module is already compiled in and ready to load. Head here to check your package versions before switching branches.
NVIDIA driver compatibility is one area where you should pause before upgrading. XanMod's current DKMS modules are pinned to driver versions 595.84 and 580.142. If the upstream kernel pulls in changes that break the DKMS compilation, you'll wait for a patch. Verify your GPU driver state before switching from 6.18 LTS to the mainline 7.1 tree, especially if you rely on VirtualBox or VMware Workstation DKMS modules.
Installation is straightforward for supported distributions. You'll want to match the package name to your CPU's psABI level. v3 targets AMD Zen and Intel Haswell or newer. v2 covers older hardware like AMD Family 14h and Intel Nehalem. Legacy builds exist for pre-2009 x86-64 chips, though you're probably running something newer if you're reading this.
sudo apt update && sudo apt install linux-xanmod-x64v3
Head here to the XanMod repository or check the changelog for the full list of commits. Source packages are mirrored on GitLab and SourceForge, so you can verify the builds if you don't trust the binary download.
Keep in mind that the mainline 7.1 branch gets point-release updates roughly every one to two months. The LTS 6.18 tree stays on the table for years, and XanMod also ships a real-time variant (6.18-rt) if you need deterministic scheduling for audio production or industrial control. Source packages and full changelogs live on the project's GitLab and the official archive site. Update when you're ready, and test your workload before rolling it out to a production server.
