linux

RHEL 10.2 and 9.8, released May 20, add ML-KEM post-quantum SSH, kernel livepatching without reboots, the goose AI CLI tool, and extensive language stack updates.

Mesa 26.1.0, released May 6, 2026, delivers over 40 new Vulkan extensions across major GPU drivers, adds VirtIO-GPU native-context support for Intel, and marks the end of VirGL maintenance.

Debian's release team has switched on a migration block for any package that fails to build reproducibly, with 98.29% of architecture-independent packages already passing.

CVE-2026-43284 and CVE-2026-43500 chain two page-cache write primitives in IPsec ESP and rxrpc to give unprivileged users root on every major Linux distribution shipped in the last nine years.

Vim 9.2.0435 fixes an OS command injection in :find completion where backtick-enclosed shell commands inside the path option ran during Tab completion, with a modeline-set path enabling exploitation by simply opening a malicious file.

CVE-2026-35414 lets a comma in an SSH certificate principal slip past authorized_keys access controls, granting root on vulnerable servers. OpenSSH 10.3 ships the fix.

CVE-2026-31431, discovered by Theori using its AI scanner Xint Code, lets unprivileged users root Ubuntu, Amazon Linux, RHEL, and SUSE through a logic flaw in the kernel's crypto subsystem.

Intel archived the GitHub repository that anchored its Open Ecosystem Community and Evangelism program on April 20, 2026, and shuttered several community-facing projects — the most visible step in a multi-quarter pullback that began with executive comments last October.

Canonical releases Ubuntu 26.04 LTS on April 23, shipping Rust-based coreutils and sudo as defaults, GNOME 50 without X11, and a 6 GB RAM floor that redefines the distribution's baseline for the next decade.

Forgejo 15.0 lands as the project's new LTS release with repository-scoped access tokens, reusable workflow expansion, OpenID Connect support, and ephemeral runners.

Raspberry Pi OS 6.2 tightens security by requiring a password for sudo commands on new installations and replaces PulseAudio with PipeWire across the desktop stack.

Linux 7.0 arrives on April 12, graduating Rust from experimental status, introducing an extensible eBPF scheduler framework, and adding autonomous XFS repair capabilities.