A busy kernel and distro week with notable security, tooling, and gaming updates that most Linux users will want on their radar. ##
:top_arrow: Top Stories -
Several vulnerabilities have been discovered in the Linux kernel — LWN reports on a batch of kernel issues across multiple subsystems, with Debian, Ubuntu, Fedora, SUSE, RHEL, and others already pushing updated packages and noting that “fixes are available in the latest stable kernels 7.2.10, 6.18.56, 6.12.112, 6.6.158, 6.1.189, 5.15.222, and 5.10.271.” Anyone maintaining Linux systems should ensure they are tracking their distro’s latest kernel updates or these upstream versions to avoid running with known privilege-escalation and denial-of-service bugs. -
X.Org Server 21.1.25 and Xwayland 24.1.14 released due to more security issues — The
X.Org project has pushed Xorg 21.1.25 and Xwayland 24.1.14 with fixes for newly found flaws in the legacy X11 stack, and the release notes call out that these are again security-driven point updates. Desktop users on Xorg (including older NVIDIA setups or thin clients) and Wayland users relying on Xwayland compatibility should take these updates as soon as their distro ships them. -
Gentoo infrastructure sponsors wanted — Gentoo’s infrastructure team says several long-time sponsors have pulled out and that they can currently only maintain a “small number of critical machines,” so they’re asking for new partners to donate hardware, colocation, VMs, hosted servers, or money. Organizations that depend on Gentoo or value a source-based distro with Portage should seriously consider the sponsorship options laid out on the wiki, which range from providing 2 vCPU/4 GB VMs to funding colo bills. -
Ubuntu currently suffering from sustained DDoS attack — Canonical has confirmed that
ubuntu.com, ISO mirrors, and related sites have been intermittently unreachable since October 8 due to a distributed denial-of-service attack, saying their operations and security teams are working to restore normal access. Ubuntu users and admins should expect download and update disruptions around 26.10 images, snaps, and documentation while Canonical tightens network defenses. -
Linux 7.3-rc7 released, stable 7.2.10 and long-term kernels updated —
Kernel.org lists 7.3-rc7 as the current mainline (released 2026-10-12) and 7.2.10 as the latest stable as of 2026-10-11, alongside refreshed longterm series 6.18.56, 6.12.112, 6.6.158, 6.1.189, 5.15.222, and 5.10.271. This cadence affects everyone from distro maintainers to in-house kernel users, who should align their baselines and backports with these tags, especially in light of the active security fixes above. ##
:shield: Security Watch -
Several vulnerabilities have been discovered in the Linux kernel — The coordinated advisory notes that multiple bugs affecting current and LTS lines are fixed in 7.2.10 and the longterm releases 6.18.56, 6.12.112, 6.6.158, 6.1.189, 5.15.222, and 5.10.271, with distros already shipping patched kernels. Anyone running older point releases of these series should plan a maintenance window to roll forward, especially on multi-tenant or internet-facing hosts. -
X.Org Server 21.1.25 and Xwayland 24.1.14 released due to more security issues — The
X.Org team has once again had to issue urgent point releases addressing newly reported vulnerabilities in Xorg and Xwayland, continuing the trend of frequent security-only updates to the aging X stack. Users on desktop Linux where Xorg or Xwayland is installed should track their distro’s security channels and update promptly, even if they’ve already moved most workloads to Wayland. -
Fake Express packages on npm spread a Linux worm — SafeDep’s write-up describes how malicious npm packages impersonating the popular Express framework dropped a Linux-focused worm, detailing indicators in the “dirtyblanket” campaign. Developers shipping or deploying Node.js apps on Linux should audit their dependency trees for suspicious Express-like package names and tighten npm publishing and CI policies. ##
:package: Releases & Updates -
Linux 7.3-rc7 mainline snapshot — The 7.3-rc7 tag, released 2026-10-12, is expected to be the final release candidate before 7.3, so kernel testers and distro teams should finalize regression checks now. -
Linux 7.2.10 stable — Version 7.2.10, released 2026-10-11, ships a batch of fixes captured in ChangeLog-7.2.10, and is the target for anyone tracking the current stable series. -
Linux 6.18.56, 6.12.112, 6.6.158, 6.1.189, 5.15.222, 5.10.271 longterm updates — All current LTS branches got new point releases on 2026-10-03 or 2026-10-11 with security and bug fixes, so distro vendors and embedded integrators should align their kernels accordingly. -
Ventoy 1.1.18 adds experimental SteamOS recovery support — The new Ventoy 1.1.18 release can now handle SteamOS recovery images experimentally and improves the Linux remount feature, which is useful for admins maintaining multiboot USB sticks or doing frequent OS testing. -
Q4OS 6.10 “Andromeda” ships with Plasma 6.3.6 and TDE 14.1.5 — This Debian 13.7 “Trixie”-based release updates KDE Plasma to 6.3.6 and Trinity to 14.1.5, giving conservative desktop users a fresh but stable dual-UI experience. -
Xorg Server 21.1.25 and Xwayland 24.1.14 — Besides security fixes, these coordinated point releases also keep Xwayland and Xorg aligned for distros that need to support both X11 and Wayland workloads during the transition years. ##
:hammer_and_wrench: Worth Reading & Trying -
Will Linux phones become a viable alternative to the Android/iOS duopoly? — This long-form analysis pulls together the current state of mobile projects like postmarketOS/Nura, PinePhone, and Librem 5 and argues what market share and ecosystem shifts would be needed for “Linux phones” to matter beyond enthusiasts. -
Gentoo infrastructure sponsors wanted — Beyond the sponsorship appeal, the accompanying wiki pages detail Gentoo’s infra layout, from minimum VM specs (2 vCPU, 4 GB RAM, 25 GB disk) to how they think about colo and cloud, which is instructive for anyone running volunteer-backed infra. -
Creating distro build tooling for a small community — q66’s post on Chimera Linux’s “cbuild” explains why they rolled their own cross-distro build tooling and what tradeoffs small projects face versus using existing CI/build systems. -
3-2-1 backup strategy with restic and Backblaze B2 — This guide walks through implementing a classic 3-2-1 backup plan on Linux using restic and B2, including concrete commands and notes on testing restores, which is directly applicable to homelab and small-shop setups. -
Fake Express packages on npm spread a Linux worm — The incident report is a practical case study in how supply-chain attacks propagate through popular package ecosystems and how defenders can instrument detection. ##
:penguin: From
LinuxBlog.io -
Linux Bash Scripting: Writing Your First Script — A hands-on primer dated 2026-09-28 that walks shell users through variables, loops, conditionals, functions, and error handling with real Bash examples. -
Linux server performance: Is disk I/O slowing your application? — This 2026-09-12 piece explains how to use tools like top and iostat to distinguish CPU from disk bottlenecks and ties it back to real-world tuning advice. -
Master Linux Bash History with historyctl, HISTFILE, and Shortcuts — Published 2026-09-03, it shows how to tune HISTSIZE, enable timestamps, sync history across terminals, and use advanced search shortcuts to speed up terminal workflows. -
Linux swap Commands: Create and Manage Swap Files/Partitions — A 2026-08-26 guide to using mkswap, swapon, and swapoff to size and manage swap on modern Linux systems, including tips for troubleshooting. -
How to Set Up Hibernation on Linux (Swap Done Right) — This 2026-08-24 article walks through setting up hibernation with appropriate swap configuration and systemd integration on a Debian/XFCE desktop. -
Linux Kernel Parameters Tuning for Better Performance — From 2026-08-22, it offers a curated sysctl baseline and explains key knobs for network throughput, memory pressure, and file I/O that Linux admins can safely experiment with. Let’s dig into any of these in more depth or share what you’re testing and upgrading in your own setups in the replies below. ---
Our community remains free of banner ads thanks to our partnership with Better Stack. Better Stack offers infrastructure observability services, uptime monitoring, logging, incident management, and a free tier worth checking out. Visit: betterstack.com