Greg Kroah-Hartman has released critical updates for the Linux kernel across eight major version branches, focusing on a network stack fix that prevents kernel panics caused by IP fragments entering tun/tap devices. This vulnerability, triggered by unprivileged users, poses a significant risk in multi-tenant cloud environments and emphasizes the importance of kernel security, especially as AI companies increasingly contribute to kernel reliability. Alongside the main fix, additional vulnerabilities have been addressed, including a TAP driver null pointer dereference and other networking issues. Administrators are urged to migrate from older kernel versions 5.10 and 5.15, which are nearing end-of-life, to the actively maintained 6.1 or 6.6 LTS versions

Linux Kernel Stable Release Patches Critical TAP GSO Panic Vulnerability

Greg Kroah-Hartman has released stable kernel updates across eight major version branches, headlined by a critical network stack fix that prevents kernel panics when IP fragments enter tun/tap devices with Generic Segmentation Offload state. The upstream patch was authored by Anthropic researcher Xinyang Ge and can be triggered by unprivileged users or exploited across KVM virtualization boundaries, making it an immediate priority for multi-tenant cloud environments. The cycle also lands a separate TAP driver null pointer dereference fix tracking CVE-2026-74684 alongside additional networking vulnerabilities, while highlighting a growing trend of AI companies treating kernel reliability as essential infrastructure hygiene. Keep in mind that Linux 5.10 and 5.15 are approaching end-of-life in December 2026, so administrators running those branches should migrate to 6.1 or 6.6 LTS as soon as your maintenance window opens.

Linux Kernel Stable Release Patches Critical TAP GSO Panic Vulnerability @ Linux Compatible