On October 21, 2026, Linus Torvalds merged into Linux 7.4 the removal of __get_user() and __put_user(), historical variants that do not validate the user address range and are therefore unsafe. He drafted the conversion partly with Claude Code, used “as a fancy sort of Coccinelle script”: AI is settling into kernel maintenance, including for eliminating whole classes of memory bugs.

On October 12, 2026, Linus Torvalds released the seventh and likely final release candidate of Linux 7.3, with the stable release expected October 18. This RC cycle surfaced a bug that had been silently dropping writes since Linux 6.6; if you are on an LTS kernel, stay there — 7.3 is not a long-term kernel.

On October 15, 2026, a critical Linux kernel flaw, CVE-2026-99999 nicknamed PwnEscape, lets code running inside a virtual machine read its host’s memory, crash the host, or execute code on it. Update the host kernel, not the guest kernel, and verify the fix with your distribution.

As the Linux 7.4 merge window approaches, the Rust-written NVIDIA Nova driver keeps building out the kernel’s Rust DRM infrastructure. It is a tipping-point signal: the graphics subsystem is becoming the place where Rust earns its stripes in the kernel, one GPU at a time.

On 8 October 2026, a public exploit named AnyPwn made a pre-authentication remote code execution flaw in AnyDesk Linux reliably exploitable: a heap overflow in the session protocol yields root, fixed in 8.0.3 but with no CVE and no security advisory. Update to 8.1.0 and restrict TCP port 7070 in the meantime.

In early October 2026, Flathub replaced its blanket ban on AI-generated content, in force since May, with a mandatory disclosure policy. Maintainers must declare generated parts, but Flatpak manifests and automated submissions remain strictly forbidden.

On October 8, 2026, the Linux 7.3 Git merge deprecated EXT4’s data=journal mode, which writes file data and metadata to the journal before committing them, with removal scheduled for early 2028. Check your mount options in /etc/fstab: if you don’t enable data=journal explicitly, this deprecation does not affect you.

After years of the HDMI Forum blocking the open-source driver, the FreeSync, VRR and ALLM patches for AMDGPU are aligned for Linux 7.4, with Fixed Rate Link enabled by default. Gamers and Steam Machine owners with an AMD GPU and an HDMI 2.1 display finally get the full bandwidth and lower latency on the mainline kernel.

A patch series by Yuan Liu (Intel), queued in mm/core.git ahead of the Linux 7.4 merge window, replaces page-by-page zone scans with an optimized contiguity check. Measured: up to 81% less time to hot-add memory to a VM and 75% to hot-remove it, with Samsung also reporting CXL gains.

An 81-line patch by Hao Li, queued into slab/for-next ahead of the Linux 7.4 merge window, lets the slab allocator refill its sheaves from the barn instead of partial slabs, clearing a saturation that penalized kfree_rcu(). The measured result: +24% on the will-it-scale mmap1 test and massive gains on the barn microbenchmarks.

On August 6, 2026, MIT CSAIL researchers unveiled at Black Hat USA a new CPU attack that bypasses Spectre v2 fixes on both Intel and AMD processors. TONTOU exploits the gap between branch predictor neutralization and its actual use, extracting `/etc/shadow` at 5.47 bytes per second with 91.97% accuracy.

An automated ransomware campaign dubbed RedLocker exploits passwordless Redis instances exposed to the internet. By August 4, 2026, 3,200 servers had already been compromised. Close port 6379 or enable Redis authentication now.

On August 7, 2026, NetworkManager adopted a formal AI contribution policy, joining the Linux WiFi maintainer who established a 'three-second review' rule. Open source projects aren't banning LLMs — they're defining acceptable use and enforcing consequences for abuse.

On August 6, 2026, the Linux WiFi maintainer announced a three-second rejection rule for AI-generated patches, as the networking subsystem continues to be flooded with automated contributions. Open-source network infrastructure maintainers are raising the alarm: code quality is at risk.

Sixteen years after Lennart Poettering proposed rethinking PID 1, systemd has absorbed bootloading, DNS, network config, containers, and now OS installation. Here’s what version 261 means for Linux administrators in 2026.

Incus is the community fork of LXD that runs system containers, OCI application containers, and QEMU virtual machines from the same command line. If you’re still on LXD, using Docker for service containers, or running Proxmox for a handful of VMs, Incus replaces all three without asking for a dime.

The three dominant GPU terminals of 2026 all offer buttery-smooth rendering and near-instant keyboard response. Raw speed is no longer the differentiator — what matters is whether you want ruthless minimalism, an integrated power-user platform, or a programmable terminal that speaks Lua.

The Steam Deck OLED crossed four million units, Proton 10.0 makes 80% of Steam’s top 1,000 playable on Linux, and AAA titles now match or beat DirectX performance through Vulkan translation. If you play single-player or stick to Steam, you can delete your Windows partition today.

BorgBackup 1.4.4 and Restic 0.18.1 are the two best open-source backup tools for Linux in 2026 — deduplication, AES-256 encryption, and cron automation. Here’s how to configure them so an accidental rm -rf never costs you more than the last hour of work.

Hyprland is a dynamic tiling Wayland compositor that combines automatic window layouts, fluid animations and a Lua-based configuration. With version 0.55 and its native Layout API, it redefines what a Linux desktop can look like without sacrificing performance.

Docker Desktop costs $9/month per developer since December 2024 — Podman runs the same OCI containers with no daemon, no root privileges, and no bill. If you are paying for Docker today, read this before your next invoice.

In 2026, Btrfs and OpenZFS 2.4 dominate advanced Linux storage. One lives inside the kernel, the other requires an out-of-tree module — and that single detail changes everything depending on whether you run a desktop, a NAS, or a server.

Debian’s 13th stable release landed on August 9, 2025, with 69,830 packages, kernel 6.12 LTS, and official RISC‑V support. It doesn’t make headlines — it runs your servers, clouds, and routers, and that’s exactly why you pick it.