Stable kernels with security fixes

[Posted August 8, 2023 by corbet]

The 6.4.9, 6.1.44, 5.15.125, 5.10.189, 5.4.252, 4.19.290, and 4.14.321 stable kernel updates have all been released; they are dominated by fixes for the latest round of speculative-execution vulnerabilities.

Do note the warning attached to each of these releases:

Note, PLEASE TEST this kernel if you are on the 6.4.y tree before using it in a real workload. This was a quick release due to the obvious security fixes in it, and as such, it has not had very much testing "in the wild". Please let us know of any problems seen. Also note that the user/kernel api for the new security mitigations might be changing over time, so do not get used to them being fixed in stone just yet.

Stable kernels with security fixes

Posted Aug 10, 2023 8:54 UTC (Thu) by eharris (guest, #144549) [Link] (4 responses)

About kernel 6.4.9. There's a health warning (in red)....but even so the Fedora team are pushing out 6.4.9 this morning. I haven't done the upgrade. Should I be worried....and wait for 6.4.10?

Stable kernels with security fixes

Posted Aug 10, 2023 10:25 UTC (Thu) by jengelh (guest, #33263) [Link] (1 responses)

Asking the Internet… you know you will be getting more opinions than there are commentors, and then you *still* have to decide for yourself.

Stable kernels with security fixes

Posted Aug 10, 2023 16:59 UTC (Thu) by Ranguvar (subscriber, #56734) [Link]

Dead right.

FWIW, I'm on 6.4.9 without issue, doing basic desktop tasks and running VMs - nothing high load.
Not using a Downfall-affected CPU though.

Stable kernels with security fixes

Posted Aug 10, 2023 21:39 UTC (Thu) by alspnost (guest, #2763) [Link]

I'm running it (via the Liquorix updates) for the past 28 hours, on a Ryzen 5600 APU standard desktop setup, and no issues observed so far. Looks like 6.4.10 will arrive soon anyway.

Stable kernels with security fixes

Posted Aug 14, 2023 3:35 UTC (Mon) by Tashlan (guest, #17277) [Link]

Probably not a concern for you but 6.4.9 and 6.4.10 (Fedora) have broken nested virtualization for me (Ryzen 9 5950x). My system's topology is unusual as I've leaned into PCI pass-through.