vyos-build.git/scripts/package-build/linux-kernel, branch current

Kernel: T8938: consolidate build time options for amd64 and arm64 WWAN

2026-05-28T15:07:13+00:00

Kernel: T8919: Update Linux Kernel to 6.18.33

2026-05-23T17:54:51+00:00

The Kernel 6.18.33 now has an upstream fix for the fragnesia vulnerability

Merge pull request #1194 from c-po/kernel-source

2026-05-18T14:28:03+00:00

Kernel: T8880: reduce size of Kernel source TAR

Kernel: T8879: add missing Hyper-V drivers after 6.18 upgrade (#1193)

2026-05-18T12:47:40+00:00

* Kernel: T8846: consolidate config for CPU/Task time and stats accounting * Kernel: T8879: add config section for hypervisor Virtual Socket Protocol * Kernel: T8879: add missing Hyper-V drivers after 6.18 upgrade Add drivers for Hyper-V hypervisor which got lost in transition from 6.6 to 6.18 Kernel upgrade.

Kernel: T8880: reduce size of Kernel source TAR

2026-05-17T15:56:32+00:00

Enable "make mrproper" before packaging kernel source tarball. After enabling PWRU support in T8496, the auto-generated kernel source tarball grew from under 1 GB to ~4 GB, largely due to intermediate build artifacts (for example, vmlinuz.o growing from 54 MB to 618 MB with additional debug symbols). Since the tarball is intended to contain kernel sources and custom patches and not intermediate objects, we now clean the tree with "make mrproper" before creating the tarball. This keeps package size down while preserving rebuildability.

Kernel: T8871: Update Linux Kernel to 6.18.31

2026-05-15T20:05:43+00:00

This fixes the LPE https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn

kernel: T8871: add a patch for the ptrace vulnerability

2026-05-15T10:41:06+00:00

that allows unprivileged users to read files owned by any other user

Kernel: T8864: add patch for "fragnesia" local privilege escalation

2026-05-14T11:39:02+00:00

Fragnesia is a universal Linux local privilege escalation exploit, discovered with V12 by William Bowling with the V12 team. Fragnesia is a member of the Dirty Frag vulnerability class. This is a separate bug in the ESP/XFRM from dirtyfrag which has received its own patch. However, it is in the same surface and the mitigation is the same as for dirtyfrag. It abuses a logic bug in the Linux XFRM ESP-in-TCP subsystem to achieve arbitrary byte writes into the kernel page cache of read-only files, without requiring any race condition. The technique extends the page-cache write bug class that includes Dirty Pipe: when a TCP socket transitions to espintcp ULP mode after data has already been spliced from a file into the receive queue, the kernel processes the queued file pages as ESP ciphertext. The AES-GCM keystream byte at counter block position 2, byte 0 is XORed directly into the cached file page. By selecting the IV nonce to produce a desired keystream byte, any target byte in the file can be set to any value — one byte per trigger invocation. From: https://github.com/v12-security/pocs/blob/532994fc003a7/fragnesia/README.md

Merge pull request #1178 from SuperQ/superq/psi

2026-05-13T15:29:03+00:00

kernel: T8847: Enable PSI metric data

Enable PSI metric data

2026-05-11T19:29:42+00:00

Enable the kernel [Pressure Stall Information][PSI] accounting feature. This allows users to gather data on CPU and memory starvation. It's very useful to help find cases where the system performance is impacted by overloaded CPUs. [PSI]: https://docs.kernel.org/accounting/psi.html Signed-off-by: SuperQ