The Wire · Showcase
ARCH KERNEL 7.0.7-ARCH2 SHIPS WITH SECURITY HARDENING AND NETWORKING FIXES
By RepoJournal · Filed · About Arch Linux
Arch Linux kernel v7.0.7-arch2 is live with unprivileged namespace restrictions, io_uring memory fixes, and critical SMC-D socket vulnerabilities patched.
The new kernel [1] lands five critical patches on top of stable 7.0.7, including a sysctl to disable unprivileged CLONE_NEWUSER (closing a privilege escalation vector), udmabuf scatterlist corruption fixes, and io_uring/zcrx freelist violation warnings. Network stack gets hardened too: shared-frag markers now propagate correctly through frag-transfer helpers [2], and SMC-D socket code rejects malicious CHID-0 ACCEPT packets that could match empty device slots [6]. Meanwhile, the archinstall team shipped standalone IWD networking support [7], letting minimal systems skip the networkmanager/wpa_supplicant/polkit dependency chain entirely. iwd now handles DHCP directly while systemd-resolved picks up DNS via stub symlink. Across the Haskell ecosystem, five core packages are staging updates including quic (0.1.28-27), criterion (1.6.3.0-78), and conduit-extra (1.3.8-105) [3] [4] [5].
Action items
- → Pull Arch kernel 7.0.7-arch2 on next system update archlinux/linux [immediate]
- → Test standalone IWD network configuration in archinstall if deploying minimal systems archlinux/archinstall [plan]
- → Monitor Haskell staging packages for promotion to extra archlinux/packages [monitor]
References
- [1] Arch Linux kernel v7.0.7-arch2 ↗ archlinux/linux
- [2] Merge tag 'net-7.1-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net archlinux/linux
- [3] update haskell-quic to 0.1.28-27 in extra-staging-x86_64 archlinux/state
- [4] update haskell-criterion to 1.6.3.0-78 in extra-staging-x86_64 archlinux/state
- [5] update haskell-conduit-extra to 1.3.8-105 in extra-staging-x86_64 archlinux/state
- [6] net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot archlinux/linux
- [7] Add IWD standalone option to network configuration + fix NM_IWD ↗ archlinux/archinstall
FAQ
- What changed in Arch Linux on May 15, 2026?
- Arch Linux kernel v7.0.7-arch2 is live with unprivileged namespace restrictions, io_uring memory fixes, and critical SMC-D socket vulnerabilities patched.
- What should Arch Linux teams do about it?
- Pull Arch kernel 7.0.7-arch2 on next system update • Test standalone IWD network configuration in archinstall if deploying minimal systems • Monitor Haskell staging packages for promotion to extra
- Which Arch Linux repositories shipped on May 15, 2026?
- archlinux/linux, archlinux/state, archlinux/archinstall