RepoJournal
Arch Linux

@archlinux

The Arch Linux org - the rolling distro and the developers who run it

Keep up with Arch Linux in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Infrastructure Full archive →

The Wire · Showcase

ARCH KERNEL 7.0.7-ARCH2 SHIPS WITH SECURITY HARDENING AND NETWORKING FIXES

By RepoJournal · Filed · About Arch Linux

1 person shipped this

Arch Linux kernel v7.0.7-arch2 is live with unprivileged namespace restrictions, io_uring memory fixes, and critical SMC-D socket vulnerabilities patched.

The new kernel [1] lands five critical patches on top of stable 7.0.7, including a sysctl to disable unprivileged CLONE_NEWUSER (closing a privilege escalation vector), udmabuf scatterlist corruption fixes, and io_uring/zcrx freelist violation warnings. Network stack gets hardened too: shared-frag markers now propagate correctly through frag-transfer helpers [2], and SMC-D socket code rejects malicious CHID-0 ACCEPT packets that could match empty device slots [6]. Meanwhile, the archinstall team shipped standalone IWD networking support [7], letting minimal systems skip the networkmanager/wpa_supplicant/polkit dependency chain entirely. iwd now handles DHCP directly while systemd-resolved picks up DNS via stub symlink. Across the Haskell ecosystem, five core packages are staging updates including quic (0.1.28-27), criterion (1.6.3.0-78), and conduit-extra (1.3.8-105) [3] [4] [5].

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Arch Linux kernel v7.0.7-arch2 ↗ archlinux/linux
  2. [2] Merge tag 'net-7.1-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net archlinux/linux
  3. [3] update haskell-quic to 0.1.28-27 in extra-staging-x86_64 archlinux/state
  4. [4] update haskell-criterion to 1.6.3.0-78 in extra-staging-x86_64 archlinux/state
  5. [5] update haskell-conduit-extra to 1.3.8-105 in extra-staging-x86_64 archlinux/state
  6. [6] net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot archlinux/linux
  7. [7] Add IWD standalone option to network configuration + fix NM_IWD ↗ archlinux/archinstall

Quick answers

What shipped in Arch Linux on May 15, 2026?
Arch Linux kernel v7.0.7-arch2 is live with unprivileged namespace restrictions, io_uring memory fixes, and critical SMC-D socket vulnerabilities patched. In total, 58 commits, 2 pull requests, and 2 releases landed.
Who contributed to Arch Linux on May 15, 2026?
1 developer shipped this update, including h8d13.
What were the notable Arch Linux updates?
Arch Linux kernel v7.0.7-arch2, Merge tag 'net-7.1-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net, and update haskell-quic to 0.1.28-27 in extra-staging-x86_64.

More from @archlinux

Daily updates, in your inbox

Follow Arch Linux

Keep up with Arch Linux in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?