The Wire · Showcase
ARCH LINUX KERNEL 7.1.3-ARCH2 LANDS WITH SECURITY AND STABILITY FIXES
By RepoJournal · Filed · About Arch Linux
The latest kernel patch closes a privilege escalation vector in CLONE_NEWUSER while fixing critical GPU deadlocks and USB audio regressions across the stack.
Arch Linux kernel v7.1.3-arch2 shipped overnight with five targeted patches that address container security, graphics driver stability, and audio subsystem regressions [1]. The most significant change disables unprivileged CLONE_NEWUSER namespace creation via sysctl, closing a known privilege escalation path. Concurrent with this, btrfs landed relocation error handling fixes and root structure leak patches [2], plus inode reference validation improvements in tree-checker that prevent malformed on-disk structures from corrupting filesystems. Sound subsystem updates follow, including per-channel volume imbalance fixes for USB audio and device-specific quirks for iBasso, Musical Fidelity, and Redragon hardware [3]. On the signstar front, the build system upgraded from a yanked spin crate version and corrected exit status handling to use proper NonZeroU32 types [5], [6]. Core userland saw coreutils 9.11-2 move into testing [4], while mimalloc 3.4.1-1 landed in extra with performance improvements .
Action items
- → Pull kernel 7.1.3-arch2 into your next system update - the CLONE_NEWUSER fix closes a real privilege escalation archlinux/linux [immediate]
- → Test coreutils 9.11-2 from core-testing before it moves to stable archlinux/svntogit-packages [plan]
- → Monitor btrfs validation changes if you rely on tree-checker for corruption detection archlinux/linux [monitor]
References
- [1] Arch Linux kernel v7.1.3-arch2 ↗ archlinux/linux
- [2] Merge tag 'for-7.2-rc3-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux archlinux/linux
- [3] Merge tag 'sound-7.2-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound archlinux/linux
- [4] update coreutils to 9.11-2 in core-testing-x86_64 archlinux/state
- [5] chore(cargo): Update yanked crate `spin` archlinux/signstar
- [6] fix: Use `NonZeroU32` for exit status code failures archlinux/signstar