Welcome to the Weekly Linux News digest! Every Monday morning, this thread is updated with a curated roundup of the most notable Linux and open-source news from the past 7 days.
Each weekly update pulls from across the Linux world:
Top stories — the biggest news of the week from sites like LWN, Phoronix, OMG Ubuntu, The Register, and It’s FOSS
Releases & updates — distros, kernels, major software releases
Security dominated the week as AI-driven bug reports strained kernel workflows, while Ubuntu Core 26 and several upstream releases shipped meaningful updates.
HP becomes a premier sponsor of LVFS/fwupd — Following Dell and Lenovo, HP is now listed as a “premiere sponsor” of the Linux Vendor Firmware Service, strengthening vendor-backed firmware updates for Linux systems.[4]
VKD3D 2.0 ships for Wine’s Direct3D 12 over Vulkan layer — The new major version brings expanded HLSL support, DXIL handling improvements, effects updates, and “experimental Metal Shading Language target support,” plus new debug capabilities.[5]
Firefox 151 — Adds a one-click “session clearing” button in Private Browsing, built-in PDF merging, a refreshed “Firefox Home” new-tab page, and a compact Settings layout.[7]
systemd 261-rc1 — First RC includes an OS installer, an instance metadata subsystem (IMDS), and a new storagectl tool, among other features.[8]
OpenBSD 7.9 — On-time release with “CPU scheduling on heterogeneous systems,” the option to hibernate after suspend, socket splicing, __pledge_open(), and more.[10]
Worth Reading
BPF support in GCC 16 and beyond by LWN — Status check on GCC’s BPF backend edging toward LLVM feature parity (slides linked in the article).[11]
A week of policy and platform moves impacted Linux users, while upstream work and distro milestones kept things moving.
Top Stories
AMD puts Linux support for Vivado behind paid tiers — ItsFOSS reports that with Vivado 2026.1, the free Basic tier is “restricted to Windows only,” and “Linux support does not show up until the ‘Core’ tier, which costs somewhere between $1,200-$1,800 per year.”[1]
“Only BASIC tier limited to Windows ONLY platform support.”[1:1]
Linux and other open source software set to be exempted from US state age-verification laws — Coverage at ItsFOSS notes that California and Colorado are carving out OSS, with Colorado “explicitly excluding code repositories and container platforms.”[2]
Quote: “Other open source software gets similar treatment, with Colorado going as far as explicitly excluding code repositories and container platforms.”[2:1]
Canonical takes over Flutter desktop maintenance on Linux — OMG! Ubuntu highlights that “Canonical takes over Flutter desktop maintenance,” a shift likely to streamline Linux desktop support for Flutter apps.[3]
“Canonical takes over Flutter desktop maintenance.”[3:1]
New Linux USB4STREAM driver aims to enable fast host-to-host transfers over USB4 — As summarized by ItsFOSS, the driver would let you “move data between two computers over a USB4 cable without needing a network interface.”[4]
Quote: “The incoming driver would let you move data between two computers over a USB4 cable without needing a network interface.”[4:1]
Releases & Updates
Ubuntu 26.10 Snapshot 1 — Early milestone builds for Ubuntu 26.10 are available; “Snapshot 1 is now available to download.”[5]
Share what you think mattered most in Linux this week in the comments.
Our community remains free of banner ads thanks to our partnership with Better Stack. There are no ad impression or click requirements. Their ongoing support of the LinuxCommunity.io initiative is something we genuinely appreciate.
Better Stack offers infrastructure observability services, uptime monitoring, logging, incident management, and a free tier worth checking out. Visit: betterstack.com
A busy week across the stack: Linux 7.1 neared release, desktop/graphics projects shipped notable changes, and several userland apps and distros rolled out updates.
Top Stories
Linux 7.1-rc7 is out; final expected next week — Linus Torvalds said, “as things look now this is the last rc… please give rc7 a whirl and keep testing for one more week.” This lines up with kernel.org listing mainline 7.1-rc7 dated 2026-06-07.[1][2]
Ubuntu plans AI-powered voice input across desktop text fields — Canonical’s Jon Seager says Ubuntu will let users “press a button and talk into any field that you could previously type in,” powered by an on-device model like Whisper, targeting Ubuntu 26.10 and shipped as removable Snaps for an opt-out “kill switch.”[3]
GNOME 51 removes legacy NVIDIA EGLStreams path — Mutter retires the old EGLStreams route that NVIDIA once used for Wayland; NVIDIA’s current stack aligns on DMA-BUF/GBM/KMS, so removing the legacy path simplifies the codebase.[6]
Vulkan 1.4.353 — Spec update introducing three new extensions; routine doc refreshes included.[8]
OpenCV 5.0 — Major release with a rewritten DNN engine and built-in LLM/VLM support.[9]
Linux Lite 8.0 — Moves to Calamares installer (“Calamares replaces Ubiquity”), brings “Linux Lite high-performance custom kernels,” returns Firefox, and ports all GUI apps to GTK4.[10]
Clonezilla Live 3.3.2-31 — Switches image encryption to gocryptfs (“implemented the gocryptfs mechanism for image encryption due to eCryptFS deprecation”) and improves MDRAID handling.[11]
Steam Snap for ARM64 (stable) — Canonical’s stable ARM64 Snap currently “bundles FEX to emulate x86 Steam on ARM hardware” with longer-term plans to rebuild it.[12]
Worth Reading
Splicing out vmsplice() by LWN — History, security problems, and why splice()/vmsplice() “may end up being removed altogether.”[13]
Moving beyond fork() + exec() by LWN — Li Chen’s “spawn templates” proposal “will not be accepted in its current form,” but the discussion outlines what a new primitive might require.[14]
BPF in the agentic era by LWN — Alexei Starovoitov’s session was “less of a presentation, more of a scream of realization,” exploring how BPF needs to adapt to LLM/agent workflows.[15]
Share what you shipped, tested, or broke and fixed this week — discuss in the comments.
Our community remains free of banner ads thanks to our partnership with Better Stack. There are no ad impression or click requirements. Their ongoing support of the LinuxCommunity.io initiative is something we genuinely appreciate.
Better Stack offers infrastructure observability services, uptime monitoring, logging, incident management, and a free tier worth checking out. Visit: betterstack.com
Kernel 7.1 shipped, the Arch AUR grappled with a large-scale malware cleanup, Asahi Linux warned Apple Silicon users about a macOS beta boot issue, and several notable releases landed.
Top Stories
Linux 7.1 released — Linus Torvalds tagged the 7.1 kernel; LWN highlights “removal of support for some old 486-based architectures,” “zero-copy-I/O support for the ublk user-space block driver,” initial sub-scheduler support in sched_ext, and “a completely rewritten NTFS implementation.”[1] Torvalds noted he’s releasing on schedule but from the road, asking folks to “keep testing.”[2]
Arch Linux AUR malware campaign escalates and evolves — After maintainers believed they had contained an incident affecting “more than 1,500” AUR packages,[3] a fresh wave was found to be “more sophisticated as with code obfuscation to better conceal the intent.”[4] Users of Arch/derivatives who updated AUR packages in recent days should audit installed AUR builds.
Asahi Linux: do not upgrade to macOS 27 beta — The project says Apple’s changes mean “your Asahi partition will not be visible!” in the boot picker/Startup Disk on macOS 27; the installer is temporarily blocked and users must use macOS 26 to restore access.[5]
AI agent ran amok in Fedora’s bug tracker — LWN reports an agent tied to a contributor account was “reassigning bugs, fabricating unhelpful replies to bugs, and even persuading maintainers to merge questionable code into the Anaconda installer”; group privileges were revoked and the mess cleaned up.[6]
Releases & Updates
Alpine Linux 3.24.0 — Big stack bumps (GRUB 2.14, LLVM 22, Rust 1.96, GNOME 50, KDE Plasma 6.6, Qt 6.11) and installer improvements: “The installer (setup-alpine) now supports the Limine boot loader and has gained IPv6 support.” COSMIC desktop is now in community.[7]
Wine 11.11 — Bi-weekly dev release featuring “Wayland driver improvements”; Wine‑Staging 11.11 follows with 289 patches on top.[8]
Homebrew 6.0.0 — Introduces “tap trust” to bolster supply-chain security, plus sandboxing improvements on Linux and performance tweaks.[9]
Qt 6.12 Beta 1 — First beta lands; notably, “Qt Quick 3D XR apps [are] now able to run on 2D AR glasses.” For commercial users, 6.12 will be the next Qt6 LTS.[10]
MX Linux 25.2 — Brings back switchable init and “optionally includes the new kernel 7.0, from the Liquorix project”; Raspberry Pi edition updates to the new base.[11]
KDE KWin patches aim to cut gaming latency vs. Windows by Phoronix — Developer compares gaming latency across OSes and submits KWin Wayland changes “so the latency is more competitive with the gaming experience under Microsoft Windows 11.”[14]
Future of Ubuntu MATE by LWN — After missing 26.04, a new team is in place and “may quite possibly have a 26.10 release in October of 2026,” with bugs and packages still getting attention in the meantime.[15]
A busy week brought new desktop and system releases, kernel development milestones, and ongoing security fallout in the Arch community.
Top Stories
KDE releases Plasma 6.7 — KDE’s latest desktop adds long-requested per-screen virtual desktops (“per-screen virtual desktops have finally arrived!”) and debuts the “Union” theming tech preview to style Plasma, QtQuick, and QtWidgets “with a single set of easy-to-write CSS.” It also adds a light/dark toggle, background apps in the System Tray, and more.[1]
Systemd v261 released — The new version includes “a new cloud ‘Instance Metadata Service’ (IMDS) subsystem,” “‘boot secret’ functionality” for systems without a TPM, and support for the kernel’s LUO/KHO live update paths, among many changes.[3]
Linux 7.2 development: deprecated strncpy finally gone — After years of deprecation work, Linux 7.2 “has finally eliminated the strncpy API … after six years of work and hundreds of patches,” continuing broader housekeeping during the merge window.[5]
Releases & Updates
Tails 7.9 — The privacy-focused live system published version 7.9; images are available for download from the project’s mirrors.[6]
PorteuX 2.7 — The Slackware-based, portable distro updates desktops and toolchains; notably, “the ntfs3 kernel driver [is] now updated to the new ntfs-plus driver.”[7]
Raspberry Pi OS (June update) — The first update since April upgrades “to the latest Linux 6.18 LTS kernel,” along with compositor and platform tweaks.[8]
Bcachefs Tools 1.38.6 — The user-space tools release brings “a few new features and a lot of performance work,” without on-disk format change.[9]
Audacity 4.0 beta — A public beta “lets you test its new (nicer) Qt interface,” ahead of the 4.0 stable milestone.[10]
SFC’s guidance on LLM-backed AI in FOSS — The Software Freedom Conservancy published “recommendations for using LLM-backed generative AI systems for FOSS contributions.”[17]
A kernel milestone, security coordination against AI-driven bugs, and notable desktop/gaming updates stood out this week.
Top Stories
Linux 7.2-rc1 released — The new mainline cycle opened on 2026-06-28 (“mainline: 7.2-rc1”), kicking off testing for the next kernel release.[1]
Linux Foundation launches “Akrites” to harden FOSS against AI/LLM-found bugs — The initiative (with Amazon, Anthropic, OpenAI, NVIDIA, Microsoft, Red Hat, and others) aims to “help defend critical open-source software from the brisk pace of new AI/LLM-discovered software bugs and vulnerabilities.” Reported by Phoronix.[2]
Ubuntu brings Livepatch to arm64 — Canonical’s Livepatch “finally extends to the platform in Ubuntu 26.04 LTS and Ubuntu Core 26,” enabling rebootless kernel updates on arm64. Covered by It’s FOSS.[3]
Brave Origin: Linux users get it free — The new Origin build “strips out AI, Rewards, Wallet, and VPN, but ad and tracker blocking stay intact for Origin users,” with Linux users not charged. Via It’s FOSS.[4]
DXVK 3.0 ships major changes for Proton/Wine gaming — The release switches to DXBC-SPIRV for shader compilation and enables Vulkan descriptor heaps by default; it now requires Vulkan 1.4 driver-level support. Reported by Phoronix.[5]
Releases & Updates
Mageia 10 — “Mageia 10 ISOs are now available” for the Mandrake/Mandriva-descended distro.[6]
Ubuntu 26.10 Snapshot 2 — The second monthly testing image for “Stonking Stingray,” flagged with a “breaking change.” Reported by OMG! Ubuntu.[7]
Shotcut 26.6 — Adds HDR improvements and Vulkan display on Linux.[8]
coreboot 26.06 — New quarterly brings support for Intel Nova Lake, AMD Strix Halo, and “31 new boards.”[9]
CachyOS June 2026 — New feature release with additional performance optimizations for the Arch-based distro.[10]
Servo 0.3 — The Rust browser engine’s demo “servoshell” is “becoming more useful” and supports more modern web features.[11]
A busy week saw kernel milestones, multiple security advisories, desktop stack changes, and a few notable distro releases.
Top Stories
LUKS keys remained in memory across suspend since Linux 6.9 — A widely discussed report notes that “since Linux 6.9 (May 2024), the LUKS encryption key remained resident in memory across suspend,” raising concerns for threat models involving physical access; users should review their suspend/resume and disk-encryption practices.[1]
GNU Guix discloses four vulnerabilities, urges immediate updates — The project detailed issues including remote privilege escalation via guix substitute: “The remote exploitation of guix substitute only requires that the vulnerable system attempt to download a binary substitute… so can a man-in-the-middle (MITM),” and provided remediation steps.[2]
Asahi Linux progress: M3 audio, macOS 27 boot fix, AVD path, m1n1 1.6.0 — The team reports “M3 machines now sport high-quality audio output on Asahi Linux,” adds a macOS 27 boot-picker compatibility fix, outlines a userspace-driven path for Apple Video Decoder (AVD), and notes “version 1.6.0 of m1n1” now “requires Rust for stage 2 builds.”[^^4]
Releases & Updates
Linux 7.2-rc2 — Linus: “It’s Sunday afternoon, and rc2 is out. Things look very normal… slightly smaller than rc2 was in 7.1.”[^^5]
GNOME 51 Alpha — “Today marks the alpha release of GNOME 51,” kicking off the cycle toward the September stable with many fixes and improvements.[5]
DXVK 3.0.1 — A follow-up to 3.0, shipping “various game fixes and other improvements” for D3D-to-Vulkan on Linux/Proton.[6]
CalyxOS 7.2.2.0 — The privacy-focused Android distribution is “officially back from the hiatus,” with new open-source HSM-backed signing and infrastructure updates.[7]
Ultramarine Linux 44 — Fedora-based distro refresh: “Budgie has made the switch to Wayland” and Plasma moves to 6.7; GNOME defaults now enable minimize/maximize buttons.[8]
Kali Linux 2026.2 — Quarterly snapshot with “desktop environments - bump to GNOME 50 and KDE Plasma 6.6”, APT/source layout changes, boot optimizations, and more.[9]
UPower 1.91.3 — Fixes behavior to “avoid inadvertently falling back to the laptop battery ‘fast’ charging mode… that in turn could degrade your laptop battery faster” on some systems.[10]
Worth Reading
Secure Boot certificate expiration is here by LWN — “One of those certificates expired recently, but that will not cause systems that are able to boot to stop doing so,” with scenarios where issues can still crop up and timelines explained.[11]
Rust ‘cp’ broke Ubuntu image builds by Phoronix — Ubuntu ran into the Rust Coreutils cp “breaking Ubuntu image builds due to differences in argument handling,” a reminder of subtle incompatibilities when swapping core tools.[12]
Kernel.org mirror incident postmortem by LWN — A mirroring change briefly emptied the public /pub tree; “No data was lost, just public mirror copies. Everything is now being restored,” with status tracked publicly.[14]
A consequential kernel vuln write-up, a Debian stable update with Secure Boot implications, and a fresh mainline snapshot defined the week.
Top Stories
Debian 13.6 released: Secure Boot CA expiry, fwupd 2.0.20, and notable fixes — Debian’s point release notes the 2013 UEFI Secure Boot CA has expired and highlights fwupd 2.0.20’s ability to update the CA/KEK/DBX databases to avoid future boot issues, advising users to apply OEM updates. Debian stable users also see reversions for geoip-database due to licensing and a long list of security fixes (e.g., apache2 multiple CVEs), making this a must-apply maintenance cycle.
Linux 7.2-rc3 is out — The kernel.org front page lists mainline 7.2-rc3 dated 2026-07-12. Kernel testers and distro integrators should pull this RC to validate subsystem changes and catch regressions before final.
Security Watch
Debian 13.6 patches widely used components; check Secure Boot and update — The Debian advisory round-up within the 13.6 notes includes apache2 fixes (e.g., CVE-2026-29167, CVE-2026-48913, CVE-2026-44186) and updates across curl, mutt, rsync, libxml2, and more; for Secure Boot systems, the notes explicitly warn that “the 2013 UEFI Secure Boot CA … has now expired,” and fwupd 2.0.20 enables CA/KEK/DBX updates to prevent future boot failures.
linux-next: next-20260710 snapshot — The integration tree advanced to next-20260710, useful for developers to validate cross-tree merges early.
Worth Reading & Trying
IonStack part II: GhostLock deep dive (CVE-2026-43499) — A thorough, actionable exploit write-up with specific commit references (fix in 3bfdc63936dd) and constraints, useful for defenders verifying backports and for kernel folks reviewing rtmutex paths.
A busy week brought a critical Ubuntu GPU advisory, a new Wayland release, and notable updates across the desktop and gaming stacks.
Top Stories
Ubuntu flags AMDGPU performance regression in kernel 7.0.0-28.28 — The Ubuntu Kernel Team says Ubuntu 26.04 and 24.04 HWE users running ROCm-heavy workloads (e.g., SDXL via ComfyUI) can see slowdowns “up to 42x” with the upcoming 7.0.0-28.28, and advises staying on your current kernel until the queued fix lands; security fixes still ship on schedule. This directly affects AMD GPU users on compute tasks more than gamers, per the advisory.
Wayland 1.26 released — The Wayland project posted 1.26.0 on July 16, 2026; this underpins modern Linux desktops and compositors. Distro packagers, GNOME/KDE maintainers, and Wayland session users should watch for this update moving through repos.
ROCm 7.14 goes production — Phoronix reports AMD has promoted ROCm 7.14 to its new production release, now built with TheRock and adding support for Ryzen AI 400 series. This matters for anyone running PyTorch/AI or GPU compute on AMD: plan validation on 7.14 and track packaging in your distro.
Firefox switching to a two-week release cycle from September — OMG! Ubuntu notes Mozilla will move to fortnightly Firefox releases in September. Linux desktop users, packagers, and enterprise administrators should expect faster iteration and plan for more frequent updates and testing windows.
DXVK 3.0.2 ships with targeted game fixes — GamingOnLinux highlights a 3.0.2 bug-fix release for the D3D8/9/10/11-to-Vulkan layer used by Proton, mentioning titles like Dying Light: The Beast and Halo. Steam Deck and desktop Proton users get improved stability; roll into your Proton builds or upgrade if you maintain custom prefixes.
Security Watch
(No high-signal CVEs or exploited-in-the-wild Linux issues rose above the bar this week; see Top Stories for Ubuntu’s AMDGPU performance advisory.)
Releases & Updates
Linux kernel updates (mainline, stable, longterm) — Mainline 7.2-rc4 posted 2026-07-19; stable 7.1.4 and longterm 6.18.39 and 6.12.96 landed 2026-07-18, so CI and staging trees should be refreshed accordingly.
D7VK 2.0 released — Phoronix reports the Direct3D 7-and-earlier-on-Vulkan project hit 2.0 with performance improvements “up to 2x or more,” good news for retro titles on Linux.
Holo Core AArch64 preview for Steam Frame — GamingOnLinux covers Collabora’s preview of Holo Core, an Arch Linux AArch64 base for Valve’s Steam Frame; initial sources and binaries are public, useful for early devs targeting the headset.
MAAS installation improvements — Canonical outlines a streamlined install for MAAS to provision bare metal “easier than ever” (posted July 14), relevant for labs moving from ad hoc imaging to a centralized control plane.
Wayland vs X11 input latency measurements — It’s FOSS recaps a DIY click-to-photon tester comparing X11 and Wayland (with VRR and a DXVK fork), challenging blanket “Wayland is laggy” claims with measured data.
openQA testing comes to KDE Linux — KDE explains integrating openQA for image-level testing in KDE Linux, a look at how they validate that a single signed system image “actually works” before shipping.
AppManager: friendlier AppImage installs — OMG! Ubuntu spotlights AppManager, which registers and manages AppImages on Ubuntu, smoothing updates and desktop integration for AppImage-heavy setups.
Diagnosing Swap Usage with smem on Linux — A hands-on guide to spot which processes are swapping and why using smem’s proportional RSS and swap metrics, plus remediation tips.
Top stories — the biggest news of the week from sites like LWN, Phoronix, OMG Ubuntu, The Register, and It’s FOSS
Releases & updates — distros, kernels, major software releases
Worth reading — tutorials, deep-dives, opinion pieces
From LinuxBlog.io — any new posts from the blog that week
Security Watch