Security 10809 Published by

A new XanMod Linux Kernel based on the latest Linux LTS Kernel 5.10.71 has been released. XanMod is a general-purpose Linux kernel distribution with custom settings and new features. The real-time version is recommended for critical runtime applications such as Linux gaming eSports, streaming, live productions and ultra-low latency enthusiasts.





XanMod is a general-purpose Linux kernel distribution with custom settings and new features. Built to provide a stable, responsive and smooth desktop experience.

The real-time version is recommended for critical runtime applications such as Linux gaming eSports, streaming, live productions and ultra-low latency enthusiasts.

Supports all recent 64-bit versions of Debian and Ubuntu-based systems.

Main Features

  • Preemptive Full Tickless Kernel at 500Hz w/ Tuned CPU Core Scheduler.
  • RCU Boost for better responsiveness and lower overall system latency.
  • Block Layer w/ multi-threaded runqueue for high I/O throughput.
  • Caching, Virtual Memory Manager and CPUFreq Governor improvements.
  • BBR TCP Congestion Control + FQ-PIE Packet Scheduling and AQM Algorithm [5.8].
  • ORC Unwinder for Kernel Stack Traces (debuginfo) implementation.
  • Third-party patchset available: ZSTD kernel, initrd and modules support [5.8][5.6-rt], Full x86_64 FSGSBASE instructions [5.8], Clear Linux [partial], CK's Hrtimer Patchset [5.8][5.4], Wine / Proton Fsync, PCIe ACS Override, BMQ Process Scheduler [5.4 stock disabled], Aufs [5.4] and GCC graysky's.
  • Real-time Linux kernel (PREEMPT_RT) build available [5.6-rt][5.4-rt].
  • Generic kernel package for compatibility with most Debian & Ubuntu based distributions. Built on the latest GCC 10.2 and Binutils 2.35.
  • GPLv2 license. Can be built for any distribution or purpose.

Install via Terminal

echo 'deb  http://deb.xanmod.org releases main' | sudo tee /etc/apt/sources.list.d/xanmod-kernel.list && wget -qO -  https://dl.xanmod.org/gpg.key | sudo apt-key add -

Then update and install:

sudo apt update && sudo apt install linux-xanmod

Reboot.

Meta packages available: linux-xanmodlinux-xanmod-edgelinux-xanmod-ltslinux-xanmod-rt-edge and linux-xanmod-rt.

To try without adding the repository

Download from Sourceforge and install:
https://sourceforge.net/projects/xanmod/files/

  1. In terminal:
    sudo dpkg -i linux-image-*xanmod*.deb linux-headers-*xanmod*.deb
  2. Reboot.
  • Check it:
    cat /proc/version
* linux-firmware-image package is optional

Linux 5.10.71-xanmod1

  • 8e0ccfa Linux 5.10.71-xanmod1
  • e1d1d7a Merge tag 'v5.10.71' into 5.10
  • 5cd40b1 Linux 5.10.71
  • 96f439a netfilter: nf_tables: Fix oversized kvmalloc() calls
  • e2d1923 netfilter: conntrack: serialize hash resizes and cleanups
  • deb2949 KVM: x86: Handle SRCU initialization failure during page track init
  • f7ac4d2 HID: usbhid: free raw_report buffers in usbhid_stop
  • 57a269a mm: don't allow oversized kvmalloc() calls
  • da5b8b9 netfilter: ipset: Fix oversized kvmalloc() calls
  • dedfc35 HID: betop: fix slab-out-of-bounds Write in betop_probe
  • 17ccc64 crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
  • 28f0fdb usb: hso: remove the bailout parameter
  • 4ad4852 ASoC: dapm: use component prefix when checking widget names
  • 5c3a90b net: udp: annotate data race around udp_sk(sk)->corkflag
  • a7f4c63 HID: u2fzero: ignore incomplete packets without data
  • 3770e21 ext4: fix potential infinite loop in ext4_dx_readdir()
  • a63474d ext4: add error checking to ext4_ext_replay_set_iblocks()
  • 9ccf354 ext4: fix reserved space counter leakage
  • dc09421 ext4: limit the number of blocks in one ADD_RANGE TLV
  • d11502f ext4: fix loff_t overflow in ext4_max_bitmap_size()
  • 7cea848 ipack: ipoctal: fix module reference leak
  • 843efca ipack: ipoctal: fix missing allocation-failure check
  • 67d1df6 ipack: ipoctal: fix tty-registration error handling
  • f46e5db ipack: ipoctal: fix tty registration race
  • 5f6a309 ipack: ipoctal: fix stack information leak
  • 3bef1b7 debugfs: debugfs_create_file_size(): use IS_ERR to check for error
  • 15fd395 elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
  • 011b4de nvme: add command id quirk for apple controllers
  • 44c600a hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1 mp2975 controller
  • 7fc5f60 perf/x86/intel: Update event constraints for ICX
  • 3db5382 af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
  • d0d520c net: sched: flower: protect fl_walk() with rcu
  • e63f6d8 net: phy: bcm7xxx: Fixed indirect MMD operations
  • 071febc net: hns3: fix always enable rx vlan filter problem after selftest
  • 85e4f5d net: hns3: reconstruct function hns3_self_test
  • 8e89876 net: hns3: fix prototype warning
  • d4a14fa net: hns3: fix show wrong state when add existing uc mac address
  • 64dae95 net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE
  • 8d3d276 net: hns3: keep MAC pause mode when multiple TCs are enabled
  • f8ba689 net: hns3: do not allow call hns3_nic_net_open repeatedly
  • 20f6c4a ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
  • 16138cf scsi: csiostor: Add module softdep on cxgb4
  • 0306a2c Revert "block, bfq: honor already-setup queue merges"
  • 1f2ca30 net: ks8851: fix link error
  • f1dd6e1 selftests, bpf: test_lwt_ip_encap: Really disable rp_filter
  • 4967ae9 selftests, bpf: Fix makefile dependencies on libbpf
  • 59efda5 bpf: Exempt CAP_BPF from checks against bpf_jit_limit
  • f908072 RDMA/hns: Fix inaccurate prints
  • 7e3eda3 e100: fix buffer overrun in e100_get_regs
  • f2edf80 e100: fix length calculation in e100_get_regs_len
  • c20a0ad dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU ports
  • 7b771b1 dsa: mv88e6xxx: Fix MTU definition
  • ee4d049 dsa: mv88e6xxx: 6161: Use chip wide MAX MTU
  • d35d95e drm/i915/request: fix early tracepoints
  • 8321738 smsc95xx: fix stalled rx after link change
  • 8de12ad net: ipv4: Fix rtnexthop len when RTA_FLOW is present
  • b22c5e2 net: enetc: fix the incorrect clearing of IF_MODE bits
  • 5ee4053 hwmon: (tmp421) fix rounding for negative values
  • 89d96f1 hwmon: (tmp421) report /PVLD condition as fault
  • 560271d mptcp: don't return sockets in foreign netns
  • 9c6591a sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
  • 2c204cf mac80211-hwsim: fix late beacon hrtimer handling
  • 8576e72 mac80211: mesh: fix potentially unaligned access
  • 1282bb0 mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
  • 3748871 mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
  • 76bbb48 hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs
  • c61736a bpf, mips: Validate conditional branch offsets
  • 3f4e689 RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
  • 62ba3c5 IB/cma: Do not send IGMP leaves for sendonly Multicast groups
  • d93f655 bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
  • 12cbdae ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
  • 9f382e1 drm/amdgpu: correct initial cp_hqd_quantum for gfx9
  • c331fad drm/amd/display: Pass PCI deviceid into DC
  • 0a16c97 RDMA/cma: Do not change route.addr.src_addr.ss_family
  • 31a13f0 media: ir_toy: prevent device from hanging during transmit
  • 249e5e5 KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest
  • 3778511 KVM: nVMX: Filter out all unsupported controls when eVMCS was activated
  • 4ed671e KVM: x86: nSVM: don't copy virt_ext from vmcb12
  • bebabb7 KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect()
  • 782122a x86/kvmclock: Move this_cpu_pvti into kvmclock.h
  • 57de2dc mac80211: fix use-after-free in CCMP/GCMP RX
  • 201ba84 scsi: ufs: Fix illegal offset in UPIU event trace
  • bd4e446 gpio: pca953x: do not ignore i2c errors
  • 516d905 hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field
  • 1499bb2 hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field
  • 7c4fd5d hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field
  • 196dabd hwmon: (tmp421) handle I2C errors
  • 23a6dfa fs-verity: fix signed integer overflow with i_size near S64_MAX
  • d1d0016 ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect
  • e9edc7b ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
  • 23115ca usb: cdns3: fix race condition before setting doorbell
  • 3945c48 cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
  • 2193cf7 scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
  • a7d4fc8 cpufreq: schedutil: Use kobject release() method to free sugov_tunables
  • d570c48 tty: Fix out-of-bound vmalloc access in imageblit
Xanmod

Homepage
Download Linux 5.10.71-xanmod1 source from GitHub