# Linux Kernel 5.10.266 - Product: Linux Kernel (https://whatsnew.fyi/product/linux-kernel) - Vendor: Linux Kernel Organization - Date: 2026-08-23 - Version: 5.10.266 - Original notes: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.266 - Permalink: https://whatsnew.fyi/product/linux-kernel/releases/5.10.266 - Labels: longterm What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- - **fixed** — USB serial keyspan_pda information leak - **fixed** — net ethernet ti am65-cpsw error handling in am65_cpsw_nuss_probe() - **fixed** — i2c smbus check for parent device before dereference - **fixed** — udmabuf ensure cache synchronisation in begin_cpu_udmabuf() - **fixed** — binfmt_misc use exe_file_deny_write_access() for interpreter clone - **fixed** — net smc splice entry lifetime imbalance in smc_rx_splice - **changed** — net smc enable rdma write inline if qp has sufficient inline space - **fixed** — net ethernet ti am65-cpsw-nuss fix port_id extraction from SRC TAG - **added** — net ethernet ti am65-cpsw add multi port support in mac-only mode - **fixed** — af_packet don't send zero-byte data in tpacket_snd() - **fixed** — ASoC xilinx formatter_pcm pass aud_drv_data to irq handlers - **fixed** — net packet fix wrong transport_header when sending VLAN-tagged frame - **fixed** — netfilter ipset fix list type element drift bug - **fixed** — netfilter flowtable publish GC-visible tuple last - **fixed** — netfilter ipset fix refcount race between list:set GC and swap - **fixed** — crypto ccm set rfc4309 maxauthsize from child - **fixed** — net atlantic free stranded TX buffers on ring deinit - **fixed** — mm ptdump stabilise against page table freeing using init_mm - **fixed** — net sched act_gact act_police range check the fallback control action - **fixed** — sched psi shut down rtpoll_timer in psi_cgroup_free() The 120 most recent commits in this release — the full changelog is longer: - Linux 5.10.266 - ring-buffer: Use current_context for safe per-CPU buffer swap - ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() - USB: serial: keyspan_pda: fix information leak - net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() - i2c: smbus: Check for parent device before dereference - udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf() - binfmt_misc: use exe_file_deny_write_access() for the interpreter clone - net: smc: fix splice entry lifetime imbalance in smc_rx_splice - net/smc: rdma write inline if qp has sufficient inline space - net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG - net: ethernet: ti: am65-cpsw: add multi port support in mac-only mode - net: ethernet: ti: am65-cpsw: move free desc queue mode selection in pdata - net: ethernet: ti: am65-cpsw: move ale selection in pdata - af_packet: Don't send zero-byte data in tpacket_snd(). - ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers - net: packet: fix wrong transport_header when sending VLAN-tagged frame - netfilter: ipset: fix list type element drift bug - netfilter: flowtable: publish GC-visible tuple last - netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path - netfilter: ipset: fix refcount race between list:set GC and swap - crypto: ccm - Set rfc4309 maxauthsize from child - arm64: tegra: Add EL2 virtual timer interrupt for Tegra194 - net: atlantic: free stranded TX buffers on ring deinit - mm/ptdump: always stabilise against page table freeing using init_mm - net/sched: act_gact, act_police: range check the fallback control action - sched/psi: Shut down rtpoll_timer in psi_cgroup_free() - ALSA: usx2y: bound the hwdep mmap fault offset - ALSA: usx2y: Fix potential leaks of uninitialized memory - drm/amd/pm: fix torn gpu metrics reads - hwmon: (npcm750-pwm-fan): stop fan timer on device detach - can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure - binfmt_misc: restore write access when removing an entry - fs: don't block write during exec on pre-content watched files - fsnotify: opt-in for permission events at file open time - i2c: iproc: reset bus after timeout if START_BUSY is stuck - i2c: bcm-iproc: remove printout on handled timeouts - ice: fix memory leak in ice_lbtest_prepare_rings() - ice: fix VF interrupts cleanup - scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write - scsi: scsi_debug: Rename zone type constants - scsi: sd: sd_zbc: Return early in sd_zbc_check_zoned_characteristics() - scsi: sd: sd_zbc: Use logical blocks as unit when querying zones - scsi: sd: sd_zbc: Improve source code documentation - net: pktgen: fix proc entry use-after-free - net: pktgen: fix code style (WARNING: Block comments) - mm/vmstat: fold stranded per-cpu node stats when a node comes online - Bluetooth: HIDP: reject frames without a transaction header - skbuff: introduce skb_pull_data - ftrace: Add global mutex to serialize trace_parser access - super: fix emergency thaw deadlock on frozen block devices - net: gro: fix double aggregation of flush-marked skbs - net/sched: serialize qdisc_rtab_list against concurrent get/put - ceph: fix hanging __ceph_get_caps() with stale mds_wanted - ceph: rename _to_client() to _to_fs_client() - libceph: add doutc and *_client debug macros support - libceph: fix two unsafe bare decodes in decode_lockers() - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE - libceph: Amend checking to fix `make W=1` build breakage - ceph: avoid fs reclaim while using current->journal_info - sctp: avoid auth_enable sysctl UAF during netns teardown - mptcp: decrement subflows counter on failed passive join - mptcp: fix subflow accounting on close - serial: sc16is7xx: implement gpio get_direction() callback - serial: sc16is7xx: fix regression with GPIO configuration - serial: sc16is7xx: remove _[Truncated at 4000 characters — full notes: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.266]_