# Linux Kernel 6.6.153

- Product: Linux Kernel (https://whatsnew.fyi/product/linux-kernel)
- Vendor: Linux Kernel Organization
- Date: 2026-08-23
- Version: 6.6.153
- Original notes: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.153
- Permalink: https://whatsnew.fyi/product/linux-kernel/releases/6.6.153
- Labels: longterm

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — ring-buffer: Use current_context for safe per-CPU buffer swap
- **fixed** — net/x25: fix use-after-free of the socket by its timers
- **fixed** — erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms
- **fixed** — net/sched: cls_bpf: reject dev-bound programs bound to a different device
- **fixed** — net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
- **fixed** — net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
- **fixed** — af_packet: Don't send zero-byte data in tpacket_snd()
- **fixed** — net/tls: Fail tls_sw_splice_read() after a failed async decrypt
- **fixed** — net: packet: fix wrong transport_header when sending VLAN-tagged frame
- **fixed** — netfilter: ipset: fix list type element drift bug
- **fixed** — netfilter: flowtable: publish GC-visible tuple last
- **fixed** — netfilter: ipset: fix refcount race between list:set GC and swap
- **fixed** — crypto: ccm - Set rfc4309 maxauthsize from child
- **fixed** — mm/huge_memory: fix huge_zero_pfn race
- **fixed** — KVM: SVM: Serialize accesses to the owner and mirror list with separate lock
- **fixed** — mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF
- **fixed** — drm/amd/pm: fix pptable use-after-free
- **fixed** — drm/amd/pm: fix torn gpu metrics reads
- **fixed** — net: pktgen: fix proc entry use-after-free
- **fixed** — btrfs: zoned: fix missing chunk metadata reservation

The 117 most recent commits in this release — the full changelog is longer:

- Linux 6.6.153
- ring-buffer: Use current_context for safe per-CPU buffer swap
- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu()
- net: harmonize tstats and dstats
- binfmt_misc: use exe_file_deny_write_access() for the interpreter clone
- net/x25: fix use-after-free of the socket by its timers
- erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms
- net/sched: cls_bpf: reject dev-bound programs bound to a different device
- net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
- m68k: Define NR_CPUS to 1
- m68k: use the coherent DMA code for coldfire without data cache
- dma-direct: add a CONFIG_ARCH_HAS_DMA_ALLOC symbol
- net/sched: cls_u32: skip hash tables in u32_bind_class()
- net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
- net: sched: Add initial TC error skb drop reasons
- net: sched: Move drop_reason to struct tc_skb_cb
- packet: add a generic drop reason for receive
- net, sched: Fix SKB_NOT_DROPPED_YET splat under debug config
- net, sched: Add tcf_set_drop_reason for {__,}tcf_classify
- net, sched: Make tc-related drop reason more flexible
- af_packet: Don't send zero-byte data in tpacket_snd().
- ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers
- net/tls: Fail tls_sw_splice_read() after a failed async decrypt
- net: packet: fix wrong transport_header when sending VLAN-tagged frame
- macvlan: inherit needed_headroom and needed_tailroom from lowerdev
- ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
- netfilter: ipset: let destroy callbacks adjust ext mem size
- netfilter: ipset: fix list type element drift bug
- netfilter: flowtable: publish GC-visible tuple last
- netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
- netfilter: ipset: fix refcount race between list:set GC and swap
- crypto: ccm - Set rfc4309 maxauthsize from child
- arm64: tegra: Add EL2 virtual timer interrupt for Tegra194
- mm/huge_memory: fix huge_zero_pfn race
- KVM: SVM: Serialize accesses to the owner and mirror list with separate lock
- mm/ptdump: always stabilise against page table freeing using init_mm
- mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF
- mm/pagewalk: split walk_page_range_novma() into kernel/user parts
- drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini
- drm/amd/pm: fix pptable use-after-free
- drm/amd/pm: fix torn gpu metrics reads
- can: rcar_canfd: change the initializing flow for clocks and resets
- i2c: iproc: reset bus after timeout if START_BUSY is stuck
- i2c: bcm-iproc: remove printout on handled timeouts
- vxlan: use pskb_network_may_pull() for transmit path header pulls
- vxlan: Handle stats using NETDEV_PCPU_STAT_DSTATS.
- vrf: Make pcpu_dstats update functions available to other modules.
- net: core,vrf: Change pcpu_dstat fields to u64_stats_t
- vxlan: Do not alloc tstats manually
- ice: fix VF interrupts cleanup
- binfmt_misc: restore write access when removing an entry
- fs: don't block write during exec on pre-content watched files
- veth: convert frag_list skbs before running XDP
- net: pktgen: fix proc entry use-after-free
- net: pktgen: fix code style (WARNING: Block comments)
- ksmbd: reject repeated SMB2 NEGOTIATE requests
- ksmbd: conn lock to serialize smb2 negotiate
- igc: remove napi_synchronize() in igc_down()
- ASoC: tas2562: Validate values for volume writes
- mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE
- btrfs: zoned: fix missing chunk metadata reservation
- btrfs: remove fs_info argument from btrfs_zoned_activate_one_bg()
- btrfs: add space_info argument to btrfs_chunk_alloc()
- btrfs: add debug build only WARN
- tcp: challenge ACK for non-exact RST in SYN-RECEIVED
- tcp: fast path functions later
- tcp: Pass flags to __tcp_send_ack
- ksmbd: validate minimum PDU size for transform requests
- smb/server: fix minimum SMB2 PDU size
- smb/server: fix mi

_[Truncated at 4000 characters — full notes: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.153]_