# XanMod Kernel 6.18.45-xanmod1

- Product: XanMod Kernel (https://whatsnew.fyi/product/xanmod)
- Vendor: XanMod
- Date: 2026-08-19
- Version: 6.18.45-xanmod1
- Original notes: https://gitlab.com/xanmod/linux/-/releases/6.18.45-xanmod1
- Permalink: https://whatsnew.fyi/product/xanmod/releases/6.18.45-xanmod1

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — netfilter: flowtable: ensure sufficient headroom in xmit path
- **fixed** — netfilter: always set route tuple out ifindex
- **fixed** — thunderbolt: Fix bandwidth group reservation indexing
- **fixed** — thunderbolt: Bound the DROM dual link port number before indexing sw->ports
- **fixed** — sctp: clear new_transport when removing a peer
- **fixed** — sctp: fix use-after-free of cached ASCONF chunk
- **fixed** — sctp: keep chunk->transport in step with the list it is queued on
- **fixed** — scsi: scsi_debug: Negate wrapped memcmp() result
- **fixed** — bpf, sockmap: Fix sk_redir use-after-free in send verdict
- **fixed** — fsverity: Fix silent truncation in bpf_get_fsverity_digest()
- **fixed** — fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions
- **fixed** — mm/filemap: __filemap_add_folio() restore index before retrying
- **fixed** — ima: Instantiate file_truncate and path_truncate hooks
- **fixed** — sched/psi: Create the psimon kthread outside of cgroup_mutex
- **fixed** — sched/psi: Shut down rtpoll_timer in psi_cgroup_free()
- **fixed** — fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()
- **fixed** — ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
- **fixed** — ipv6: fix Route Information option length validation
- **fixed** — mm/ptdump: always stabilise against page table freeing using init_mm
- **fixed** — ring-buffer: Use current_context for safe per-CPU buffer swap

- e1e49f488a1c Linux 6.18.45-xanmod1
- 474774fc02c5 Merge tag 'v6.18.45' into 6.18
- bf3be28f6721 Linux 6.18.45
- 1eb0dc458b6e netfilter: flowtable: ensure sufficient headroom in xmit path
- 99ec511f258e netfilter: always set route tuple out ifindex
- 9977321835c7 thunderbolt: Fix bandwidth group reservation indexing
- 40d2ffb74094 thunderbolt: Bound the DROM dual link port number before indexing sw->ports
- ca33df36aa01 sctp: clear new_transport when removing a peer
- 07daf4f97501 sctp: fix use-after-free of cached ASCONF chunk
- 2b3b5eec8b2c sctp: keep chunk->transport in step with the list it is queued on
- 3bd46d33e3fd scsi: scsi_debug: Negate wrapped memcmp() result
- a14e4ef1d90c bpf, sockmap: Fix sk_redir use-after-free in send verdict
- 3c6d4ffa0c6d fsverity: Fix silent truncation in bpf_get_fsverity_digest()
- 2a5cfcad1d56 fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions
- 4917e3ebcab5 mm/filemap: __filemap_add_folio() restore index before retrying
- dd21c96a71e8 ima: Instantiate file_truncate and path_truncate hooks
- 102fb2dacf45 sched/psi: Create the psimon kthread outside of cgroup_mutex
- 8037c5b2b2a4 sched/psi: Shut down rtpoll_timer in psi_cgroup_free()
- 653e888a24c8 fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()
- 4eb15c465337 ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
- 3b2231e358d2 ipv6: fix Route Information option length validation
- 7f740664aec1 mm/ptdump: always stabilise against page table freeing using init_mm
- 5b926fb04cb9 ring-buffer: Use current_context for safe per-CPU buffer swap
- 2e37f2bf1114 ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()
- 5fd91dd4a143 ptp: ocp: Fix board ID over-read
- 8d34019d1413 Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
- 5635211b4496 eventfs: Fix use-after-free in eventfs_remove_rec()
- 66bc868a33cf KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page
- 47976eaaf0a4 KVM: SVM: Serialize accesses to the owner and mirror list with separate lock
- 1ffacbadc145 smb: client: Fix use-after-free in cifs_try_adding_channels()
- c3f2347a4775 tipc: read le->link under the node lock in tipc_node_link_down()
- 3fc5044796dd tls: don't leave a full plaintext sk_msg ring unpushed
- 68787940274e tls: rx: restore msg_iter before TLS 1.3 optimistic retry
- f1e21108e3dd vhost: reset the vring metadata cache on vring reconfiguration
- cdf745b7a777 veth: fix skb length accounting after XDP frag adjustment
- 38c7763fdc53 vsock/virtio: avoid refilling the RX queue after teardown
- bd43a7ec668b vsock/virtio: read virtqueues under worker locks
- 46bb297ad776 vxlan: do not arm the ageing timer on a device that is down
- fab820f1691a xdp: reject clones that overrun skb_shared_info tailroom
- e708fc1566eb x86/mce: Set up the polling timer before CMCI discovery
- 846b92e26c8a x86/CPU: Add a tlbi= cmdline switch
- 69298af46f39 arm64: remove redundant concurrent ptdump UAF mitigation
- fe79571f4043 dibs: initialise dibs->lock in dibs_dev_alloc()
- a2e326c52c4b Revert "drm/amdgpu: fix aperture mapping leak"
- 24e95a24f151 binfmt_misc: don't warn when the mount is completed from another user namespace
- be161fa31e3e ovl: don't warn when the mount is completed from another user namespace
- 92f00f1d4d20 net/sched: act_gact, act_police: range check the fallback control action
- b47bb899e04b net/sched: act_ct: fix sk_buff leak when the header checks reject a packet
- 782cc40b7ade net: atlantic: free RX pages of consumed but not refilled buffers
- b13202d401e1 net: atlantic: free stranded TX buffers on ring deinit
- 0424186d570a netfilter: nf_conntrack: defer invalid log until after unlock
- c58d34fe8b7e netfilter: bridge: release template ct on non-IP path
- e9bfe12b1d04 net: devmem: prevent net-iov / page mixing
- 4bc522b33438 net/x25: fix use-after-free of the socket by its timers
- ece6426b6124 net/dibs: Correct freeing of dmb_clientid_arr
- 680fbd794218 ipv6: prevent in6_dev_get() from resurrecting

_[Truncated at 4000 characters — full notes: https://gitlab.com/xanmod/linux/-/releases/6.18.45-xanmod1]_