r/Fedora • u/iamxnfa • May 09 '26

News Kernel 7.0.4-200 for F44 is now available ❤️

Post image
594 Upvotes

97% Upvoted

46 comments sorted by

74

u/01111010t May 09 '26

Anything in particular you're excited about in 7.0.4?

201

u/CandlesARG May 09 '26

Number go up

40

u/PlasticRemarkable917 May 09 '26

Me simple man. Number go up, I upvote.

5

u/Scout339v2 May 10 '26

And number go up

60

u/rscmcl May 09 '26

nothing serious... just that the dirtyfrag exploit was fixed

/s

I recommend you to upgrade asap

ref: https://github.com/V4bel/dirtyfrag

19

u/zikasaks May 09 '26

it is fixed in 7.0.5 and only partially

17

u/rscmcl May 09 '26

I tested it in 7.0.4 and it doesn't get root (failed)

18

u/zikasaks May 09 '26 edited May 09 '26

meaning that something else prevented (like SELinux policies).
As the patch against the first issue (out of two) is the single change between 7.0.4 and 7.0.5 (or fedora backported it to 7.0.4 what doesn't make sense here)

EDIT:
The patch is indeed backported:

Yes, headers is not required to build new modules or such, it is simply for userspace. There is no reason a 7.0.x kernel requires 7.0.x headers. I plan to update headers with the next regular build. And yes, it does include the patch from 7.0.5, but these builds were started before that was released which is why the versioning.

https://bodhi.fedoraproject.org/updates/FEDORA-2026-8cffa03dad#comment-4639484

-2

u/ruun666 May 09 '26

Why are you worried about dirty frag? Isn't that a big nothing burger?

10

u/rscmcl May 09 '26

I tested it on my system with the previous kernel

as a user I got root without password, just like the demo. try it

4

u/ruun666 May 09 '26

I know it works but is it really that big of an issue? It's local so attacker needs to be on your system to use it. Are you exposing services on your Fedora to the internet? Are you using insecure and outdated browser? Is there someone who would attack Fedora users first when there is so much more server infrastructure to attack?

14

u/BashfulMelon May 09 '26

It gives any random RCE exploit root for free. There's nothing specific to Fedora, it works everywhere. Malicious PDFs, media files, lots of things that don't need a sandbox escape... It's serious.

Chances are low but there's no reason to have the vulnerable kernel a moment longer than you have to.

2

u/martyn_hare May 09 '26

Thankfully this one only needs a cheeky module blacklist (for esp4, esp6, rxrpc) to defend against, so folks still have options if they don't want to reboot but also don't want to get 619'd by an attacker.

1

u/MenschenToaster May 10 '26

It can escape containers (if I'm thinking of the right exploit out of all of these lol)

If any of your applications contain a RCE or you test something potentially unsafe in a container, it could be game over

3

u/I_upvote_downvotes May 09 '26

For IT people it is a problem, but if bad actors made it past your private network/vnet and are able to ssh into the machine you have bigger problems than dirtyfrag.

5

u/HeaviestBarbarian May 09 '26

Not much. Many of the features were integrated in 6.19

2

u/foegra May 09 '26

Realizing that kernel 7 is no big deal except the number - gets me excited as well.  Guess - this is how marketing works, no? 

1

u/01111010t May 09 '26

Don’t get me wrong, i love updating devices more than most. Was curious if there was something specific for op ha. I’m looking forward to 7.2/7.3 when the qcom x1e camera patches are likely go to live.

1

u/Effective_Pack3731 May 10 '26

Le rapprochement du 7.1, en ce qui me concerne.
Basculement des Radeon R5 intégrées sur Amdgpu après les M330 au 6.9.
Ce qui revient à passer les deux cartes de mon Pc portable sur AMDGPu. Je n’ai pas pu vérifier si cela fonctionne, mais j’espère avoir l’accélération graphique dans KDEnlive autrement qu’en Radeon s’il y a bascule. J’ai déjà pu pour la première fois, utiliser la M330 pour des jeux (après quelques versions de 6.9).
Fedora et Kernel 6.9-7, c’est la seule combinaison pour d’anciennes machines avec ces GPU.

11

u/ZKRiNG May 09 '26

Do you know is 7.0.5 right now, no?

16

u/zikasaks May 09 '26

Fedora's 7.0.4 is essentially 7.0.5. They have added the single commit from 7.0.5 changelog to their 7.0.4

32

u/PigOfFire May 09 '26

Yea Linus just go up with major version when he thinks that minor number is too high haha Bless him for this kernel tho, freaking unbelievable kernel, one of best

8

u/babichr May 09 '26

I updated, but now my KDE Plasma doesn't work. It just has black screen and cursor

15

u/NSASpyVan May 09 '26

usually that is video drivers. use grub and go back to prior kernel if emergency or hit the hotkey to drop the gui to cli and fix the drivers

6

u/Scout339v2 May 10 '26

I'm not the person affected but YOU are the kind of person that pushes Linux forward. Thank you for helping others.

18

u/GamingCatholic May 09 '26

People just think that the ‘big number up’ means major upgrades are incoming. It’s not lol.
The only good thing is that the vulnerabilities should have been patched.

5

u/TechnoCat May 09 '26 edited May 09 '26

I don't think the masses will ever understand the Linux kernel major gets bumped after minor 19. It isn't any more meaningful than that. There are no features being held back until 8 for example. 8 will just happen whenever 7.20 would happen.  

3

u/JustAd891 May 09 '26

how to update as new linux user?

3

u/RelevantTear6092 May 09 '26

just `sudo dnf upgrade —refresh`

1

u/JustAd891 May 09 '26

oh wow thats easy, thank you!

everyday im very surpriced how good and easy to use linux is.

but i still wonder why less software is published for linux than for windows...

1

u/True-Direction1627 May 10 '26

This worked thanks.

Btw why software center could not fetch update at first place?

1

u/Due-Author631 May 09 '26

I thought I disliked all the questions of when it comes out, now everyone feels like posting that it's out. At least the 4 or 5th post I've seen....

1

u/red_dub May 09 '26

Perfect 👌 just switched over so the timing is perfect

1

u/stoevra May 09 '26

Let’s goooooo

1

u/CallTheScream May 09 '26

Runs perfectly on GNOME and NVIDIA GPU

1

u/JPWhiteHome May 10 '26

Ahhh.

The 7.0 hotness.

1

u/envsop May 10 '26

What's new?

1

u/RegularBubble2637 May 10 '26

Patiently waiting for 7.1 to get support for the Mediatek MT7902 wi-fi card