← Downloads

Linux Kernel 5.10.270 LTS

Kernel v5.10.270 x86_64 TAR.XZ September 14, 2026

Linux 5.10.270 is a longterm point release in the 5.10 series, released September 14. It includes the fixes for the four networking root exploits disclosed in September.

Download TAR.XZ Project website ↗

Download Mirrors

Mirror Region Download
kernel.org CDN Primary Global Download
kernel.org Edge Global Download
MIT CSAIL US East Download
University of Maryland US West Download

Linux 5.10.270 is the latest point release of the 5.10 series, the oldest maintained longterm branch. It was released on kernel.org on September 14, 2026.

5.10 is the oldest series kernel.org still maintains. It exists for devices that genuinely cannot move, and it should not be a deliberate choice for anything new.

Why this release matters

Stable and longterm releases carry no new features, only fixes that have already landed in mainline and been backported. It is also at or beyond the first release in its series to carry fixes for all four networking bugs that received public root exploits on September 18: DirtyAH6, TUNderflow, PPPoEject, and DiagSpill. Three of those need unprivileged user namespaces to reach; one, DiagSpill in SCTP, needs nothing at all.

The same month, CISA also added three older kernel CVEs to its actively-exploited catalog. If you have been deferring kernel updates, this is the batch to take.

Who uses the 5.10 series

Its remaining users are mostly embedded and industrial systems locked to it by vendor board support packages.

Building it

tar xf linux-5.10.270.tar.xz
cd linux-5.10.270
cp /boot/config-$(uname -r) .config
make olddefconfig
make -j$(nproc)
sudo make modules_install install

Most people should not do this. Your distribution ships kernels through its normal update channel, already configured, signed for Secure Boot, and integrated with your bootloader. Distribution kernels also backport fixes without matching upstream version numbers, so our guide on checking whether your kernel is patched against a CVE is the better way to confirm you are covered.

sudo apt update && sudo apt full-upgrade   # Debian and Ubuntu
sudo dnf upgrade --refresh                 # Fedora
sudo pacman -Syu                           # Arch

A kernel update does not take effect until you reboot, and uname -r reports the running kernel rather than the newest installed one.

Verify Your Download

Every tarball on kernel.org is signed. Verify before building:

curl -O https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.10.270.tar.sign
unxz linux-5.10.270.tar.xz
gpg --verify linux-5.10.270.tar.sign