Linux Kernel 6.18.44 LTS

Linux 6.18.44 is the current point release in the 6.18 long-term support series, which shipped in late 2025 and is supported through December 2028.

Why 6.18

The 6.18 branch is the freshest LTS available, which makes it the right default for new deployments. It carries hardware support that the older LTS branches do not, and its support window runs furthest into the future, so a system built on it today has the longest runway before a forced migration.

The tradeoff against 6.12 and 6.6 is the usual one: newer branches have had fewer total eyes on them, so there are marginally more surprises left. In practice, by the time a branch has reached its forty-fourth point release, most of them have been found.

AerynOS uses 6.18.44 as its LTS kernel option, which is a reasonable pattern for anyone wanting a conservative base under a rolling userspace.

What a stable point release contains

Stable releases carry no new features. They are backports of fixes that already landed in mainline, tested against the linux-stable testing tree, and applied only after they have been in circulation for a while. The release announcement text is the same every time for a reason:

This is a stable release containing fixes for regressions and other issues. These fixes have been tested against the linux-stable testing tree and have been applied for some time. We encourage all users to review and test this new stable kernel.

This batch carries hundreds of fixes across the block layer, the networking stack, and the major filesystems.

Building it

tar xf linux-6.18.44.tar.xz
cd linux-6.18.44
cp /boot/config-$(uname -r) .config
make olddefconfig
make -j$(nproc)
sudo make modules_install install

Most people should not do this. Your distribution ships these kernels through its normal update channel, already configured, signed, and integrated with your bootloader. Building from source is for developers, for bisecting a regression, or for enabling something your distribution does not.

# The usual route
sudo apt update && sudo apt full-upgrade   # Debian and Ubuntu
sudo dnf upgrade --refresh                 # Fedora
sudo pacman -Syu                           # Arch

A kernel update does not take effect until you reboot, and uname -r reports the running kernel rather than the newest installed one.

On the CVE numbers

If the volume of security fixes in a stable release looks alarming, it is worth understanding why. The kernel became its own CNA in 2024 and now assigns CVEs to essentially every fix that could conceivably carry a security implication, which produces very large CVE counts that do not map to proportionally large risk. We covered that in why the kernel published 432 CVEs in two days.

The practical guidance: track a stable branch, take its updates, and do not attempt to triage individual kernel CVEs unless that is specifically your job.

Verify Your Download

Every tarball on kernel.org is signed. Verify before building:

curl -O https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.44.tar.sign
unxz linux-6.18.44.tar.xz
gpg --verify linux-6.18.44.tar.sign