← Downloads

Linux Kernel 6.6.157 LTS

Kernel v6.6.157 x86_64 TAR.XZ September 14, 2026

Linux 6.6.157 is a longterm point release in the 6.6 series, released September 14. It includes the fixes for the four networking root exploits disclosed in September.

Download TAR.XZ Project website ↗

Download Mirrors

Mirror Region Download
kernel.org CDN Primary Global Download
kernel.org Edge Global Download
MIT CSAIL US East Download
University of Maryland US West Download

Linux 6.6.157 is the latest point release of the 6.6 series, a longterm branch. It was released on kernel.org on September 14, 2026.

6.6 is a mature longterm series used heavily in embedded, Android, and appliance work, where changing kernel branches is expensive.

Why this release matters

Stable and longterm releases carry no new features, only fixes that have already landed in mainline and been backported. It is also at or beyond the first release in its series to carry fixes for all four networking bugs that received public root exploits on September 18: DirtyAH6, TUNderflow, PPPoEject, and DiagSpill. Three of those need unprivileged user namespaces to reach; one, DiagSpill in SCTP, needs nothing at all.

The same month, CISA also added three older kernel CVEs to its actively-exploited catalog. If you have been deferring kernel updates, this is the batch to take.

Who uses the 6.6 series

Embedded products, Android devices, and long-lived appliances make up most of its installed base.

Building it

tar xf linux-6.6.157.tar.xz
cd linux-6.6.157
cp /boot/config-$(uname -r) .config
make olddefconfig
make -j$(nproc)
sudo make modules_install install

Most people should not do this. Your distribution ships kernels through its normal update channel, already configured, signed for Secure Boot, and integrated with your bootloader. Distribution kernels also backport fixes without matching upstream version numbers, so our guide on checking whether your kernel is patched against a CVE is the better way to confirm you are covered.

sudo apt update && sudo apt full-upgrade   # Debian and Ubuntu
sudo dnf upgrade --refresh                 # Fedora
sudo pacman -Syu                           # Arch

A kernel update does not take effect until you reboot, and uname -r reports the running kernel rather than the newest installed one.

Verify Your Download

Every tarball on kernel.org is signed. Verify before building:

curl -O https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.6.157.tar.sign
unxz linux-6.6.157.tar.xz
gpg --verify linux-6.6.157.tar.sign