November 6, 2026

Linux 7.2.15 with the CVE-2026-98432 fix is now on Omarchy’s stable channel

0

The patched kernel went from edge to stable in about fifteen minutes on November 2, replacing the 7.2.8 builds that the critical TCP bug affected. A regular Omarchy update is all it takes.

The Omarchy pixel-art wordmark in grey on a black background, with the tagline Beautiful, fun and agentic Linux by DHH

Image: Omarchy (omarchy.org)

The fix for the critical TCP bug has reached everyone. “We have pushed Linux kernel v7.2.15 with the fix for that nasty CVE-2026-98432 security issue to the stable channel,” the Omarchy account said on X on November 2, 2026, adding: “Hit Update > Omarchy to update.”

That closes the gap we pointed out in our earlier post on the edge-only fix: at the time, the patched kernels lived on edge, and no promotion of linux-omarchy to rc or stable had shown up. A few hours later, that changed.

According to the pkgs.omarchy.org publish log, a manually triggered workflow run published linux-omarchy and linux-omarchy-headers 7.2.15-1 to edge at 11:51 UTC on November 2. Maintainer emirb then promoted them from edge to rc at 11:59 UTC, and from rc to stable at 12:05 UTC. On both channels, they replaced 7.2.8-9, the build reported as vulnerable in the original issue.

The alternative schedulers followed right after. linux-omarchy-eevdf and linux-omarchy-muqss 7.2.15-1, with their headers, were promoted to rc at 12:12 UTC and to stable at 12:16 UTC, replacing 7.2.8-8. All of this was done by the time Omarchy posted its announcement at 14:36 UTC.

If you were on the BORE kernel, there’s nothing extra to do. According to its PKGBUILD, linux-omarchy-bore is now an empty transitional package: BORE became linux-omarchy itself, and the package simply depends on it, so the upgrade moves you onto the main kernel. In #1968, the pull request by kwilczynski that moved the kernels to 7.2.15-1 and was merged on November 1, BORE only gets a one-line change to that transitional PKGBUILD.

One scope note: all four promotions in the log are for x86_64. The aarch64 side of the rc and stable channels is listed as untouched in those entries.

So the to-do list is short: run Update > Omarchy, reboot into the new kernel, and check that uname -r shows 7.2.15.

Source: https://x.com/omarchy/status/2117264554098839556

Leave a Reply

Your email address will not be published. Required fields are marked *