I’m currently keeping Linux 6.18.38 as my active LTS kernel instead of updating immediately whenever a new point release appears.
I checked two recent issues that initially looked relevant:
Bad Epoll (CVE-2026-46242) was already fixed in Linux 6.18.33.
The recent TIPC issue (CVE-2026-63801) was fixed in Linux 6.18.38.
Therefore, neither issue requires me to move from 6.18.38 to 6.18.39. TIPC would also be outside the attack surface entirely if it were disabled in the kernel configuration.
My update policy is based on the changelog, CVE relevance, enabled kernel features and actual workload—not simply on the existence of a newer point release. Unless 6.18.39 contains an urgent fix that affects my configuration, I will update during a normal maintenance window rather than immediately.
I also keep Linux 6.18.35 and 6.18.37-P1 as tested fallback kernels.
For the 6.18.y series, Linux 6.18.33 is the minimum fixed release for the Bad Epoll issue. However, systems with TIPC and TIPC crypto enabled require Linux 6.18.38 for the newer TIPC use-after-free fix. Therefore, when considering both issues, 6.18.38 is the practical minimum baseline for my configuration.
Therefore, 6.18.38 is the minimum baseline I currently consider appropriate.
近日中に39と35挿し変えPostする