Linux Kernel 6.7 Released With Various Security Improvements
TucCare, Thursday, January 25th, 2024
Linus Torvalds has announced the release of Linux kernel 6.7, featuring various improvements and new features. One major addition is the bcachefs file system, designed to compete with Btrfs and ZFS for modern features while maintaining the speed of EXT4 and XFS. This article aims to explore the security features and updates introduced in this new kernel series.
Crypto Subsystem Updates
The Linux 6.7 kernel's crypto subsystem updates involve routine changes and various crypto acceleration updates for different System-on-Chips (SoCs). Notably, the update reduces the role of insecure and obsolete crypto hashing algorithms. SHA1 support for signing kernel modules or importing X.509 certificates has been removed, with SHA256 or better algorithms recommended for these purposes. Additionally, MD4 and MD5 hashing and signatures in X.509 certificates have been eliminated due to security concerns.