Mobile & Hardened Systems

GrapheneOS 2026100600 releases with October 2026 security patches

Key Takeaway

GrapheneOS has released a new update including the October 2026 security patch level and several kernel and component improvements.

Summary

The GrapheneOS 2026100600 release provides the full October 2026 security patch level for supported Pixel devices. The update includes kernel updates for multiple versions, a fix for a memory corruption bug in ZipFileRO.cpp, and a migration of Seedvault to the upstream Android 17 branch. It also addresses numerous critical and high-severity CVEs.

Technical changes in GrapheneOS 2026100600

  • Fixed an upstream integer overflow bug in ZipFileRO.cpp that caused memory corruption with 65,535 byte entry names.
  • Updated kernel versions (6.1, 6.12, 6.18) to the latest GKI LTS branch revisions.
  • Migrated Seedvault from a custom port to the latest upstream Android 17 branch.
  • Improved core OS performance by using the speed compiler filter for all system_server JARs and non-APEX APKs.
  • Updated Vanadium to version 154.0.8037.126.0.
  • Changed the approach to disabling Android's vendor hooks for INIT_ON_FREE to prevent conflicts.

Why it matters

This update ensures Pixel users running GrapheneOS receive the latest security protections and performance optimizations integrated into the Android 17 development cycle.

Original reference: grapheneos.org →