GrapheneOS releases 2026100600 with Android 17 security preview
Key Takeaway
This release includes security patches from November 2026 through April 2027 and migrates Seedvault to the Android 17 branch.
Summary
GrapheneOS has released version 2026100600, providing a security preview that includes Android Security Bulletins from November 2026 to April 2027. The update features kernel revisions for multiple versions, a migration of Seedvault to the upstream Android 17 branch, and performance improvements for core OS components. It also addresses a critical integer overflow bug in ZipFileRO.cpp.
Technical changes in 2026100600
- Security: Includes 8 critical and numerous high-severity CVEs from the Android 17 security preview.
- Kernel: Updates GKI LTS branches for kernels 6.1, 6.12 (to 6.12.94), and 6.18.
- Performance: Switches all system_server JARs and non-APEX APKs to use the speed compiler filter instead of speed-profile.
- Seedvault: Migrated from a custom port to the latest upstream Android 17 branch to leverage upstream improvements.
- Bug Fix: Resolved an integer overflow in ZipFileRO.cpp that could lead to memory corruption via 65,535 byte entry names.
Why it matters
By incorporating long-term security previews and migrating core components like Seedvault to newer Android branches, GrapheneOS maintains its hardened posture for Pixel hardware users.
Original reference: grapheneos.org →