GrapheneOS releases 2026100600 with October 2026 security patch
Key Takeaway
GrapheneOS has updated its mobile OS with the October 2026 security patch and several core performance and security improvements.
Summary
The 2026100600 release for GrapheneOS includes the full October 2026 security patch level and updates for Pixel device firmware and HALs. Key changes involve kernel updates across multiple versions, a fix for a memory corruption bug in ZipFileRO.cpp, and performance optimizations for system_server JARs. Additionally, Seedvault has migrated to the latest upstream Android 17 branch.
Technical updates in GrapheneOS 2026100600
- Fixed an upstream integer overflow bug in ZipFileRO.cpp that caused memory corruption with 65,535 byte entry names.
- Implemented speed compiler filter for all system_server JARs and non-APEX APKs to improve core OS performance.
- Updated Seedvault to the latest upstream Android 17 branch and applied downstream bug fixes.
- Updated Vanadium to version 154.0.8037.126.0.
- Updated multiple kernel branches (6.1, 6.12, 6.18) to the latest GKI LTS revisions.
- Changed the approach to disabling Android's vendor hooks for INIT_ON_FREE to prevent conflicts.
Why it matters
This update maintains the security posture of GrapheneOS by addressing numerous critical and high-severity CVEs and improving system-wide performance through compiler optimizations.
Original reference: grapheneos.org →