GrapheneOS release 2026102100 includes Android 17 security patches
Key Takeaway
The latest GrapheneOS update integrates multiple months of Android 17 security bulletins and updates several kernel versions.
Summary
GrapheneOS has released version 2026102100, providing critical security updates for Pixel devices and emulators. The update includes Android 17 security patches from November 2026 through April 2027, addresses several critical CVEs, and updates the kernel for various supported versions. It also includes fixes for Sandboxed Google Play and changes to the boot animation.
Technical changes in 2026102100
- Security: Includes Android 17 security bulletins from November 2026 to April 2027, addressing multiple critical and high-severity CVEs.
- Kernel: Updates kernels 6.12 and 6.18 to the latest GKI LTS revisions; backports upstream security patches to 6.1, 6.6, 6.12, and 6.18.
- Sandboxed Google Play: Fixes foreground service type handling to prevent crashes and adds the missing gmscompat process declaration.
- Hardened_malloc: Reduces memory usage by eliminating unused space in quarantine arrays.
- Certificates: Removes compromised eMudhra ECDSA and legacy eMudhra root certificates.
- Emulator/Cuttlefish: Switches Microdroid, emulator, and Cuttlefish builds to Linux 6.18 by default.
Why it matters
This release significantly hardens the security posture of Pixel-based mobile users by proactively addressing a long window of Android security vulnerabilities.
What to do
- Users with supported Pixel devices or emulators should update to GrapheneOS version 2026102100 or the 2026102101 security preview release.
Original reference: grapheneos.org →