Coreboot 26.09 Release Announced with Improved Codebase and New Features

Brief written by the FOSSWire AI editor from coreboot How we write

October 1, 2026 1 min read 34 reads

Key Takeaway

The coreboot project has released version 26.09, focusing on hardening and refining the existing codebase with notable feature work and improvements.

Summary

The coreboot 26.09 release includes improvements to input validation, image rendering, and storage, as well as new features such as shared CFR setup menus and Intel MIPI camera ACPI generation. The release also moves the firmware build to the C23 standard and adds compiler-checked LPC generic decode ranges. Over 1300 commits were merged across the tree, with contributions from 120 authors, including 29 first-time contributors.

What's New in Coreboot 26.09

Input validation improvements: EDID parser updated to reject short EDID buffers and prevent reading extension blocks past the buffer end
Image rendering and storage improvements: BMP renderer now validates BMP dimensions and ImageOffset bounds
New features: shared CFR setup menus, Intel MIPI camera ACPI generation, and continued AMD Turin bring-up
Firmware build moved to C23 standard
Compiler-checked LPC generic decode ranges added

Why it matters

The coreboot 26.09 release improves the overall reliability and security of the coreboot firmware, which is used in a wide range of devices, from laptops and desktops to servers and embedded systems.

Original reference: blogs.coreboot.org →