Article Published Date: 11/3/2026
The latest 14.5.6 LTS version is https://github.com/lf-edge/eve/releases/tag/14.5.6-lts
For a change log between 14.5.5-lts and 14.5.6-lts, see: https://github.com/lf-edge/eve/compare/14.5.5-lts…14.5.6-lts
Enhancements
Security
EVE-OS 14.5.6 LTS is a kernel security hotfix. One CVE (CVE-2026-99999) is not yet resolved on the amd64-generic kernel; see the note on that item below.
- CVE-2026-98432 fixes a use-after-free in TCP/IPv4 IP options handling that could allow a local attacker to crash the kernel or escalate privileges on an edge node. This fix applies to all platforms.
- CVE-2026-99999 (“PwnEscape”) fixes an out-of-bounds write caused by an unvalidated IPv4 checksum offset that could allow a local attacker to corrupt kernel memory. This fix applies to arm64, NVIDIA Jetson jp5 and jp6, and riscv64. The amd64-generic kernel does not yet include this fix; a follow-up release will address it.
- CVE-2026-46113 fixes a use-after-free in KVM x86 shadow paging triggered by an unexpected guest frame number that could allow a guest VM to crash the host kernel or escalate privileges. This fix applies to amd64 only and is not relevant to arm64, NVIDIA Jetson, or riscv64.
- CVE-2026-53359 fixes a use-after-free in KVM x86 shadow paging triggered by an unexpected paging role, with the same exploit potential as CVE-2026-46113. This fix applies to amd64 only.
Linux OS and kernel updates
- On NVIDIA Jetson jp5 and jp6 kernels, Pressure Stall Information (PSI) monitoring is now enabled and transparent huge pages now default to
madvise, improving resource visibility and memory management on Jetson-based edge nodes. - On riscv64, the default kernel configuration now enables memory and cpuset cgroups and PSI, extending resource isolation and pressure monitoring to riscv64-based edge nodes.