Linux Kernel Update When?

[Ruby Maelstrom]

Right now, the Steam Deck is still running Linux kernel 5.13, which was released back in June of 2021. For security reasons alone, we need some sort of kernel update soon, even if it's not all the way to the recently released 6.0.

Can anyone please give me some feedback on when Valve is planning to update the kernel? It's kind of silly that we're running Linux based on Arch but are over a year behind on patches.

[d[-_-]b]

ETA: soon™️

[Reverse Module]

The 3.4 update they have said will have a new kernel.

[Ruby Maelstrom]

Originally posted by QushAes:

The 3.4 update they have said will have a new kernel.

Hope that update comes soon then...

[PrivateXTC]

Im sure Valve are fully aware of security issues and stuff and are working on it. They're hardly amateurs.

[Prezidentas]

The older kernel is not a real issue for security on a handheld gaming device. Getting a newer version of Mesa will be a lot more beneficial when they update the OS. Hopefully they will go with LTS kernel so it's easier to keep it up-to-date.

[Ruby Maelstrom]

Originally posted by Vairuotojas-Kontrolierius:

The older kernel is not a real issue for security on a handheld gaming device. Getting a newer version of Mesa will be a lot more beneficial when they update the OS. Hopefully they will go with LTS kernel so it's easier to keep it up-to-date.

I use the Steam Deck as my primary PC, mostly in desktop mode. So it's a real issue for security for me, and I doubt I'm the only person in the world who is using it this way. Valve has been pretty clear that the deck is a full PC just not a gaming console, I just hope it gets support like one.

[Prezidentas]

Originally posted by Ruby Witch:

Originally posted by Vairuotojas-Kontrolierius:

The older kernel is not a real issue for security on a handheld gaming device. Getting a newer version of Mesa will be a lot more beneficial when they update the OS. Hopefully they will go with LTS kernel so it's easier to keep it up-to-date.

I use the Steam Deck as my primary PC, mostly in desktop mode. So it's a real issue for security for me, and I doubt I'm the only person in the world who is using it this way. Valve has been pretty clear that the deck is a full PC just not a gaming console, I just hope it gets support like one.

you are mistaking the deck as a device and the operating system. the deck can operate as a full PC, just not with SteamOS.

[d[-_-]b]

Originally posted by Vairuotojas-Kontrolierius:

Originally posted by Ruby Witch:

I use the Steam Deck as my primary PC, mostly in desktop mode. So it's a real issue for security for me, and I doubt I'm the only person in the world who is using it this way. Valve has been pretty clear that the deck is a full PC just not a gaming console, I just hope it gets support like one.

you are mistaking the deck as a device and the operating system. the deck can operate as a full PC, just not with SteamOS.

It can operate as a full pc with SteamOS no problem.

[Ruby Maelstrom]

Originally posted by #/DragonKeeper:

Originally posted by Vairuotojas-Kontrolierius:

you are mistaking the deck as a device and the operating system. the deck can operate as a full PC, just not with SteamOS.

It can operate as a full pc with SteamOS no problem.

Thanks for replying to that guy, I didn't feel like it. It can and it does, I have no complaints about it as my primary PC at all, just hoping that they update the kernel someday!

[Prezidentas]

Originally posted by Ruby Witch:

Originally posted by #/DragonKeeper:

It can operate as a full pc with SteamOS no problem.

Thanks for replying to that guy, I didn't feel like it. It can and it does, I have no complaints about it as my primary PC at all, just hoping that they update the kernel someday! :lunar2019grinningpig:

well this is one of the reasons why it's not really usable as a desktop OS - even when they update it, it will go out of date again as it's not a priority for a gaming handheld.

[d[-_-]b]

Originally posted by Vairuotojas-Kontrolierius:

Originally posted by Ruby Witch:

Thanks for replying to that guy, I didn't feel like it. It can and it does, I have no complaints about it as my primary PC at all, just hoping that they update the kernel someday! :lunar2019grinningpig:

well this is one of the reasons why it's not really usable as a desktop OS - even when they update it, it will go out of date again as it's not a priority for a gaming handheld.

Yeah the way they update sucks for people that dont care for gaming as its primary usage.
however this doesnt reduce its usability as a desktop

[Mahjik]

Originally posted by Ruby Witch:

I use the Steam Deck as my primary PC, mostly in desktop mode. So it's a real issue for security for me, and I doubt I'm the only person in the world who is using it this way. Valve has been pretty clear that the deck is a full PC just not a gaming console, I just hope it gets support like one.

I'm curious, what specific security gaps do you have today that will be address with the next kernel update but put you at risk today?

[Ruby Maelstrom]

Originally posted by Mahjik:

Originally posted by Ruby Witch:

I use the Steam Deck as my primary PC, mostly in desktop mode. So it's a real issue for security for me, and I doubt I'm the only person in the world who is using it this way. Valve has been pretty clear that the deck is a full PC just not a gaming console, I just hope it gets support like one.

I'm curious, what specific security gaps do you have today that will be address with the next kernel update but put you at risk today?

Well I guess that's the thing about security gaps, you don't know about them until somebody finds them and hopefully patches them.

But there have been a ton of improvements to the Linux kernel since the middle of last year, including performance improvements. It would be beneficial to everyone if we got updated to a newer version. Are you or I really likely to notice the difference? Nope! But there's a reason why the issues were patched...

[Mahjik]

Originally posted by Ruby Witch:

Originally posted by Mahjik:

I'm curious, what specific security gaps do you have today that will be address with the next kernel update but put you at risk today?

Well I guess that's the thing about security gaps, you don't know about them until somebody finds them and hopefully patches them. :lunar2019crylaughingpig:

But there have been a ton of improvements to the Linux kernel since the middle of last year, including performance improvements. It would be beneficial to everyone if we got updated to a newer version. Are you or I really likely to notice the difference? Nope! But there's a reason why the issues were patched...

You can take this or leave it... The majority of security issues for Linux are more when operating within an enterprise environment and/or exposing your system to the internet. I used to do vulnerability management as part of my IT Security role and there were not a lot of Linux vulnerabilities that were not already mitigated by things like firewalls (or just basic protocol blocking that just about every internet router does).

Are you running ClamAV? i.e. if you are that worried, you should be using other protections as well.

[nemo]

Originally posted by Mahjik:

Originally posted by Ruby Witch:

I use the Steam Deck as my primary PC, mostly in desktop mode. So it's a real issue for security for me, and I doubt I'm the only person in the world who is using it this way. Valve has been pretty clear that the deck is a full PC just not a gaming console, I just hope it gets support like one.

I'm curious, what specific security gaps do you have today that will be address with the next kernel update but put you at risk today?

Personally... this one.
https://lwn.net/Articles/911062/

Remotely exploitable, doesn't even require connecting to the wifi.

And whether you use desktop mode or not (I do) you probably still wouldn't want your account swiped. But this one is a big deal so will probably be propagating out to all the Android devices and linux distros soon. Hopefully Valve can just pick up the Arch kernel + whatever tweaks they use.

https://security.archlinux.org/AVG-2801 looks like Arch has the patches already.. downside, in 6.0 so I'm guessing Valve might have to do a bit of testing since they are on 5.x