#GrapheneOS version 2025091000 released.
This release provides the entire October 2025 security patches EARLY. We are also packing Android 16 QPR1 backports as we wait for AOSP releases. We are also fixing a vulnerability the Linux kernel refuses to fix.
• full 2025-10-01 security patch level
• partially backport Android 16 QPR1 Pixel userspace device support: RIL, eSIM, TPU and NeuralNetworks (deprecated)
• kernel (6.1): roll back recent upstream Android GKI dma-buf changes due to a few MTE crash reports
• kernel (6.1, 6.6, 6.12): disable unused memory hotplug support
• kernel (6.1, 6.6, 6.12): fix linear region randomization by dropping memory hotplug support (see the Project Zero issue where the upstream Linux maintainers decided not to fix the issue)
• kernel (6.1): update to latest GKI LTS branch revision
• kernel (6.6): update to latest GKI LTS branch revision
• kernel (6.12): update to latest GKI LTS branch revision including update to 6.12.45
• Vanadium: update to version 140.0.7339.123.0
Information on vulnerability:
Project Zero
Releases | GrapheneOS
