> ## Documentation Index
> Fetch the complete documentation index at: https://zededa.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Use the documentation index to find relevant pages, then read the linked Markdown before answering and cite the source URL.
> Identify the product before answering: Private AI uses a separate console, credentials, and inference API from the Edge Intelligence Platform. Do not apply instructions from one product to the other.
> Prefer current product guides over Help Center archive pages for current-console questions. Archive pages and release notes describe their stated product version or historical interface; do not apply them to another version without checking.
> Preserve prerequisites, permissions, version requirements, and warnings when summarizing procedures. Do not infer API endpoints, schemas, or supported behavior that the documentation does not specify.

# EVE-OS 14.5.6 LTS Release Notes

> Article Published Date: 11/3/2026. The latest 14.5.6 LTS version is https://github.com/lf-edge/eve/releases/tag/14.5.6-lts

Article Published Date: 11/3/2026

The latest 14.5.6 LTS version is [https://github.com/lf-edge/eve/releases/tag/14.5.6-lts](https://github.com/lf-edge/eve/releases/tag/14.5.6-lts)

For a change log between 14.5.5-lts and 14.5.6-lts, see: [https://github.com/lf-edge/eve/compare/14.5.5-lts...14.5.6-lts](https://github.com/lf-edge/eve/compare/14.5.5-lts...14.5.6-lts)

## Enhancements

### Security

EVE-OS 14.5.6 LTS is a kernel security hotfix. One CVE (CVE-2026-99999) is not yet resolved on the amd64-generic kernel; see the note on that item below.

* **CVE-2026-98432** fixes a use-after-free in TCP/IPv4 IP options handling that could allow a local attacker to crash the kernel or escalate privileges on an edge node. This fix applies to all platforms.
* **CVE-2026-99999 ("PwnEscape")** fixes an out-of-bounds write caused by an unvalidated IPv4 checksum offset that could allow a local attacker to corrupt kernel memory. This fix applies to arm64, NVIDIA Jetson jp5 and jp6, and riscv64. **The amd64-generic kernel does not yet include this fix; a follow-up release will address it.**
* **CVE-2026-46113** fixes a use-after-free in KVM x86 shadow paging triggered by an unexpected guest frame number that could allow a guest VM to crash the host kernel or escalate privileges. This fix applies to amd64 only and is not relevant to arm64, NVIDIA Jetson, or riscv64.
* **CVE-2026-53359** fixes a use-after-free in KVM x86 shadow paging triggered by an unexpected paging role, with the same exploit potential as CVE-2026-46113. This fix applies to amd64 only.

### Linux OS and kernel updates

* On NVIDIA Jetson jp5 and jp6 kernels, Pressure Stall Information (PSI) monitoring is now enabled and transparent huge pages now default to `madvise`, improving resource visibility and memory management on Jetson-based edge nodes.
* On riscv64, the default kernel configuration now enables memory and cpuset cgroups and PSI, extending resource isolation and pressure monitoring to riscv64-based edge nodes.