Linux 7.0 Removes Support For Signing Modules With Insecure SHA-1
The Linux 7.0 kernel has removed support for signing kernel modules using SHA-1 as it's no longer considered secure but existing SHA-1 signed modules can still be loaded.
Merged for the Linux 7.0 are the module changes that include removing support for SHA1 since it's no longer considered secure due to the possibility of hash collisions. This shouldn't come as too much of a surprise as months ago we reported on Linux looking to drop SHA1 signing support for kernel modules/drivers. It's outdated, collisions can exist, it was already marked as deprecated in the mainline kernel, and there are better modern alternatives that major Linux distribution vendors have since adopted.
The modules pull request was merged to Linux 7.0 without issue.
Merged for the Linux 7.0 are the module changes that include removing support for SHA1 since it's no longer considered secure due to the possibility of hash collisions. This shouldn't come as too much of a surprise as months ago we reported on Linux looking to drop SHA1 signing support for kernel modules/drivers. It's outdated, collisions can exist, it was already marked as deprecated in the mainline kernel, and there are better modern alternatives that major Linux distribution vendors have since adopted.
"Remove SHA-1 support for signing modules. SHA-1 is no longer considered secure for signatures due to vulnerabilities that can lead to hash collisions. None of the major distributions use SHA-1 anymore, and the kernel has defaulted to SHA-512 since v6.11. Note that loading SHA-1 signed modules is still supported."
The modules pull request was merged to Linux 7.0 without issue.