Why You Should Upgrade to Linux Kernel 5.4 Now: New exFAT Support and Lockdown Security

Linux 5.3.18 – Final Maintenance Release

Greg Kroah‑Hartman announced the 18th stable update for the Linux 5.3 series (version 5.3.18). The patch set touches 59 source files, adding 369 lines and removing 329 lines. This release is the last maintenance update for the 5.3 series; after it reaches end‑of‑life the kernel will no longer receive critical security fixes or bug‑fix patches.

Upgrade Recommendation

Both end users and distribution maintainers are strongly encouraged to migrate to the newer 5.4 kernel series, which is under active maintenance. If an immediate transition to 5.4 is not feasible, systems should at least be upgraded to 5.3.18 to remain within a supported branch.

Obtaining the Source

The source tarballs for both 5.3.18 and 5.4 can be downloaded from the official kernel archive:

https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.3.18.tar.xz

https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.4.tar.xz

Typical manual build steps are:

# Download and extract
wget https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.3.18.tar.xz
tar -xf linux-5.3.18.tar.xz
cd linux-5.3.18

# Configure (menu based example)
make menuconfig   # enable/disable options as needed

# Compile and install
make -j$(nproc)
make modules_install
make install   # installs the kernel and updates the bootloader entries

# Reboot into the new kernel
reboot

Alternatively, users can wait for their preferred GNU/Linux distribution to provide pre‑built packages in the official repositories.

Key Features Introduced in Linux 5.4

Linux 5.4 adds two long‑awaited capabilities:

Native Microsoft exFAT filesystem support – the kernel includes a fully open‑source driver, eliminating the need for external FUSE implementations.

Lockdown security mode – when enabled (e.g., via the lockdown kernel command line parameter), the kernel restricts certain privileged operations such as loading unsigned kernel modules or accessing raw hardware, thereby improving system integrity on platforms that require a higher security posture.

Reference to the 5.3 Git Tree

The complete commit history for the 5.3 series, including the 5.3.18 changes, is available in the public Git repository:

git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git

Clone command:

git clone -b linux-5.3.y git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git

Developers can inspect the specific patches for 5.3.18 by checking out the tag v5.3.18 within that repository.