2026110800

GrapheneOS has released a new version of its custom Android operating system, version 2026110800, for its supported Pixel 10 series devices. The update addresses a kernel bug and includes security patches for the months of December 2026 through May 2027.

The update is available as an over-the-air update and as full installation packages for the Pixel 10, Pixel 10 Pro, Pixel 10 Pro XL, and Pixel 10 Pro Fold. The update packages are signed and can be verified with OpenSSH.

The update includes fixes for a kernel bug that was introduced in the previous release, version 2026110700. The bug was a backport from Android 17 QPR2 Beta for an upstream Pixel suspend accounting bug that also impacted the stock OS.

The update also includes all of the Android 17 security patches from the current December 2026, January 2027, February 2027, March 2027, April 2027, and May 2027 Android Security Bulletins.

Security fixes and critical vulnerabilities

The update addresses a total of 12 critical security vulnerabilities, including CVE-2026-28666, CVE-2026-49921, CVE-2026-58820, CVE-2026-59062, CVE-2026-59069, CVE-2026-104172, CVE-2027-0001, CVE-2027-0160, CVE-2027-0165, CVE-2027-0212, CVE-2027-0255, and CVE-2027-0279.

The update is part of a series of security previews that are released to provide users with the latest security patches before the official release of the next Android version.

The update is available via the Alpha channel, followed by the Beta channel, and finally the Stable channel. The release is tested by developers and users before being pushed out to the Stable channel.

Update process and verification

The update process is designed to be secure and reliable. The update packages are signed and verified by the update client or recovery when sideloading. Downgrade attacks are also prevented, and downgrades cannot be done unless a special downgrade update package has been signed with the release key.

The update packages are not for performing the initial installation and should be ignored if used for that purpose. The factory images are used for the initial installation and can be verified with OpenSSH.

The update is available as a full update package that can upgrade from any past version to the new version. The over-the-air updates use delta update packages when available.

Next steps for users

Users are advised to update their devices to the latest version to ensure they have the latest security patches. The update is available via the over-the-air update channel or as a full installation package.

The update is also available as a security preview release, version 2026110801, which includes all of the Android 17 security patches from the current Android Security Bulletins.