umbrelOS 2.0.1 is an important security update that fixes a recently disclosed vulnerability (CVE-2026-98432) in how the Linux kernel handles incoming network connections.
On Umbrel Home, Umbrel Pro, and other x86 devices, this update brings a Linux kernel with the fix. On Raspberry Pi, where a fixed kernel isn't available yet, umbrelOS now blocks the network traffic needed to trigger the vulnerability.
This update also includes these security improvements:
- Fix a vulnerability in the HEIC photo decoder that a specially crafted image could trigger while umbrelOS generates its thumbnail.
- Stop trusting certificate authorities that were recently distrusted after a security incident, across all of umbrelOS.
- Harden the umbrelOS updater with the latest security fixes, protecting all future updates.
- Include the latest Debian security and stability updates.
See what's new in umbrelOS 2.0.
Join the Umbrel Community Discord to share your feedback on this update and engage with other users.
Downloads
- https://download.umbrel.com/release/2.0.1/SHA256SUMS
- https://download.umbrel.com/release/2.0.1/SHA256SUMS.ots
- https://download.umbrel.com/release/2.0.1/umbrelos-amd64-usb-installer.iso
- https://download.umbrel.com/release/2.0.1/umbrelos-amd64.img.xz
- https://download.umbrel.com/release/2.0.1/umbrelos-amd64.update
- https://download.umbrel.com/release/2.0.1/umbrelos-amd64-legacy.update
- https://download.umbrel.com/release/2.0.1/umbrelos-pi.img.zip
- https://download.umbrel.com/release/2.0.1/umbrelos-pi.update