Please read the previous release news for updates that also apply to this release.

Updates and Highlights​

• Linux Kernel update
  • Updated i.MX Linux downstream kernel to version 6.6.142 for Apalis iMX8, Aquila iMX95, Colibri iMX8X, Lino iMX93, OSM iMX93, SMARC iMX8M Plus, SMARC iMX95, Verdin iMX8M Mini, Verdin iMX8M Plus, and Verdin iMX95
  • Updated TI Downstream Linux Kernel to version 6.6.142 for Aquila AM69, Verdin AM62, and Verdin AM62P
  • Check detailed version information in our Release Matrix
• Added NPU device tree configuration for Lino iMX93 and OSM iMX93
• Added support for the Zinnia Carrier Board on BSP for Verdin AM62, Verdin AM62P, Verdin iMX8M Mini, Verdin iMX8M Plus, and Verdin iMX95
• Bug fixes and product improvements, including:
  • POWER_ENABLE_MOCI driven low on SW Reset and audio configuration not applied on Apalis iMX8

Hardware Support​

• Volume products: Aquila AM69/TDA4, Verdin AM62, Verdin AM62P, Verdin iMX8M Plus, Verdin iMX8M Mini, SMARC iMX8M Plus, Apalis iMX6, Apalis iMX8, Colibri iMX6, Colibri iMX6ULL, Colibri iMX7, and Colibri iMX8X
  • This release is intended to be used in production for these modules.
• Sample products: Aquila iMX95, Verdin iMX95, SMARC iMX95, Lino iMX93, and OSM iMX93
  • Due to the hardware status of the sample products, this downstream-based release is intended for development.

Quarterly releases are production releases. We run a set of tests to validate them. Learn more about our release types from our Embedded Linux Support Strategy.

For more updates on this, see our Release Details.

Join the discussion on our community forum to connect with other developers and share your thoughts on Toradex BSP Layers and Reference Images for Yocto Project 7.7.0.

Download Information​

• You can install the pre-built evaluation Reference Images directly from our online Toradex Easy Installer feeds into the board. No download is required!
• Alternatively, you can download the images and BSP from the Linux Software page on our developer website.
• The U-Boot, Linux kernel sources, and OpenEmbedded metadata are available at git.toradex.com. Learn how to build them on our Developer Website.

Please read the previous release news for updates that also apply to this release.

Updates and Highlights​

• Linux Kernel update
  • Updated i.MX Linux downstream kernel for Apalis iMX8, Aquila iMX95, Colibri iMX8X, Lino iMX93, OSM iMX93, SMARC iMX8M Plus, SMARC iMX95, Verdin iMX8M Mini, Verdin iMX8M Plus, and Verdin iMX95
  • Updated TI Linux downstream kernel for Aquila AM69, Verdin AM62, and Verdin AM62P
  • Check detailed version information in our Release Matrix
• Added support for Verdin iMX95 V1.0B, dropped support for V1.0A
• Added support for Lino iMX93 and OSM iMX93
• Added support for 0223 Aquila TDA4 Octa 16GB IT
• Added NPU device tree configuration for Verdin iMX95, SMARC iMX95, and Aquila iMX95
• Bug fixes and product improvements, including:
  • Unable To Load Cortex-M7 Firmware From Linux/U-Boot on NXP i.MX 95-based modules
  • SPI CS# Not Working Correctly on Aquila AM69
  • OV5640 CSI1 Camera Not Working on Aquila AM69
  • Intermittent DP Output Failures on Aquila AM69
  • ETH_1 Not Working In 10Base-T on Verdin iMX8M Plus
  • Several fixes for NXP i.MX95-based modules

Hardware Support​

• Volume products: Aquila AM69/TDA4, Verdin AM62, Verdin AM62P, Verdin iMX8M Plus, Verdin iMX8M Mini, SMARC iMX8M Plus, Apalis iMX6, Apalis iMX8, Colibri iMX6, Colibri iMX6ULL, Colibri iMX7, and Colibri iMX8X
  • This release is intended to be used in production for these modules.
• Sample products: Aquila iMX95, Verdin iMX95, SMARC iMX95, Lino iMX93, and OSM iMX93
  • Due to the hardware status of the sample products, this downstream-based release is intended for development.

Quarterly releases are production releases. We run a set of tests to validate them. Learn more about our release types from our Embedded Linux Support Strategy.

For more updates on this, see our Release Details.

Join the discussion on our community forum to connect with other developers and share your thoughts on Toradex BSP Layers and Reference Images for Yocto Project 7.6.0.

Download Information​

• You can install the pre-built evaluation Reference Images directly from our online Toradex Easy Installer feeds into the board. No download is required!
• Alternatively, you can download the images and BSP from the Linux Software page on our developer website.
• The U-Boot, Linux kernel sources, and OpenEmbedded metadata are available at git.toradex.com. Learn how to build them on our Developer Website.

Torizon OS is our operating system that powers Torizon, a DevOps platform that simplifies the development and maintenance of embedded Linux software. Torizon OS is designed to be used out-of-the-box on devices requiring high reliability, allowing you to focus on your application instead of building and maintaining an operating system.

Torizon uses software containers, making it simple to add functionality to your system in a way that is both secure and easy to maintain. Torizon supports hardware acceleration in containers and graphical user interfaces.

Updates and Highlights​

Torizon OS​

• Distro updates:
  • Copy Fail CVE fixed for Toradex hardware
  • Dirty Frag CVE fixed for Toradex hardware
  • Added support to pre-provision device into Torizon Cloud fleet
  • Enabled kernel configs for IPV6-modules, IP6-modules, NF-modules and NFT-modules
• Bug Fixes:
  • Fixed splash screen (boot) failing intermittently on SMARC iMX95
  • Fixed splash screen (boot) failing intermittently on Aquila iMX95
  • Fixed splash screen not working on Colibri i.MX8X via DSI to HDMI
• Updates from BSP 7.6.1:
  • Please also note that Torizon OS is built on top of the Toradex BSP Layers for the Yocto Project. Read the BSP Layers and Reference Images for Yocto Project release news to learn more.

Intended Use​

The Torizon OS 7.6.1 Release is a production-grade release.

Therefore, if you are in production with TorizonCore 5, Torizon OS 6 or earlier Torizon OS 7 releases, we recommend moving to this quarterly release. Learn more in the Torizon Upgrade Notes.

Hardware Support​

A quarterly release is a production release, intended to be used in a production environment only with volume products, as long as they are supported by Torizon OS. We run a set of tests to validate them. Learn more about our release types from our Embedded Linux Support Strategy.

• Volume products: Aquila AM69/TDA4, Verdin AM62P, Verdin AM62, Verdin iMX8M Plus, Verdin iMX8M Mini, SMARC iMX8M Plus, Apalis iMX8, Apalis iMX6, Colibri iMX6ULL 1GB, Colibri iMX6DL, and Colibri iMX7D 1GB, and Colibri iMX8
  • This release is intended to be used in production on these modules.
• Sample products: Luna SL1680, Aquila iMX95, SMARC iMX95, and Verdin iMX95
  • Due to the hardware status being "sample", this release is intended for evaluation and development.

Torizon OS is our operating system that powers Torizon, a DevOps platform that simplifies the development and maintenance of embedded Linux software. Torizon OS is designed to be used out-of-the-box on devices requiring high reliability, allowing you to focus on your application instead of building and maintaining an operating system.

Torizon uses software containers, making it simple to add functionality to your system in a way that is both secure and easy to maintain. Torizon supports hardware acceleration in containers and graphical user interfaces.

Updates and Highlights​

Torizon OS​

• Distro updates:
  • Smaller Offline Update packages enabled by extending Aktualizr to support Lockbox with OSTree static deltas
  • Enabled the following kernel configs in Torizon OS: CONFIG_NETFILTER_XT_SET=m, CONFIG_IP_SET=m, CONFIG_IP_SET_MAX=256, CONFIG_IP_SET_HASH_NET=m, CONFIG_FB_BACKLIGHT=m, CONFIG_FB_TFT=m, CONFIG_FB_TFT_ST7789V=m.
  • Disabled CONFIG_THUMB2_KERNEL for all ARM32 machines.
• Bug Fixes:
  • Fixed GPU firmware for Aquila iMX95 missing on Torizon OS 7
  • Yocto "devtool" utility does not work in recent versions of Torizon OS 7 build environment
  • CVE_VERSION reports incomplete kernel version
• Updates from BSP 7.6.0:
  • Please also note that Torizon OS is built on top of the Toradex BSP Layers for the Yocto Project. Read the BSP Layers and Reference Images for Yocto Project release news to learn more.

Common Torizon​

• Distro updates:
  • Added Luna SL1680 Board quarterly release.
  • Added Astra Machina SL1680 quarterly release.
  • Added NVIDIA Jetson Orin Nano engineering pre-release.

Get started with Common Torizon hardware support.

Debian Packages and Containers​

Full release notes are published in the Torizon Containers repository: Torizon Containers Release Notes. Highlights:

• Demos on Torizon Demo Gallery:
  • Added Aquila iMX95, BeagleY-AI, TI AM62L_EVM, TI SK-AM62, TI SK-AM62P, Verdin AM62 and Verdin AM2P platforms.
  • Added Crank UI, Embedded Wizard UI, Slint UI, LVGL UI, and Light PDF Reader demos.

Intended Use​

The Torizon OS 7.6.0 Quarterly Release is a production-grade release.

Therefore, if you are in production with TorizonCore 5, Torizon OS 6 or earlier Torizon OS 7 releases, we recommend moving to this quarterly release. Learn more in the Torizon Upgrade Notes.

Hardware Support​

A quarterly release is a production release, intended to be used in a production environment only with volume products, as long as they are supported by Torizon OS. We run a set of tests to validate them. Learn more about our release types from our Embedded Linux Support Strategy.

• Volume products: Aquila AM69/TDA4, Verdin AM62P, Verdin AM62, Verdin iMX8M Plus, Verdin iMX8M Mini, SMARC iMX8M Plus, Apalis iMX8, Apalis iMX6, Colibri iMX6ULL 1GB, Colibri iMX6DL, and Colibri iMX7D 1GB, and Colibri iMX8
  • This release is intended to be used in production on these modules.
• Sample products: Luna SL1680, Aquila iMX95, SMARC iMX95, and Verdin iMX95
  • Due to the hardware status being "sample", this release is intended for evaluation and development.
• Community products: NVIDIA Jetson Orin Nano, Astra Machina SL1680, and Astra Machina SL2610 Dev Kit from Synatpics; i.MX93 FRDM Board from NXP; AM62L EVM, AM62P EVM, and AM62 EVK from Texas Instruments; BeagleY-AI from the BeagleBoard Foundation; Generic x86_64
  • Toradex runs a test suite for Torizon Cloud-related features on these boards and fixes critical bugs. Overall, Torizon support (including containers and IDE) varies for each platform. Contact us to learn more.

A security vulnerability (CVE-2026-43284) found in the Linux kernel may allow a local unprivileged user to escalate privileges to root. To exploit this vulnerability, an attacker only needs:

• the ability to create user namespaces
• permission to execute at least one setuid binary (for example, sudo, passwd, or fusermount)

Any standard Linux user account with shell access typically meets these requirements.

The vulnerability allows the page cache of a loaded binary to be arbitrarily modified, potentially affecting more than just privilege escalation. For example, an attacker could use this vector from inside a compromised container to corrupt the page cache for a file that is on a layer that is shared between containers, affecting all containers using that layer. Similarly, corruption of bind-mounted host files would also affect the host system.

All versions of the Linux kernel since 4.11.0, released in 2017, are affected. The vulnerability has patches available in upstream Linux kernel releases for all currently-supported branches, including 5.15 (patched in 5.15.206), 6.1 (patched in 6.1.172), and 6.6 (patched in 6.6.138).

Are You Affected?​

You are likely affected if all of the following are true:

• Your device runs:
  • Torizon OS 6.x or 7.x released before May 2026 (6.0.0 - 6.8.7, 7.0.0 - 7.6.0), or
  • a custom Linux distribution using Linux kernel 4.11 or newer that has not been patched.
• Your system includes at least one unprivileged user account
• That user can execute a setuid binary (for example, sudo, passwd, or fusermount)
• Your kernel enables CONFIG_USER_NS and CONFIG_INET_ESP/CONFIG_INET6_ESP

For Torizon OS users, these kernel options are enabled by default.

For custom Yocto or BSP-based systems, verify whether the relevant options are present in your kernel configuration.

What Should You Do?​

Toradex is working on a patch release for both BSP 6 and BSP 7, as well as corresponding Torizon releases. We are currently completing our release process, and these patch releases will be available shortly. To receive a notification as soon as the releases are published, use the Subscribe to Security Updates button at the top of this page.

Although this vulnerability is serious, in the context of most embedded devices, it is only one link in an exploit chain. If your device has well-protected defenses against allowing users to execute arbitrary code, this vulnerability cannot be operationalized. Therefore, it may not merit an emergency out-of-band patch.

Torizon OS Users​

If you are using an affected version of Torizon OS, we recommend that you upgrade to version 7.6.1 as soon as it is available. If you have a threat model and use case that indicates this vulnerability affects your device immediately, we recommend issuing an update that blacklists the esp4 and esp6 kernel modules. Create a file /etc/modprobe.d/dirtyfrag.conf with the following contents:

install esp4 /bin/false
install esp6 /bin/false

Toradex BSP/Custom Yocto Linux Distribution Users​

The Toradex BSP layer does not automatically enable the ESP4/ESP6 modules (CONFIG_INET_ESP/CONFIG_INET6_ESP are not set). We recommend auditing your image and kernel config to determine if you have a vulnerable version, and patching/upgrading as soon as the updated BSP releases are available.

If you have a threat model and use case that indicates this vulnerability affects your device immediately, we recommend issuing the following update:

• If CONFIG_INET_ESP/CONFIG_INET6_ESP=y (built into the kernel), add initcall_blacklist=esp4_init,esp6_init to the kernel command line.
• If CONFIG_INET_ESP/CONFIG_INET6_ESP=m (compiled as a module), blacklist the esp4 and esp6 kernel modules.

Q&A​

• I don't have any unprivileged Linux user accounts on my device. Am I still affected?
  • If you are certain that you do not have any unprivileged Linux user accounts, i.e., the only user on the device is root, you are not affected. However, note that most Linux distributions include the Name Service Switch, and allow users to be defined in places other than /etc/passwd, for example via nss-systemd. Check your /etc/nsswitch.conf file for all potential places where users may be defined, and/or run compgen -u to see the current list of defined users on your system.
• I don't allow shell access at all on my device. Am I still affected?
  • Possibly. The only preconditions for executing this attack (if the vulnerable modules are present) are that the unprivileged user must be able to create user namespaces, and read and execute any suid binary. If you are following defense-in-depth best practices, like running applications and services with the least privilege they require, this page cache vulnerability strips away a very important layer of defense: any compromise of software running in an unprivileged user account that allows an attacker to execute arbitrary code will now also allow privilege escalation to root. Therefore, even if your non-root user accounts have login shells disabled, it is strongly recommended to update.
• The only unprivileged Linux user accounts on my device are inside application containers. Am I affected?
  • Possibly. The page cache is shared across the host. Even a container can be affected by this vulnerability and result in a container escape primitive, not just LPE.

A security vulnerability (CVE-2026-31431) has been found in the Linux kernel that could be exploited to allow privilege escalation to root by any authorized user of the system who can (1) create sockets, and (2) have read and execute permissions on at least one setuid binary (e.g. sudo, fusermount, passwd). Any user account with shell access will generally meet these criteria. The attack does not require the attacker to have knowledge of the unprivileged user's password to execute; simply having control of an unprivileged local user account that can create sockets and execute at least one setuid binary is sufficient.

The vulnerability allows the page cache of a loaded binary to be arbitrarily changed, so it may have impact beyond privilege escalation: for example, an attacker could use this vector from inside a compromised container to corrupt the page cache for a file that is on a layer that is shared between containers, and it would be corrupted for all containers that use that layer. Similarly, if a file that was bind-mounted into the container from the host system was corrupted, it would also affect the host system's version of that file.

All versions of Linux kernel since 4.14.0, released in 2017, are affected. The vulnerability has patches available in upstream Linux kernel releases for all currently-supported branches, including 5.15 (patched in 5.15.204), 6.1 (patched in 6.1.170), and 6.6 (patched in 6.6.137).

Affected Versions​

All operating systems based on an affected kernel version, including Torizon OS 6 and Torizon OS 7 releases prior to May 2026 (6.0.0 - 6.8.7, 7.0.0 - 7.6.0) are affected by this vulnerability. On Torizon OS, CONFIG_CRYPTO_USER_API_AEAD is compiled as built-in, meaning the module cannot be disabled at runtime from userspace.

What Should I Do?​

Toradex is planning a patch release for both BSP 6 and BSP 7, as well as corresponding Torizon releases. We are currently completing our release testing, and these patch releases will be available very soon. You can sign up to be notified as soon as these releases are available using the Subscribe to Security Updates button at the top of this page.

Although this vulnerability is serious, in the context of most embedded devices it is only one link in an exploit chain. If your device has well-protected defenses against allowing users to execute arbitrary code, this vulnerability cannot be operationalized. Therefore, it may not merit an emergency out-of-band patch.

Torizon OS Users​

If you are using an affected version of Torizon OS, we recommend that you upgrade to these latest releases as soon as they are available. If you have a threat model and use case that indicates this vulnerability affects your device immediately, we recommend issuing an update that blacklists this subsystem on the kernel command line. Add initcall_blacklist=algif_aead_init to your kernel command line to enable this mitigation. See our documentation on customizing kernel arguments in Torizon OS for detailed instructions on how to do this.

Toradex BSP/Custom Yocto Linux Distribution Users​

The Toradex BSP layer does not automatically enable the userspace interface for AEAD cipher algorithms (CONFIG_CRYPTO_USER_API_AEAD is not set). However, if your custom Linux image is built with this config option set, you are likely affected. We recommend auditing your image and kernel config to determine if you have a vulnerable version, and patching/upgrading as soon as the updated BSP releases are available.

If you have a threat model and use case that indicates this vulnerability affects your device immediately, we recommend issuing an update that blacklists this subsystem on the kernel command line, or blacklists the kernel module if compiled as a module.

Q&A​

• I don't have any unprivileged Linux user accounts on my device. Am I still affected?
  • In principle, no. If you are absolutely certain that you do not have any unprivileged Linux user accounts, i.e. the only user on the device is root, you are not affected. However, note that most Linux distributions include the Name Service Switch, and allow users to be defined in places other than /etc/passwd, for example via nss-systemd. Check your /etc/nsswitch.conf file for all potential places where users may be defined, and/or run compgen -u to see the current list of defined users on your system.
• I don't allow shell access at all on my device. Am I still affected?
  • Possibly. The only preconditions for executing this attack are that the unprivileged user must be able to create and make use of an AF_ALG socket, and read and execute any suid binary. If you are following defense-in-depth best practices, like running applications and services with the least privilege they require, this page cache vulnerability strips away a very important layer of defense: any compromise of software running in an unprivileged user account that allows an attacker to execute arbitrary code will now also allow privilege escalation to root. Therefore, even if your non-root user accounts have login shells disabled, it is strongly recommended to update.
• The only unprivileged Linux user accounts on my device are inside application containers. Am I affected?
  • Possibly. The page cache is shared across the host. Even a container can be affected by this vulnerability and result in a container escape primitive, not just LPE.

What Is an Engineering Pre-release?​

An engineering pre-release provides early access to new silicon enablement and vendor-based BSP developments. It is closely aligned with SoC vendor BSPs (such as NXP) and differs from Preview and Stable releases by prioritizing early functionality over long-term stability.

Motivation​

The NXP i.MX95 is a new SoC, and therefore, the software support is evolving at a fast pace.

To get the latest improvements from NXP for AI workflows focused on the use of NPU acceleration, the latest NXP BSP is required.

Therefore, this engineering pre-release, based on the latest from NXP, enables you to develop your product leveraging the latest support for NPU hardware acceleration.

Intended Use and Lifecycle​

Learn more about the intended use and lifecycle in our Embedded Linux Support Strategy.

Highlights​

Latest support for i.MX95-based products:

• Latest software support for i.MX95 B0 Silicon, based on Linux 6.12

How to use it​

Read the NXP BSP Release News and User Guide to understand the features and limitations.

Follow the Build with Yocto Guide to build and test the Toradex BSP Layers and Reference Images for Yocto Project engineering pre-release.

Hardware Support​

Sample products: Aquila iMX95, Verdin iMX95, and SMARC iMX95 Due to the hardware status being "sample", this release is intended for development.

Have questions or feedback? We value your insights.

Join the discussion on our community forum to connect with other developers and share your thoughts on Toradex BSP Layers and Reference Images for Yocto Project Walnascar Engineering Pre-release.

Download Information

• The U-Boot, Linux kernel sources, and OpenEmbedded metadata are available at git.toradex.com. Learn how to build them on our Developer Website.

Torizon OS is our operating system that powers Torizon, a DevOps platform that simplifies the development and maintenance of embedded Linux software. Torizon OS is designed to be used out-of-the-box on devices requiring high reliability, allowing you to focus on your application instead of building and maintaining an operating system.

Torizon uses software containers, making it simple to add functionality to your system in a way that is both secure and easy to maintain. Torizon supports hardware acceleration in containers and graphical user interfaces.

Updates and Highlights​

Torizon OS​

• Distro updates:
  • Added support for Aquila iMX95
  • Add build-time info about the Secure Boot class (such as tdx-signed or torizon-signed) to the final image at /etc/buildinfo
• Bug Fixes:
  • Fixed an issue that made the build of the Yocto SDK fail for Torizon Minimal
  • Fixed splash screen not working on the native LVDS interface of Apalis iMX8QM
  • Fixed splash screen not working on any video interface on Verdin iMX95
  • Fixed splash screen not working on any video interface on SMARC iMX95
  • Fixed an issue that prevented devices from being updated via Torizon Cloud, due to Aktualizr reporting "Current versions in storage and reported by OSTree do not match"
  • Fixed boot problem on Apalis iMX6 and the Apalis Evaluation Board, by disabling the CONFIG_KERNEL_THUMB2 for this machine
• Updates from BSP 7.5.0:
  • Please also note that Torizon OS is built on top of the Toradex BSP Layers for the Yocto Project. Read the BSP Layers and Reference Images for Yocto Project release news to learn more.

Common Torizon​

• Distro updates:
  • Added NXP i.MX93 FRDM Board to meta-toradex-torizon. Get started on the NXP page Getting Started with FRDM-IMX93
  • Added Synaptics Astra SL2619 to meta-toradex-torizon. Get started on the page Synaptics Hardware Support
• Bug Fixes:
  • Fix build issue for x86 due to upstream builds moving from LZ4C to LZ4 kernel compression
  • Fix fw_printenv and fw_setenv commands not available for x86
  • Fix fw_printenv and fw_setenv commands not available for BeagleY-AI
  • Fix a TI container's incompatibility issue due to an incompatible driver DDK version on Texas Instruments EVMs and SKs on Common Torizon

Get started with Common Torizon hardware support.

Debian Packages and Containers​

Full release notes are published in the Torizon Containers repository: Torizon Containers Release Notes. Highlights:

• Containers:
  • Added support for the sl1680 platform, targeting the Luna SL1680 SBC
  • Added hardware-accelerated graphics rendering (GPU/OpenGL ES) for Luna SL1680
  • Added new .NET 10 containers for Torizon
  • Bumped .NET to 8.0.22 on the .NET 8 containers for Torizon

Intended Use​

The Torizon OS 7.5.0 Quarterly Release is a production-grade release.

Therefore, if you are in production with TorizonCore 5, Torizon OS 6 or earlier Torizon OS 7 releases, we recommend moving to this quarterly release. Learn more in the Torizon Upgrade Notes.

Hardware Support​

A quarterly release is a production release, intended to be used in a production environment only with volume products, as long as they are supported by Torizon OS. We run a set of tests to validate them. Learn more about our release types from our Embedded Linux Support Strategy.

• Volume products: Verdin AM62,Verdin iMX8M Plus, Verdin iMX8M Mini, SMARC iMX8M Plus, Apalis iMX8, Apalis iMX6, Colibri iMX6ULL 1GB, Colibri iMX6DL, and Colibri iMX7D 1GB, and Colibri iMX8
  • This release is intended to be used in production on these modules.
• Sample products: Aquila AM69, Aquila iMX95, SMARC iMX95, Verdin iMX95, and Verdin AM62P
  • Due to the hardware status being "sample", this release is intended for evaluation and development. Aquila AM69 support depends on the hardware revision as detailed in the dedicated article on developer center.
• Community products: Astra Machina SL1680, and Astra Machina SL2610 Dev Kit from Synatpics; i.MX93 FRDM Board from NXP; AM62L EVM, AM62P EVM, and AM62 EVK from Texas Instruments; BeagleY-AI from the BeagleBoard Foundation; Generic x86_64
  • Toradex runs a test suite for Torizon Cloud-related features on these boards and fixes critical bugs. Overall, Torizon support (including containers and IDE) varies for each platform. Contact us to learn more.

Please read the previous release news for updates that also apply to this release.

Updates and Highlights​

• Linux Kernel update
  • Update i.MX Linux downstream kernel
  • Update TI Linux downstream kernel
• Add support for Verdin iMX95 V1.0B, dropped support for V1.0A
• Add support for Aquila i.MX95
• Add support for 0221 Verdin AM62 Dual 1GB ET
• Bug fixes and product improvements

Hardware Support​

• Volume products: Aquila AM69, Verdin AM62, Verdin iMX8M Plus, Verdin iMX8M Mini, SMARC iMX8M Plus, Apalis iMX6, Apalis iMX8, Colibri iMX6, Colibri iMX6ULL, Colibri iMX7, and Colibri iMX8X
  • This release is intended to be used in production for these modules.
• Sample products: Aquila iMX95, Verdin iMX95, SMARC iMX95, and Verdin AM62P
  • Due to the hardware status of the sample products, this downstream-based release is intended for development.

Quarterly releases are production releases. We run a set of tests to validate them. Learn more about our release types from our Embedded Linux Support Strategy.

For more updates on this, see our Release Details.

Join the discussion on our community forum to connect with other developers and share your thoughts on Toradex BSP Layers and Reference Images for Yocto Project 7.4.0.

Download Information​

• You can install the pre-built evaluation Reference Images directly from our online Toradex Easy Installer feeds into the board. No download is required!
• Alternatively, you can download the images and BSP from the Linux Software page on our developer website.
• The U-Boot, Linux kernel sources, and OpenEmbedded metadata are available at git.toradex.com. Learn how to build them on our Developer Website.

Torizon OS is our operating system that powers Torizon, a DevOps platform that simplifies the development and maintenance of embedded Linux software. Torizon OS is designed to be used out-of-the-box on devices requiring high reliability, allowing you to focus on your application instead of building and maintaining an operating system.

Torizon uses software containers, making it simple to add functionality to your system in a way that is both secure and easy to maintain. Torizon supports hardware acceleration in containers and graphical user interfaces.

Updates and Highlights​

Torizon OS​

• Distro updates:
  • Add support for Verdin iMX95
• Device drivers included as a module:
  • Enable kernel config options for REALTEK WiFi chips on Torizon OS
• Introduce a D-Bus interface onto Aktualizr
  • This addition makes it possible for an application to gather end-user's consent before proceeding with the update, which may be required to fulfill the EU Cyber Resilience Act (CRA) requirements.
• RPCbind service is now disabled by default
• Bug Fixes:
  • Fixed Splash Screen not appearing on SMARC iMX8MP when using DSI-to-HDMI overlay
• Updates from BSP 7.4.0:
  • Please also note that Torizon OS is built on top of the Toradex BSP Layers for the Yocto Project. Read the BSP Layers and Reference Images for Yocto Project release news to learn more.

Common Torizon​

This is the first time we have a Common Torizon release. Its releases follows Torizon OS's version.

In this release, the following machines are supported:

• arm64
  • TI am62lxx-evm
  • TI am62pxx-evm
  • TI am62xx-evm
  • TI beagley-ai
• x86
  • intel-core-i7-64

You will be able to download the images from the Download Links page. To learn how to build the images, how to flash them to your board, and more, refer to the dedicated README file available on GitHub.

Debian Packages and Containers​

• New containers released for Aquila AM69, Verdin AM62P, Verdin iMX95 and SMARC iMX95 with GPU accelerated containers (Qt, Chromium, and Weston)

Intended Use​

The Torizon OS 7.4.0 Quarterly Release is a production-grade release.

Therefore, if you are in production with TorizonCore 5, Torizon OS 6 or earlier Torizon OS 7 releases, we recommend moving to this quarterly release. Learn more in the Torizon Upgrade Notes.

Hardware Support​

A quarterly release is a production release, intended to be used in a production environment only with volume products, as long as they are supported by Torizon OS. We run a set of tests to validate them. Learn more about our release types from our Embedded Linux Support Strategy.

• Volume products: Verdin AM62,Verdin iMX8M Plus, Verdin iMX8M Mini, SMARC iMX8M Plus, Apalis iMX6, Colibri iMX6ULL 1GB, Colibri iMX6DL, and Colibri iMX7D 1GB, and Colibri iMX8
  • This release is intended to be used in production on these modules.
• Sample products: Aquila AM69, SMARC iMX95 and Verdin iMX95
  • Due to the hardware status being "sample", this release is intended for evaluation and development. Aquila AM69 support depends on the hardware revision as detailed in the dedicated article on developer center.

Updates and Highlights​

• Linux Kernel update
  • Added support for Kernel address space layout randomization (KASLR)
  • Updated i.MX Downstream Linux Kernel To Version 6.6.101 (BSP7)
  • Update TI Downstream Linux Kernel To Version 6.6.106 (BSP7)
• Upgrade support for i.MX95-based products:
  • Added support for i.MX95 B0 Silicon
  • Added support for Verdin i.MX95
  • Dropped support for SMARC iMX95 V1.0
• Bug fixes and product improvements

Hardware Support​

• Volume products: Verdin AM62, Verdin iMX8M Plus, Verdin iMX8M Mini SMARC iMX8M Plus, Apalis iMX6, Apalis iMX8, Colibri iMX6, Colibri iMX6ULL, Colibri iMX7, and Colibri iMX8X
  • This release is intended to be used in production for these modules.
• Sample products: Aquila AM69, Verdin iMX95, Verdin AM62P, and SMARC iMX95
  • Due to the hardware status of the sample products, this downstream-based release is intended for development.

Quarterly releases are production releases. We run a set of tests to validate them. Learn more about our release types from our Embedded Linux Support Strategy.

For more updates on this, see our Release Details.

Updates and Highlights​

• Linux Kernel update
  • Update i.MX Downstream Linux Kernel To Version 6.6.94 (BSP7)
  • Update TI Downstream Linux Kernel To Version 6.6.94 (BSP7)
• Improve support for SMARC iMX95
  • Add support for U-Blox Maya W2 Wi-Fi/BT
• Added WPA3 Support
  • Verdin iMX8MM
  • Verdin iMX8M Plus
  • SMARC iMX8M Plus
  • Colibri iMX6ULL
• Improve Aquila AM69 support:
  • Fan controller PWM control based on SoC temperature on Aquila AM69
• Bug fixes and product improvements

Hardware Support​

• Volume products: Verdin AM62, Verdin iMX8M Plus, Verdin iMX8M Mini SMARC iMX8M Plus, Apalis iMX6, Apalis iMX8, Colibri iMX6, Colibri iMX6ULL, Colibri iMX7, and Colibri iMX8X
  • This release is intended to be used in production for these modules.
• Sample products: Aquila AM69, Verdin AM62P, and SMARC iMX95
  • Due to the hardware status of the sample products, this downstream-based release is intended for development.

Quarterly releases are production releases. We run a set of tests to validate them. Learn more about our release types from our Embedded Linux Support Strategy.

For more updates on this, see our Release Details.

Torizon OS is our operating system that powers Torizon, a DevOps platform that simplifies the development and maintenance of embedded Linux software. Torizon OS is designed to be used out-of-the-box on devices requiring high reliability, allowing you to focus on your application instead of building and maintaining an operating system.

Torizon uses software containers, making it simple to add functionality to your system in a way that is both secure and easy to maintain. Torizon supports hardware acceleration in containers and graphical user interfaces.

Updates and Highlights​

Torizon OS​

• Distro updates:
  • Security patch: CVE-2025-32463 (sudo) Torizon 7: any unprivileged user who can execute /usr/bin/sudo can also get root
  • Add the new Toradex SMARC iMX8M Plus, SMARC iMX95 and AM62P machines to Torizon
  • Implement bootloader updates on Verdin AM62
  • Allow signing bootloader artifacts with SRK2..4 on AHAB
  • Allow signing bootloader artifacts with SRK2..4 on HABv4
• Device drivers included as a module:
  • Enable kernel config CONFIG_SND_SOC_TLV320AIC32X4_I2C
  • Enable kernel config CONFIG_DRM_I2C_ADV7511
• Secure boot:
  • In-field Upgrades to Secure Boot on Torizon OS enabled
  • Production Programming Secure Boot with Torizon enabled
• Bug Fixes:
  • Fixed Aktualizr only allowing up to 999 versions of root metadata
  • Fixed Native LVDS splash screen not working in Verdin iMX8MP
  • Fixed Verdin iMX8MP: Splash screen not working in HDMI and DSI to HDMI using TOS 7.2.0
  • Fixed Building signed FIT image in Torizon OS failing to generate keys
  • Fixed Volatile logging broken in Torizon 7
  • Fixed Images built with the rootfs protection (i.e. torizon-signed class) failing to boot
  • Fixed AM62 Signed images failing to execute
  • Fixed Expected bootargs do not matching actual args on signed images (apalis-imx6, colibri-imx6, colibri-imx6ull)
  • Fixed Easy Pairing not working without display connected
  • Fixed Easy Pairing still showing the pair code after device is provisioned
• Updates from BSP 7.3.0:
  • Please also note that Torizon OS is built on top of the Toradex BSP Layers for the Yocto Project. Read the BSP Layers and Reference Images for Yocto Project release news to learn more.

Debian Packages and Containers​

• Debian Containers for Torizon:
  • Enabled Graphical Hardware Accelerated Containers on Verdin AM62P
• Bug Fixes:
  • Fixed WebGL content not accelerated on Chromium Container for Verdin AM62

Upcoming Features​

• Secure Boot images signing using TorizonCore Builder for i.MX-based SoMs

Intended Use​

The Torizon OS 7.3.0 Quarterly Release is a production-grade release.

Therefore, if you are in production with TorizonCore 5, Torizon OS 6 or earlier Torizon OS 7 releases, we recommend moving to this quarterly release.

Hardware Support​

A quarterly release is a production release, intended to be used in a production environment only with volume products, as long as they are supported by Torizon OS. We run a set of tests to validate them. Learn more about our release types from our Embedded Linux Support Strategy.

• Volume products: Verdin AM62,Verdin iMX8M Plus, Verdin iMX8M Mini, SMARC iMX8M Plus, Apalis iMX6, Apalis iMX8, Colibri iMX6ULL 1GB, Colibri iMX6DL, and Colibri iMX7D 1GB, and Colibri iMX8
  • This release is intended to be used in production on these modules.
• Sample products: Aquila AM69, Verdin AM62P, and SMARC iMX95 Plus
  • Due to the hardware status being "sample", this release is intended for evaluation and development.

Updates and Highlights​

• Linux Kernel update
  • Update i.MX Downstream Linux Kernel To Version 6.6.84
• New product support:
  • Added SMARC iMX95 support
  • Added SMARC iMX8M Plus support
  • Added Verdin AM62P support
• Improve Aquila Development Board Support
  • Add DMIC Support
• Bug fixes and product improvements

Hardware Support​

• Volume products: Verdin AM62, Verdin iMX8M Plus, Verdin iMX8M Mini, SMARC iMX8M Plus, Apalis iMX6, Apalis iMX8, Colibri iMX6, Colibri iMX6ULL, Colibri iMX7, and Colibri iMX8X
  • This release is intended to be used in production for these modules.
• Sample products: Aquila AM69, Verdin AM62P and SMARC iMX95
  • Due to the hardware status of the sample products, this downstream-based release is intended for development.

Quarterly releases are production releases. We run a set of tests to validate them. Learn more about our release types from our Embedded Linux Support Strategy.

For more updates on this, see our Release Details.

Torizon OS is our operating system that powers Torizon, a DevOps platform that simplifies the development and maintenance of embedded Linux software. Torizon OS is designed to be used out-of-the-box on devices requiring high reliability, allowing you to focus on your application instead of building and maintaining an operating system.

Torizon uses software containers, making it simple to add functionality to your system in a way that is both secure and easy to maintain. Torizon supports hardware acceleration in containers and graphical user interfaces.

Updates and Highlights​

Torizon OS​

• Device drivers included as a module:
  • Enable the ST LSM6DSx IMU MEMS series on Torizon 7
  • Enable the Maxim MAX3191X industrial interface serializer on Torizon 7
• Improved Secure Boot and Fuse Management
  • Add support for pushing fuse-type packages to Torizon Cloud on TorizonCore Builder, enabling in-field secure boot provisioning.
  • Adapt the U-Boot command whitelisting configuration to allow fusing at scale
  • Together, these features simplify migration to secure boot-enabled devices.
• Bug Fixes:
  • Fix the Auto-provisioning reliability to power-cuts
  • Fix Aquila AM69 not booting due to 'Error: "bootcmd_mmc0" not defined'
  • Fix Access Point not working on Aquila AM69
  • Fix Verdin AM62 Torizon OS rollback failing
  • Fix U-Boot self-overwrite protection is not working on some machines (secure boot-enabled images only)
• Updates from BSP 7.2.0:
  • Please also note that Torizon OS is built on top of the Toradex BSP Layers for the Yocto Project. Read the BSP Layers and Reference Images for Yocto Project release news to learn more.

Debian Packages and Containers​

• Debian Containers for Torizon:
  • Rebuild all containers against the Debian 12.10 point release
  • Minor fixes

Hardware Support​

A quarterly release is a production release, intended to be used in a production environment only with volume products, as long as they are supported by Torizon OS. We run a set of tests to validate them. Learn more about our release types from our Embedded Linux Support Strategy.

• Volume products: Verdin AM62,Verdin iMX8M Plus, Verdin iMX8M Mini, Apalis iMX6, Apalis iMX8, Colibri iMX6ULL 1GB, Colibri iMX6DL, and Colibri iMX7D 1GB, and Colibri iMX8X
  • This release is intended to be used in production on these modules.
• Sample products: Aquila AM69
  • Due to the hardware status being "sample", this release is intended for evaluation and development.

Affected Versions​

All Torizon OS 6 and Torizon OS 7 releases prior to June 30, 2025 (6.0.0 - 6.8.2, 7.0.0 - 7.2.0) are affected by this vulnerability.

What Should I Do?​

Torizon OS Users​

Torizon OS 6.8.3 and Torizon OS 7.3.0, published July 25 2025, both contain fixed versions of sudo and have been verified not to be vulnerable. If you are using an affected version of Torizon OS, we strongly recommend that you upgrade to these latest releases.

As of the publication date of this security notice, the release notes for these Torizon versions are not yet published. However, they are available both in Torizon Cloud and in the Toradex Easy Installer feeds.

Toradex BSP/Custom Yocto Linux Distribution Users​

The default Toradex BSP Reference Images (Minimal and Multimedia) are not affected, as they do not include the sudo binary, and create by default only the root user. However, if your custom Linux image is built based on Kirkstone or Scarthgap Yocto releases (Toradex BSP version 6 or 7) and you have included sudo in your custom image, you are probably affected. We recommend auditing your image to determine if you have a vulnerable version, and patching/upgrading as soon as possible. The Kirkstone and Scarthgap branches of the Yocto Project meta-openembedded Layer have been updated as of July 16, 2025 with fixed versions of sudo.

Q&A​

• I don't have any unprivileged Linux user accounts on my device. Am I still affected?
  • In principle, no. If you are absolutely certain that you do not have any unprivileged Linux user accounts, i.e. the only user on the device is root, you are not affected. However, note that most Linux distributions include the Name Service Switch, and allow users to be defined in places other than /etc/passwd, for example via nss-systemd. Check your /etc/nsswitch.conf file for all potential places where users may be defined, and/or run compgen -u to see the current list of defined users on your system.
• I don't allow shell access at all on my device. Am I still affected?
  • Possibly. The only preconditions for executing this attack are that the unprivileged user must be able to run the sudo binary and write files on the device. If you are following defense-in-depth best practices, like running applications and services with the least privilege they require, this sudo vulnerability strips away a very important layer of defense: any compromise of software running in an unprivileged user account that allows an attacker to execute arbitrary code will now also allow privilege escalation to root. Therefore, even if your non-root user accounts have login shells disabled, it is strongly recommended to update.
• The only unprivileged Linux user accounts on my device are inside application containers. Am I affected?
  • With respect to the containerized software, probably not. Containers provide significant isolation and protection against this type of vulnerability. Exploiting this vulnerability would require first escaping the container and gaining access to the host system. However, it is still strongly recommended to update your base OS as a defense-in-depth precaution. Note your container image might itself include a vulnerable sudo binary; we recommend auditing your container's SBOM to verify whether this is the case. Debian Containers for Torizon are based on Debian stable releases, which do not contain a vulnerable version of sudo.
• I have a custom Linux based on the Toradex BSP reference image, and it includes sudo. If I update to the 7.3.0 or 6.8.3 tag in the Toradex manifest repo, will those tags include the fixed sudo as well?
  • No. The fixes for 7.3.0 and 6.8.3 are backported into the Torizon OS layer, meta-toradex-torizon. If you are building a custom image, you will need to either backport the fix yourself, from the openembedded-core commits referenced above, or bump the openembedded-core layer to include those commits. The manifest for BSP 7.3.0 and 6.8.3 uses an openembedded-core version that does not contain the fix.

Torizon OS is our operating system that powers Torizon, a DevOps platform that simplifies the development and maintenance of embedded Linux software. Torizon OS is designed to be used out-of-the-box on devices requiring high reliability, allowing you to focus on your application instead of building and maintaining an operating system.

Torizon uses software containers, making it simple to add functionality to your system in a way that is both secure and easy to maintain. Torizon supports hardware acceleration in containers and graphical user interfaces.

Updates and Highlights​

Torizon OS​

• Distro updates:
  • Scarthgap set as the default branch on meta-toradex-torizon
  • Instructions on how to upgrade from Torizon 6 to 7 are available
  • Lockbox count limit increased from ~300 to ~4800
  • Remote Access Client data usage when idle is reduced as the application changed from HTTP polling to MQTT on the default Torizon OS configuration
• Device drivers included as a module:
  • Enable the Microchip12-Bit, Quad Digital-to-Analog Converter with EEPROM Memory MCP4728
  • Enable kernel config option for MediaTek MT7921U (USB) support
• Easier evaluation for Aquila AM69:
  • Add Torizon OS Easy Pairing image for Aquila AM69
• Secure boot:
  • BCoT (and implicitly also the ECoT) is available for Verdin AM62
  • Docs updated so users can learn how to build ECoT signed images
  • A transition path from BCoT to ECoT is possible (public documentation coming soon)
  • Mechanism to programmatically set fuses for HAB/AHAB implemented (support on TCB coming soon)
• Encryption:
  • Data-at-rest encryption with TEZI data partition
• Bug Fixes:
  • Fixed the Apalis iMX8 boot loop that prevented this SoM from being released on 7.0.0
  • Fixed an issue where offline updates failed with the error "could not write content to file"
  • Fixed Easy Pairing high usage of one CPU core
  • Fixed Easy Pairing crashing when provisioning a board to the Torizon Cloud
  • Fixed OS Rollback not working on Verdin AM62 and Aquila AM69
  • Fixed CONFIG_DM_CRYPT missing in Torizon OS 7
  • Fixed Hibernation missing on Auto Provisioning script
  • Fixed Torizon Easy Pair view crashing during the provisioning success
• Updates from BSP 7.1.0:
  • Please also note that Torizon OS is built on top of the Toradex BSP Layers for the Yocto Project. Read the BSP Layers and Reference Images for Yocto Project release news to learn more.

Debian Packages and Containers​

• Debian Containers for Torizon:
  • Overall documentation for Torizon 7 has been updated
  • Enable GPU graphics rendering for Verdin AM62 based on the TI AM625 SoC (internal note: the TI AM623 don't have a GPU)
  • Release HW-accelerated Weston for Apalis iMX8 and Colibri iMX8X
  • Qt 6 support on Torizon OS 7 concluded
  • Release HW-accelerated Chromium for NXP downstream devices (iMX8 and iMX95)
  • Enable support for XWayland on iMX8 devices (NXP doesn't support HW-acceleration, therefore it is SW-rendered)
  • Make it possible to pass user parameters when starting Chromium
• Bug Fixes:
  • Fixed Weston not working on the native HDMI on Verdin iMX8M Plus
  • Fixed a bug that prevented Qt 6 packages from being installed due to Vulkan compatibility issues on iMX8 SoMs

Upgrade from Torizon OS 6 to 7 possible​

• Upgrade from Torizon OS 6 to Torizon OS 7 using Torizon Remote Updates is now possible.
  • To upgrade to Torizon OS 7, all users will need to first upgrade to the latest quarterly release of Torizon OS 6.
  • The workflow looks as follows:
    • Older Torizon OS → Torizon OS 6.8.0 or newer → Bootloader update → Torizon OS 7.0.0 or newer
    • Learn more on the Upgrade Instructions

Upcoming Features​

• Fusing at scale for i.MX-based SoMs

Intended Use​

The Torizon OS 7.1.0 Quarterly Release is a production-grade release.

Therefore, if you are in production with TorizonCore 5, Torizon OS 6 or earlier Torizon OS 7 releases, we recommend moving to this quarterly release. Learn more in the Torizon Upgrade Notes.

Hardware Support​

A quarterly release is a production release, intended to be used in a production environment only with volume products, as long as they are supported by Torizon OS. We run a set of tests to validate them. Learn more about our release types from our Embedded Linux Support Strategy.

• Volume products: Verdin AM62,Verdin iMX8M Plus, Verdin iMX8M Mini, Apalis iMX6, Colibri iMX6ULL 1GB, Colibri iMX6DL, and Colibri iMX7D 1GB, and Colibri iMX8
  • This release is intended to be used in production on these modules.
• Sample products: Aquila AM69
  • Due to the hardware status being "sample", this release is intended for evaluation and development.

Updates and Highlights​

• Linux Kernel update
  • Experimental Upstream images for Verdin AM62 and Verdin iMX8M Plus updated to Linux v6.12
• Improve Aquila AM69 support:
  • Add support for Clover Carrier Board
  • Add support for Wi-Fi/BT
  • Add support for USB_2
• Improve Camera support
  • Add out-of-the-box support for Arducam 5MP OV5640 Camera

Hardware Support​

• Volume products: Verdin AM62, Verdin iMX8M Plus,Apalis iMX6, Apalis iMX8, Colibri iMX6, Colibri iMX6ULL, Colibri iMX7, Colibri iMX8X, and Verdin iMX8M Mini
  • This release is intended to be used in production for these modules.
• Sample products: Aquila AM69
  • Due to the hardware status of the sample products, this downstream-based release is intended for development.

Quarterly releases are production releases. We run a set of tests to validate them. Learn more about our release types from our Embedded Linux Support Strategy.

For more updates on this, see our Release Details.

Torizon OS is our operating system that powers Torizon, a DevOps platform that simplifies the development and maintenance of embedded Linux software. Torizon OS is designed to be used out-of-the-box on devices requiring high reliability, allowing you to focus on your application instead of building and maintaining an operating system.

Torizon uses software containers, making it simple to add functionality to your system in a way that is both secure and easy to maintain. Torizon supports hardware acceleration in containers and graphical user interfaces.

Updates and Highlights​

Torizon OS​

This is the first regular release for the Torizon 7 series. According to our Embedded Linux Lifecycle and Releases, Torizon 6 has transitioned from active to maintenance, and Torizon 7 is the only currently active series.

• Distro updates:
  • NetworkManager disabled on Wi-Fi Access Point (AP) interfaces, being Hostapd the only supported solution moving forward
  • Change the CPU frequency tool from cpufrequtils to cpupower
  • CROPS container updated so Torizon OS 7 can be easily built from source
  • Disable Aktualizr data-proxy in Torizon OS 7
  • Implement MQTT Client on Torizon OS to reduce the internet data consumption of the Torizon Remote Access Client.
• Device drivers included as a module:
  • Enable support for the Texas Instruments DP83867 Gigabit Ethernet PHY on Torizon OS 6
  • Add the NXP kernel-module-isp-vvcam to downstream images of Verdin iMX8M Plus so the kernel-space portion of the Image Signal Processor (ISP) is supported in Torizon OS
  • Enable IIO High Resolution Timer Trigger on Torizon OS
  • Enable kernel config option for "Watchdog device controlled through GPIO-line"
• Updates from BSP 7.0.0:
  • Please also note that Torizon OS is built on top of the Toradex BSP Layers for the Yocto Project. Read the BSP Layers and Reference Images for Yocto Project release news to learn more.

Debian Packages and Containers​

• Debian Containers for Torizon:
  • Debian Containers for Torizon 7, including headless and GUI containers, available on tag 4:
    • Upstream-based containers: With the exception of Cog, Chromium and QT6 containers, all others are tested and ready to be used with Torizon 7.
    • iMX8-based containers: With the exception of Cog, Chromium and QT6 containers, all others are tested and ready to be used with Torizon 7 with the following limitations:
      • torizon/weston-imx8:
        • Does not have 2D acceleration enabled via NXP's g2d library on Colibri iMX8X;
        • Does not have remote desktop available (VNC or RDP);
        • XWayland support is disabled;
        • Weston does not show content on Verdin iMX8MP on native HDMI interface.
    • AM62-based containers: still not available
  • Make it possible to pass user parameters when invoking Chromium Container
  • Create a more generic dotnet-wayland container to replace the dotnet-uno one

Upgrade from Torizon OS 6 to 7 possible​

• Upgrade from Torizon OS 6 to Torizon OS 7 using Torizon Remote Updates is now possible.
  • To upgrade to Torizon OS 7, all users will need to first upgrade to the latest quarterly release of Torizon OS 6.
  • The workflow looks as follows:
    • Older Torizon OS → Torizon OS 6.8.0 or newer → Bootloader update → Torizon OS 7.0.0 or newer
    • Learn more on the Upgrade Instructions

Upcoming Features​

• Being the first quarterly release of the series, some features are still coming:
  • Browser containers for Chromium and Cog
  • Touch calibrator container
  • QT6 containers
  • Samples are still based on Debian Containers for Torizon 6
  • On Colibri iMX8X, graphics are not hardware accelerated with NXP's g2d
  • Apalis iMX8 support has not been released, for development you can use the previous monthly 7.0.0-devel-202409 pre-release or upcoming monthly pre-releases.
  • IDE Templates for Torizon 7 are work in progress, and will be released anytime between 7.0.0 and the upcoming 7.1.0 OS release

Intended Use​

The Torizon OS 7.0.0 Quarterly Release is a production-grade release.

Therefore, if you are in production with TorizonCore 5 or earlier Torizon OS 6 releases, we recommend moving to this quarterly release. Learn more in the Torizon Upgrade Notes.

Hardware Support​

A quarterly release is a production release, intended to be used in a production environment only with volume products, as long as they are supported by Torizon OS. We run a set of tests to validate them. Learn more about our release types from our Embedded Linux Support Strategy.

• Volume products: Verdin AM62,Verdin iMX8M Plus, Verdin iMX8M Mini, Apalis iMX6, Colibri iMX6ULL 1GB, Colibri iMX6DL, and Colibri iMX7D 1GB, and Colibri iMX8
  • This release is intended to be used in production on these modules.

Torizon OS is our operating system that powers Torizon, a DevOps platform that simplifies the development and maintenance of embedded Linux software. Torizon OS is designed to be used out-of-the-box on devices requiring high reliability, allowing you to focus on your application instead of building and maintaining an operating system.

Torizon uses software containers, making it simple to add functionality to your system in a way that is both secure and easy to maintain. Torizon supports hardware acceleration in containers and graphical user interfaces.

This release includes all updates from the previous 6.x.y TorizonCore releases.

Updates and Highlights​

Torizon OS​

• This is the last release with new features for the Torizon 6 series. According to our Embedded Linux Lifecycle and Releases, Torizon 6 has transitioned from active to maintenance.
• Concurrently, we have been working on Torizon 7 - the current active release - and the first quarterly 7.0.0 is available. Learn more on the Torizon OS 7.0.0 release notes.
• Torizon Cloud Support Update: Added support for Production Provisioning Devices in Hibernation Mode
• Torizon OS Network Support Update: NetworkManager disabled on Wi-Fi Access Point (AP) interfaces, being Hostapd the only supported solution moving forward
• Device drivers included as a module:
  • Enable support for the Texas Instruments DP83867 Gigabit Ethernet PHY on Torizon OS 6
  • Add the NXP kernel-module-isp-vvcam to downstream images of Verdin iMX8M Plus so the kernel-space portion of the Image Signal Processor (ISP) is supported in Torizon OS
  • Enable IIO High Resolution Timer Trigger on Torizon OS
  • Enable kernel config option for "Watchdog device controlled through GPIO-line"
• Important bug fixes:
  • Error in initial call to auto-provisioning causes a 5 min delay before it takes effect
  • Devices could get stuck in Emergency/Rescue Mode
  • Docker-compose updates failed with "Failed to update Image repo metadata: Version in Root metadata does not match its expected value."
  • Hostname not set on Avahi during first boot
  • Easy Pairing using 100% of one CPU core
• Community
  • Package Feed for Common Torizon OS images available - customers can now test OS Updates on community boards

Debian Packages and Containers​

• Debian Containers for Torizon:
  • All containers rebuilt against the Debian 12.7 point release
• Community:
  • Base Debian Containers for x86_64, so users can develop projects for x86 the same way as with Torizon HW
  • Get easy access to Torizon Updates and Remote Access on Ubuntu and Debian Systems
    • Release full-featured Aktualizr Debian package - meant to be installed on Debian and Ubuntu systems
    • Release full-featured Torizon Remote Access (RAC) Debian package - meant to be installed on Debian and Ubuntu systems
    • Update script to install Aktualizr and RAC on Ubuntu and Debian systems

Intended Use​

The Torizon OS 6.8.0 Quarterly Release is a production-grade release.

Therefore, if you are using TorizonCore 5 or earlier Torizon OS 6 releases and it is not possible to migrate to Torizon OS 7, we recommend moving to this quarterly release.

Hardware Support​

A quarterly release is a production release, intended to be used in a production environment only with volume products, as long as they are supported by Torizon OS. We run a set of tests to validate them. Learn more about our release types from our Embedded Linux Support Strategy.

• Volume products: Verdin AM62, Verdin iMX8M Plus, Verdin iMX8M Mini, Apalis iMX6, Apalis iMX8, Colibri iMX6ULL 1GB, Colibri iMX6DL, and Colibri iMX7D 1GB, and Colibri iMX8
  • This release is intended to be used in production on these modules.