News › security

Fedora 46 to Default x86_64 Shadow Stack, Delayed from Fedora 45 Release

By Zayden R., July 31, 2026

Fedora's plan to enable x86_64 Shadow Stack by default has been approved but postponed to Fedora 46. This decision allows more time to address compatibility with NVIDIA drivers and PyPi Python wheels.

Fedora's Engineering and Steering Committee (FESCo) has approved the proposal to enable x86_64 Shadow Stack support by default, but the feature will now debut in Fedora 46, not Fedora 45 as initially planned. This decision gives developers additional time to ensure compatibility with NVIDIA drivers and PyPi Python wheels, both of which require adjustments to work seamlessly with Shadow Stack.

Shadow Stack technology, supported by modern Intel and AMD CPUs, is a hardware-enforced security measure aimed at mitigating Return-Oriented Programming (ROP) exploits. By enabling this feature, Fedora aims to bolster the security of applications and libraries compiled with GCC, LLVM Clang, or Rustc by default on x86_64 systems. The dynamic linker or static startup routines will activate Shadow Stack for any process where the necessary support is present in the binary and its shared library dependencies.

The shift of this feature to Fedora 46, slated for release next spring, underscores the Fedora Project's commitment to delivering robust and secure computing environments without compromising compatibility. For system administrators and developers, this means a smoother integration process and less friction when deploying software updates that rely on these security enhancements.

As Fedora 46 approaches, engineers should prepare by ensuring their systems are ready for Shadow Stack support. This could involve testing existing applications for compatibility and keeping abreast of updates related to NVIDIA and PyPi Python wheel support.

While the delay might seem like a setback, it reflects a cautious and methodical approach to implementing significant changes that have wide-reaching implications. Fedora users can look forward to a more secure operating environment with the upcoming release, knowing that the groundwork is being laid meticulously.

Sources

Practice this on a real machine

The Linux Camp teaches these topics as hands-on labs on real virtual machines, verified as you type.