News › linux

SystemTap 5.6 Released with BPF LSM Hooks and Multithreaded Speedups

By Zayden R., September 19, 2026

SystemTap 5.6 has been released, introducing BPF LSM hooks and multithreaded speedups. Engineers now have access to enhanced tracing capabilities and improved performance on Linux 7.2 systems.

Version 5.6 of SystemTap, the dynamic tracing tool for Linux, has been released, bringing a host of new features and improvements that engineers will find valuable. This release includes BPF LSM hooks, XDP packet-processing probes, and multithreaded speedups, all of which are designed to enhance tracing and performance on modern Linux systems.

For those working with the --bpf runtime, the addition of BPF LSM hooks and XDP packet-processing probes offers new ways to monitor and trace system behavior. These enhancements provide deeper insights into system operations, which can be crucial for debugging and performance tuning. Furthermore, the introduction of BTF-based kernel.tracepoint probes and statement execution tracing adds a layer of granularity to the tracing process, allowing engineers to pinpoint issues with greater accuracy.

The release also features a new @enumname() operator and richer runtime error context, making it easier to identify and resolve runtime errors. The integration of dyninst hardware watchpoints further bolsters SystemTap's capabilities, allowing for more effective monitoring of hardware-level events.

SystemTap 5.6 also brings modern systemd service templates and broad compatibility with Linux 7.2, ensuring that it integrates smoothly into contemporary Linux environments. Multithreaded speedups have been implemented throughout, promising improved performance and responsiveness, especially in systems with heavy tracing loads.

For sysadmins and developers eager to explore these new features, SystemTap 5.6 is available for download from the project's page at sourceware.org. With around 260 commits and numerous bug fixes since the last release, this version is a solid improvement that promises to enhance the tracing and monitoring experience for Linux engineers.

Sources

Courses