Kali Linux 2026.3 Release (Build-Scripts Refresh)

Key points

Kali Linux 2026.3, the third release of 2026, is available. It brings reworked build-scripts that can run in a container, KDE Plasma 6.7, new icons, six new tools, a kernel update from 6.19 to 7.1.5, and new NetHunter features and device kernels.

Build-scripts

• The public scripts behind the official images now share the same features, command-line arguments, structure and look across platforms where possible.
• Each refreshed script includes build-in-container.sh, which detects Docker or Podman, creates a build container and runs the build in it. Kali no longer has to be built on Kali.
• The documentation for building on Debian-based systems has been improved.
• The rework is still in progress and has broken some CI pipelines and workflows.
• Not every script was refreshed for this release. The remaining ones are targeted for 2026.4, followed by automated builds and examples of different setups and customizations.

Building the installer image

• With default options, build.sh produces a kali-rolling amd64 installer ISO. ./build.sh --help and the README list every option.

sudo apt install git ca-certificates
git clone https://gitlab.com/kalilinux/build-scripts/kali-installer.git
cd ./kali-installer/
sudo apt install simple-cdd debian-cd cpio mtools dosfstools xorriso
sudo ./build.sh

• To build in a container instead of installing the dependencies on the host:

sudo apt install podman
sudo ./build-in-container.sh

• Examples that set the hostname, add packages, or choose another branch, variant or architecture:

sudo ./build.sh --hostname haxbox --packages rustscan
sudo ./build.sh --branch kali-dev --variant netinst --arch arm64

Desktop and website

• KDE Plasma 6.7 brings:
• per-screen virtual desktops and quicker switching between desktops from Overview
• support for more Wayland protocols and portals
• performance and power improvements, notably on integrated Intel GPUs and with several full-screen windows
• network connections that can be duplicated
• System Monitor refinements
• Tools that had no icon now have one, and existing icons were reworked so they are easier to recognise in the menu and on kali.org/tools.
• kali.org/tools now uses the menu categories and icons introduced in 2025.2. The Top 100 page is still available.

New tools and packages

• dalfox: XSS scanner.
• katana: crawler and spider.
• qsreplace: rewrites query-string values in URLs read from stdin.
• rustscan: port scanner.
• sdrangel: Qt SDR front-end.
• snaffler-ng: scans SMB shares for credentials and sensitive data.
• The release contains 126 package updates, including the kernel move from 6.19 to 7.1.5.

NetHunter

• Modern systemd/udev now works with older kernels without extensive patching.
• Wardriving works on the TicWatch Pro 3 series. An updated libnexmonkali from Qazy Anwar provides internal monitor mode for tools in the chroot such as aircrack-ng and kismet.
• WearHunter (experimental, by @V0lk3n) controls the watch from a phone over ADB via Wi-Fi or Bluetooth. It can run commands and install apps.
• NFC Arsenal (@IamCOD3X) gives the chroot NFC access, so Mifare Classic cards can be read, cloned and edited without an external adapter.
• KernelSU is supported (@Loukious): the generated installer zip can be installed in the KernelSU app with a patched kernel.
• Smaller fixes and changes:
• TicWatch Pro 3 reboot fixed.
• Initial support for devices without a ramdisk.
• Bluetooth Arsenal airplane mode is back.
• EvilTwin and Wardriving are easier to launch.
• Custom commands support Nexmon monitor mode and wifite.
• A crash on the app's storage request is fixed.
• New kernels:
• Google Pixel (LineageOS 22.2 / Android 15)
• Huawei P9 (EMUI8 / LineageOS 16.0)
• LG K20 Plus (LineageOS 14.1)
• Moto G Stylus 5G 2022 (LineageOS 23.2)
• Nubia Z17 (LineageOS 22.2)
• POCO X5 5G / Redmi Note 12 5G (crDroid 12)
• Redmi Note 5 Pro (LineageOS 18.1)
• Sony Xperia 10 V (LineageOS 23.2)
• Ulefone Armor 34+ (Android 16)

Documentation and mirrors

• Three new documentation pages: extracting vendor firmware for mainline Linux, importing a pre-made QEMU VM, and NetHunter EvilTwin.
• Nine pages were updated, among them Live USB persistence, Raspberry Pi full disk encryption, mirror setup and SSH configuration.
• Four new mirrors, all in Europe:
• mirror.hacker.nl (Netherlands)
• mirror.netone.nl (Netherlands)
• mirror.randhost.com (Portugal)
• kalimirror.velden.media (Switzerland)

How to upgrade

• Fresh images are on the download page.
• Weekly builds are also available. They are automated and do not go through release QA.
• To upgrade an existing install, run the commands below in order. They set the APT source, run a full upgrade, copy the default files from /etc/skel into your home directory with backups, and reboot if required:

sudo tee /etc/apt/sources.list.d/kali.sources << 'EOF'
Types: deb
URIs: http://http.kali.org/kali/
Suites: kali-rolling
Components: main contrib non-free non-free-firmware
Signed-By: /usr/share/keyrings/kali-archive-keyring.gpg
EOF
sudo apt update && sudo apt -y full-upgrade
cp -vrbi /etc/skel/. ~/
[ -f /var/run/reboot-required ] && sudo reboot -f

• Afterwards, grep VERSION /etc/os-release should report 2026.3.
• uname -r shows 7.1.5+kali-amd64 on amd64; the output differs on other architectures.
• Bugs go to the Kali bug tracker, not to social networks.

Summary by DistroNews, based on the original post.