Oracle Linux is an enterprise server distribution that costs nothing to obtain and nothing to run. Version 10.2 is the current release as of 2026-09, updated in the middle of 2026. Nothing in the licence demands a subscription: the software may be used freely and redistributed freely, and an organisation can operate it entirely on its own. Commercial support is a separate purchase, taken when it is wanted rather than as the price of entry.

A kernel tuned for work that moves a lot of data

The default kernel is UEK 8, the eighth generation of the Unbreakable Enterprise Kernel, built on the 6.12 long-term line. It is tuned for loads that shift a great deal of data and do a great deal of arithmetic: memory management, the XFS and Btrfs file systems, and the network stack all take upstream work rather than sitting frozen. The kernel team behind it has stayed among the larger contributors to the Linux community for years, and most of what goes into UEK is pushed back to the mainline instead of kept. Where strict parity with the wider enterprise ecosystem is required, a second kernel is available, one compatible with Red Hat, and moving between the two is a setting rather than a rebuild.

Binary compatibility, and what it buys

Oracle Linux 10 keeps full application binary compatibility with RHEL 10, which in practice means an application compiled for RHEL runs here without being recompiled. The company is also a founding member of OpenELA, an alliance that maintains publicly available enterprise Linux source code. For a customer the two facts add up to a low cost of migration and an ecosystem that behaves the way the rest of the estate expects, without a single supplier holding the exit.

The security work in this release

Three changes matter. OpenSSH has been hardened: keystroke obfuscation resists side-channel observation, key forwarding restrictions have been widened, and the SSH daemon itself was re-architected to shrink the attack surface. Post-quantum cryptography arrives as a technical preview, with next-generation algorithms including ML-KEM available for testing well before they are needed in production. And Ksplice, bundled with the Premier support tier, patches the kernel and critical user-space components such as glibc and OpenSSL while the system keeps running, so a security fix no longer implies a maintenance window.

A toolchain that is no longer old

The compiler toolchain moved forward with GCC updates that improve diagnostics and hardening options. A high-performance in-memory key-value store, Valkey, is included and stays compatible with common Redis configurations, so applications move across without noticing. The Python, .NET and Node.js runtimes all carry performance and feature updates, and DTrace ships with the system for dynamic tracing, which is what makes a production problem diagnosable without first reproducing it on a test machine.

Who it suits

Three groups, roughly. Organisations that want enterprise-grade server software at zero licence cost and refuse to give up the option of paid support later, which is exactly the shape on offer. Teams running data-heavy loads, databases above all, where a kernel tuned for memory, file systems and the network is worth more than a familiar name. And shops that already run RHEL-compatible fleets and want a second source without rewriting a build pipeline.

The free part is easy to state and easy to doubt. What makes it credible here is that the kernel work is public, the compatibility claim is checkable, and the paid tier sells operations rather than permission.

The combination is unusual in this part of the market: no licence cost, public source, and a paid relationship that covers operations rather than access. An organisation can therefore start on its own, learn the system with no invoice attached, and only afterwards decide whether support is worth buying. Software first, contract later, is the real argument for a distribution of this kind.