Average router firmware runs open-source code over five years old

Even after installing the latest firmware, consumer routers rely on outdated open-source components: Linux 4.x and early 5.x kernels, old dnsmasq, BusyBox, iptables and OpenSSL. The cause is closed-source binary drivers and BSPs from Broadcom, Qualcomm and MediaTek that vendors do not port to modern kernels.

• Linux kernels on current Wi-Fi 6 routers lost mainstream support years ago
• Vendors depend on binary drivers from Broadcom, Qualcomm and MediaTek
• Critical vulnerability patches can take months to arrive
• OpenWrt and Asus WRT-Merlin offer an alternative