[BUG]: Kali Linux OS corrupt, SHA256 has does not match.

[Ricstrasz]

What happened?

I have the Raspberry Pi Imager v2.0.7
When trying to load Kali Linux

I got the error "Download appears to be corrupt. SHA256 has does not match."
Image

This can be reproduced every time when choose Kali Linux

Version

2.0.7 (Default)

What host operating system were you using?

Windows

Host OS Version

25H2

Selected OS

Kali

Which Raspberry Pi Device are you using?

Raspberry Pi 5, 500, and Compute Modules 5

What kind of storage device are you using?

microSD Card in a USB reader

OS Customisation

• Yes, I was using OS Customisation when the bug occurred.

Relevant log output

[lurch]

This appears to be a bug on the Kali Linux side of things, rather than the RPi Imager side of things.
https://www.kali.org/rpi-imager.json (which gets automatically ingested into https://downloads.raspberrypi.com/os_list_imagingutility_v4.json ) claims that https://artifacts.kali.org/images-arm/kali-daily/kali-linux-daily-dev-raspberry-pi-arm64.img.xz has sha256sum 64899da1c22d6f896ce5a9fc8b73ec43f5b318813783da0caedd6b4f4a436bd2, but if I download that file myself it has sha256sum df4133e6a37bd41ee0957f9159263abfb42246b742b26696bb1709d5707fa846.
And after extracting the archive, the kali-linux-daily-dev-raspberry-pi-arm64.img file has sha256sum fefb595a86fa9afd20e6fb3cf9bc8647daa95e3bac0245ff5a6376a47079831f whilst https://www.kali.org/rpi-imager.json claims it should be 6e408c99b8e2540aab43a01333d2466d942dbff37c5c3727acf313566852dfc6.
And wget --spider --server-response https://artifacts.kali.org/images-arm/kali-daily/kali-linux-daily-dev-raspberry-pi-arm64.img.xz reports Last-Modified: Wed, 08 Apr 2026 09:23:12 GMT which is clearly newer than the "release_date": "2026-03-24" that https://www.kali.org/rpi-imager.json claims (which reports last-modified: Mon, 06 Apr 2026 05:01:59 GMT).

So the TL;DR is that Kali Linux need to update their JSON file.

[tdewey-rpi]

Escalated to Kali linux team.