diff --git a/named-hosts/matic/default.nix b/named-hosts/matic/default.nix
index fa56e3a3d..837a4f10a 100644
--- a/named-hosts/matic/default.nix
+++ b/named-hosts/matic/default.nix
@@ -43,8 +43,8 @@ inputs.nixpkgs.lib.nixosSystem {
         boot.loader.efi.canTouchEfiVariables = true;
         boot.loader.timeout = 3;
 
-        # Latest kernel for AMD AI 300 support
-        boot.kernelPackages = pkgs.linuxPackages_latest;
+        # Pin kernel to 6.18 for CrowdStrike Falcon compatibility (RFM on 6.19)
+        boot.kernelPackages = pkgs.linuxPackages_6_18;
 
         # Networking
         networking.hostName = "matic";
diff --git a/overlays/default.nix b/overlays/default.nix
index 9a10852a1..61b2a9c98 100644
--- a/overlays/default.nix
+++ b/overlays/default.nix
@@ -38,6 +38,9 @@
       config = prev.config;
       overlays = [ ];
     };
+    # deno 2.6.10 on nixpkgs-unstable has broken check phase (integration_tests vs integration_test)
+    # Use nightly (master) which has the fix and is in the binary cache
+    deno = final.nightlyPkgs.deno;
     codex = final.nightlyPkgs.codex;
     claude-code = final.nightlyPkgs.claude-code;
     opencode = final.nightlyPkgs.opencode;