Linux Kernel CVE-2025-38447

Patch available per vendor advisory: apply the upstream fix that introduces the folio_unmap_pte_batch() helper, delivered via the kernel.org stable commits https://git.kernel.org/stable/c/510fe9c15d07e765d96be9a9dc37e5057c6c09f4 and https://git.kernel.org/stable/c/ddd05742b45b083975a0855ef6ebbf88cf1f532a; update to a 6.16 build (or later stable release) that includes these commits rather than running an unpatched 6.16-rc1..rc5 kernel. Because the affected versions are release candidates, the most practical remediation for production systems is simply to avoid deploying the vulnerable 6.16 RC kernels and stay on a patched stable series. No specific runtime toggle disables the affected rmap unmap path, so there is no clean feature-level workaround; if immediate patching is impossible, restrict local shell/code-execution access to untrusted users (defense that limits the local attack vector) as an interim compensating control, accepting that this does not address the underlying bug.