Linux Kernel CVE-2025-39960

Upstream fix available (commits 19c839a98c73 and 27d94a2a52cb) - the patch zero-initializes the acpi_gpio_info struct before it is passed to __acpi_find_gpio(); a released patched tagged version is not independently confirmed from the input, so update to the first mainline 6.17-rc that includes these commits (or a later stable 6.17) built from the kernel.org stable tree. Because only release candidates are affected, the simplest remediation is to avoid running the vulnerable 6.17-rc1..rc6 builds in any exposed role and roll back to a stable kernel series (6.16.x or earlier) until a patched 6.17 build is available; this fully removes exposure with no functional trade-off. If a vulnerable rc must be kept for testing, restrict local/interactive access to the host, since exploitation requires local privileges. Reference the upstream commits above for cherry-picking into custom kernel builds.