Linux Kernel CVE-2025-71192

Apply your distribution's patched kernel: the upstream fix is available and merged into stable trees - reference the kernel.org stable commits (e.g. 21f8bc5179bed91c3f946adb5e55d717b891960c and the four sibling backports). Ubuntu users should update per USN-8278-1 (https://ubuntu.com/security/notices/USN-8278-1) and reboot into the new kernel; other distributions should install the current security-patched kernel package. Because exploitation requires the AC97 codec/bus code path to be present and reachable, a compensating control where patching must be deferred is to avoid loading the AC97 driver (do not build/load snd-ac97 modules) or blacklist the AC97 codec module on systems that do not use legacy AC'97 audio - the trade-off is loss of AC'97 audio support on affected hardware, which is negligible on modern systems that use HD Audio. Since the trigger requires only local low-privileged access, also enforce standard local-access hardening (limit untrusted local accounts). No exact single 'fix version' number was provided in the input, so cite the stable commits/USN rather than an invented version string.