Linux CVE-2026-23290

Apply the pegasus driver validation patch by upgrading to a patched Linux kernel version corresponding to your distribution and branch. For stable kernel users, pull and rebuild from the latest stable branch (4.19, 5.4, 5.10, 5.15, 6.1, 6.6, or later) that includes the commit referenced above (kernel maintainers recommend using git cherry-pick for the specific commits if in-place patching is not yet available in your distribution). For distribution users (Ubuntu, RHEL, Debian, etc.), check with your vendor's security advisory for patched kernel versions and apply via your standard package management (apt-get, yum, zypper, etc.). Until patching is complete, disable or unload the pegasus driver module (rmmod pegasus) on systems that do not require Pegasus USB Ethernet adapters, and restrict physical USB access by disabling unused USB ports or implementing USB device whitelisting via udev rules. Monitor kernel logs for pegasus-related errors or unexpected crashes. Because this is a physical attack surface, organizations should also enforce endpoint device policies prohibiting untrusted USB devices in sensitive environments.