Linux CVE-2026-23312

Update the Linux kernel to a patched version that includes the endpoint validation fix. Most distributions have released patched kernel versions—check your distribution's security advisory or kernel changelog for the specific version that includes the kaweth driver endpoint validation patch. For distributions using stable kernel branches, the fixes are available in kernel versions that include one of the referenced commits. Until patching is possible, users can mitigate risk by disabling the kaweth module via blacklisting (add 'blacklist kaweth' to /etc/modprobe.d/blacklist.conf) if the hardware is not in use, restricting physical USB access to trusted users only, or using BIOS/UEFI settings to disable external USB ports if the affected hardware is not required. Organizations should prioritize patching systems with USB connectivity accessible to untrusted users or in shared environments.