Linux Kernel CVE-2026-31506

Update to patched kernel versions: 6.12.80 or later for the 6.12.x stable branch, 6.18.21 or later for 6.18.x, 6.19.11 or later for 6.19.x, or 7.0 final release or later for the 7.0 branch. Patches are available through standard Linux distribution update channels and directly from git.kernel.org/stable with fix commits referenced in NVD advisory https://nvd.nist.gov/vuln/detail/CVE-2026-31506. Organizations unable to immediately patch can mitigate risk by unloading the bcmasp kernel module if the Broadcom ASP network hardware is not in active use (via modprobe -r bcmasp), though this eliminates network connectivity for affected interfaces. Alternatively, disable Wake-on-LAN functionality in BIOS/UEFI and at the OS level (ethtool -s <interface> wol d) to prevent the vulnerable code path from being triggered during driver operations, though this does not eliminate the vulnerability entirely and only reduces the attack surface. Monitor for unusual kernel panics or memory corruption symptoms on systems running affected hardware until patching is completed.