Linux Kernel CVE-2026-31537

Update the Linux kernel to version 6.18.11, 6.19.1, 7.0 or later, depending on the currently deployed stable series. Patched versions are available directly from kernel.org stable repositories at https://git.kernel.org/stable/. For systems unable to immediately patch, disable SMB server services (smbd daemon) if not actively required using systemctl disable smbd && systemctl stop smbd, which eliminates the attack surface entirely. Network-level isolation of SMB ports (445/TCP) to trusted clients only provides partial mitigation but does not address local authentication attacks. Kernel updates may require system restart to take effect; plan maintenance windows accordingly. Organizations running SMB server functionality should prioritize patching within normal patch cycles rather than emergency timelines due to the low exploitation risk demonstrated by EPSS scoring.