Linux Kernel CVE-2026-31745

Apply vendor-released patches: upgrade to Linux kernel 6.19.12 or later for the 6.19 stable branch, or kernel 7.0 final release for mainline users. Patch commits available at https://git.kernel.org/stable/c/1de465753220deb41569cf2add87bbb0673731db (mainline fix) and https://git.kernel.org/stable/c/fbffb8c7c7bb4d38e9f65e0bee446685011de5d8 (stable backport). The fix modifies reset_add_gpio_aux_device() to avoid calling kfree() after auxiliary_device_uninit() by restructuring the error path. If immediate patching is not feasible, consider disabling CONFIG_RESET_GPIO at kernel build time to remove the vulnerable code entirely, but note this will break systems dependent on GPIO-based reset functionality such as certain embedded boards and device tree configurations requiring gpio-reset bindings. For production systems where the reset-gpio driver is not critical, unloading the module (if built as a module) provides temporary mitigation, though this may cause devices depending on GPIO resets to fail initialization. No runtime configuration workaround exists for systems requiring this driver; patching is the only complete remediation.