Linux Kernel CVE-2026-31761

Primary fix: upgrade to patched kernel versions 5.10.253+ (if on 5.10 LTS), 5.15.203+ (if on 5.15 LTS), 6.1.168+ (if on 6.1 LTS), 6.6.134+, 6.12.81+, 6.18.22+, 6.19.12+, or 7.0+. Patches available from all major distributions and at https://git.kernel.org/stable/. For systems that cannot immediately patch: Workaround 1 - Blacklist the mpu3050 kernel module (add 'blacklist mpu3050' to /etc/modprobe.d/blacklist.conf and rebuild initramfs) if the gyroscope hardware is not operationally required; this completely removes the attack surface but disables gyroscope functionality. Workaround 2 - Restrict /dev/iio:device* access permissions to root only via udev rules, though this may break legitimate applications expecting unprivileged sensor access and does not fully close the race window. Workaround 3 - For containerized workloads, use device cgroup controls to prevent container access to IIO subsystem devices. Verify module is loaded with 'lsmod | grep mpu3050' and check for MPU3050 hardware presence via 'ls /sys/bus/iio/devices/' before applying mitigations.