Linux Kernel CVE-2026-43047

Update to patched Linux kernel versions immediately: 5.10.253+ for 5.10.x branch, 5.15.203+ for 5.15.x branch, 6.1.168+ for 6.1.x branch, 6.6.134+ for 6.6.x branch, 6.12.81+ for 6.12.x branch, 6.18.22+ for 6.18.x branch, 6.19.12+ for 6.19.x branch, or 7.0+ for mainline. Patches are available from https://git.kernel.org/stable/ with specific commits listed in references. For systems unable to immediately patch, implement USB device whitelisting through udev rules to allow only trusted vendor/product IDs, though this provides incomplete protection as compromised legitimate devices could still exploit the flaw. Disable unused HID drivers via kernel module blacklisting (modprobe.d configuration for hid-multitouch) if multitouch functionality is not required, though this breaks touchscreen/tablet support. Consider using USB port physical access controls or disabling USB ports entirely via BIOS on critical systems until patching is completed. No kernel runtime parameters or sysctl settings mitigate this vulnerability. Testing patches in non-production environments is recommended before deploying to production systems to verify compatibility with distribution-specific configurations.