Linux Kernel IPA CVE-2026-43081

The primary fix is upgrading to a patched Linux kernel stable release: 6.6.136, 6.12.83, 6.18.24, 6.19.14, or 7.0 and later. Upstream fix commits are available at https://git.kernel.org/stable/c/9709b56d908acc120fe8b4ae250b3c9d749ea832 (one branch), https://git.kernel.org/stable/c/bafc45ea30d297002750396d5f10e3018bf2cd60, https://git.kernel.org/stable/c/2aa50d2c1f631b405849da246043c6f683af7489, https://git.kernel.org/stable/c/a7d326dfb13b5a0763eccfd78836fe15199fc499, and https://git.kernel.org/stable/c/d1c66396796f23f7201b1addf06f62515035354d. As a compensating control on systems that cannot immediately patch, administrators may restrict local user privileges to prevent unprivileged processes from issuing remoteproc control commands (typically requires CAP_SYS_ADMIN or equivalent); this trades off legitimate modem management capability but prevents triggering the WARN condition. Disabling IPA hardware acceleration (if configurable via kernel boot parameters or module options) would also prevent the crash path but at the cost of network throughput on the affected SoC. Distribution vendors shipping kernels for Qualcomm-based platforms should be consulted for backported patches.