Linux Kernel CVE-2026-43102

Update the Linux kernel to version 6.18.24 or later (6.18 stable branch), 6.19.14 or later (6.19 stable branch), or 7.0 and later (mainline). The fix reverts the problematic page recycling optimization and ensures page_pool_put_full_page() is always called in the error path of airoha_qdma_rx_process(), guaranteeing fragment return to the pool. Distributions should apply the backported fix commits 4429b761874fb9c7767d12d98913a467ef2654f1, 7ee0063fbab8aea8f4e4e3165f541bf898b77b80, or 285fa6b1e03cff78ead0383e1b259c44b95faf90 depending on stable branch. No workaround exists without patching; the only mitigation is to restrict unprivileged user access to systems using Airoha QDMA NICs (cpe:2.3:a:airoha:*), though this may be impractical in shared hosting environments. Verify driver presence via 'lsmod | grep airoha' before prioritizing patching for specific systems.