Linux Kernel CVE-2026-43140

Upgrade to a patched kernel version: 5.10.252 or later for the 5.10 LTS branch, 5.15.202 or later for the 5.15 LTS branch, 6.1.165 or later for the 6.1 LTS branch, 6.6.128 or later for the 6.6 LTS branch, 6.12.75 or later for the 6.12 branch, 6.18.16 or later for the 6.18 branch, 6.19.6 or later for the 6.19 branch, or kernel 7.0 and above. Upstream patches are available at https://git.kernel.org/stable/c/db5ba06e7af9325519a03e52fccf4a9e7c1fd9b2 and related stable commits. As a compensating control where patching is not immediately feasible, blacklisting the hid-magicmouse module via a modprobe.d configuration (e.g., 'blacklist hid-magicmouse' in /etc/modprobe.d/) will prevent the vulnerable code from loading, with the trade-off of disabling all legitimate Apple Magic Mouse functionality. Additionally, enforcing USB device authorization policies (e.g., via usbguard) to whitelist only known-good USB devices will reduce the attack surface without impacting other functionality. Red Hat and SUSE customers should apply distribution-specific kernel updates as they become available.