Linux Kernel CVE-2026-43180

Apply vendor-released kernel patches appropriate to your distribution's kernel branch. Red Hat/CentOS users should update via yum/dnf update kernel to RHEL kernel builds incorporating upstream commits. Debian/Ubuntu users should apt update && apt upgrade to receive patched kernel packages in respective stable channels. SUSE/openSUSE users apply via zypper update kernel-default. For custom-compiled kernels, cherry-pick fix commits from kernel.org stable tree (commit 64868f5ecade for mainline, branch-specific commits listed in references). Reboot required to load patched kernel. Workaround for systems unable to immediately patch: Unload the kaweth module (modprobe -r kaweth) if the USB Ethernet adapter is not actively required - this eliminates attack surface but disables network functionality for that interface. Alternatively, restrict /dev/bus/usb device node permissions to prevent unprivileged users from triggering driver code paths, though this may break legitimate USB functionality and does not prevent exploitation by already-privileged local users (PR:L in CVSS). For embedded systems with kaweth hardware dependencies, consider USB device allowlisting via udev rules to block untrusted kaweth device attachment until patching, though this introduces operational complexity and may not prevent exploitation via legitimate devices. No upstream advisory URLs beyond kernel.org git commits; distributions publish advisories via their respective security channels (RHSA, DSA, SUSE Security Update, etc.).