Linux Kernel CVE-2026-43184

Upgrade Linux kernel to patched versions: 5.10.252 or later for 5.10.x series, 5.15.202 or later for 5.15.x series, 6.1.165 or later for 6.1.x series, 6.6.128 or later for 6.6.x series, 6.12.75 or later for 6.12.x series, 6.18.16 or later for 6.18.x series, 6.19.6 or later for 6.19.x series, or 7.0 for mainline. Patch references are available at kernel.org stable tree commits listed in NVD references. If immediate kernel upgrade is not feasible, consider compensating controls: disable RNBD server module via 'rmmod rnbd_server' if RDMA block device functionality is not required (trade-off: loss of remote block device access for dependent applications); restrict network access to RNBD service ports using iptables/nftables rules allowing only trusted storage network segments (trade-off: reduces attack surface but does not eliminate vulnerability for authorized clients); implement network segmentation isolating RDMA storage traffic from untrusted networks (trade-off: architectural change requiring network reconfiguration). Note that disabling the module is the only true mitigation that eliminates the vulnerability; network controls only reduce exposure. Verify module status with 'lsmod | grep rnbd_server' and service dependencies before disabling. For production storage clusters, schedule maintenance windows for kernel updates as live kernel patching (kpatch/livepatch) may not cover this driver component.