Linux Kernel CVE-2026-43206

Immediately upgrade to patched kernel versions: 5.10.252 or later for 5.10.x series, 5.15.202+ for 5.15.x, 6.1.165+ for 6.1.x, 6.6.128+ for 6.6.x, 6.12.75+ for 6.12.x, 6.18.16+ for 6.18.x, 6.19.6+ for 6.19.x, or 7.0+ for mainline kernels. Patches are available from kernel.org stable branches at https://git.kernel.org/stable/ with specific commits listed in references. For systems unable to immediately patch, disable the amdkfd kernel module if AMD GPU compute features are not required ('echo blacklist amdkfd > /etc/modprobe.d/disable-amdkfd.conf' and reboot), noting this will prevent OpenCL/ROCm compute workloads and GPU-accelerated applications from functioning. Alternatively, restrict access to /dev/kfd device node to trusted users only via udev rules, though this provides limited protection since low-privilege users may already have legitimate access. Implement kernel address space layout randomization (KASLR) if not enabled to increase exploitation difficulty, though this does not prevent the vulnerability. Monitor systems for unusual privilege escalation attempts via audit logging of ioctl calls to DRM devices. Prioritize patching for multi-user systems with AMD GPUs, HPC clusters, GPU compute nodes, and workstations where multiple users have shell access.