Linux Kernel CVE-2026-43222

Update to patched Linux kernel versions: 6.6.128, 6.12.75, 6.18.16, 6.19.6, or 7.0 depending on your current stable branch. The upstream patches are available across multiple kernel.org stable trees as documented in commits a5b1ddbe31f4, 34f36f9c6114, f122f2b3ce9d, 74abfadd7ef5, and a505ca2db89a (see https://git.kernel.org/stable/c/a5b1ddbe31f49b4da78642157589970e9b60a231). For systems where immediate kernel updates are not feasible, consider disabling or blacklisting the verisilicon_vpu driver module if AV1 hardware decoding is not required for operational needs, though this will prevent hardware-accelerated AV1 video playback. Alternatively, restrict access to /dev/video* device nodes to trusted users only via udev rules and group permissions, reducing the pool of potential local attackers who can trigger the vulnerable code path. Note that disabling the driver eliminates functionality and access restriction is defense-in-depth rather than a complete mitigation since the buffer overflow remains exploitable by any user with device access. Systems without Verisilicon hardware are not affected and require no action.