Linux Kernel CVE-2026-43296

Update to patched Linux kernel versions: 5.10.252 or later for 5.10.x series, 5.15.202 or later for 5.15.x, 6.1.165 or later for 6.1.x, 6.6.128 or later for 6.6.x, 6.12.75 or later for 6.12.x, 6.18.16 or later for 6.18.x, 6.19.6 or later for 6.19.x, or upgrade to mainline kernel 7.0 or later. Patches are available from kernel.org Git stable tree (see references https://git.kernel.org/stable/c/d0b3c8a80336029d9356f429151eb27922d80a3c and related backport commits). For systems that cannot immediately upgrade, temporary mitigation involves avoiding concurrent multi-queue transmissions on OcteonTX2 NIX hardware by limiting active transmit queues per SMQ, though this degrades network performance and throughput. Alternatively, if OcteonTX2 acceleration is not required for the workload, unload the octeontx2-af and related driver modules and use standard Linux network drivers, accepting the loss of hardware offload capabilities. Note that these workarounds significantly impact network performance and are only viable as short-term risk reduction measures until kernel patching can be performed. The vendor-supplied patches implement hardware errata workarounds with minimal performance impact compared to driver-level mitigations.