Linux Kernel CVE-2026-43303

Upgrade to patched Linux kernel versions 6.18.16, 6.19.6, 7.0, or later stable releases containing the fix commits. Distribution-specific updates should be obtained through vendor channels: Red Hat via errata, Ubuntu through apt security updates, Debian stable-security, and SUSE maintenance channels. The upstream patches are available at https://git.kernel.org/stable/c/23b82b7a26182ad840ae67d390d7ec9771e8c00f, https://git.kernel.org/stable/c/d757c793853ec5483eb41ec2942c300b8fa720fb, and https://git.kernel.org/stable/c/ac1ea219590c09572ed5992dc233bbf7bb70fef9 for organizations maintaining custom kernel builds. If immediate patching is not feasible, compensating controls include disabling swap functionality via 'swapoff -a' and removing swap entries from /etc/fstab, which eliminates the vulnerable code path but reduces system performance under memory pressure and may cause out-of-memory conditions on memory-constrained systems. Additionally, restricting local user access and implementing namespace isolation (user namespaces, seccomp filters) can limit attack surface on multi-tenant systems, though these do not prevent exploitation by legitimate local users. Kernel live-patching solutions (kpatch, kGraft) may provide interim mitigation where available from vendors.