Linux Kernel CVE-2026-43312

Apply vendor-released patches from the Linux stable kernel trees: upgrade to Linux 5.15.202+, 6.1.165+, 6.6.128+, 6.12.75+, 6.18.16+, 6.19.6+, or 7.0+ depending on your kernel series. Patches available at git.kernel.org commit IDs cabd025182cfed4a19b3aab57493e312d681e398 (mainline), 8ecb21c20387cc0c8aa00489a21ccc69f6b0f5d1, 2dedda97a64e7735844609c6c77c0dd953d73833, eee13cbccacb6d0a3120c126b8544030905b069d, fb69e4842f5b463ff5f121d2ac7746014e3477ea, 59e372aa4cf60e2500eba7f978acdcb18bb49032, and f2a1998bc0053ebfe137f65081ed13afd9f34502 for respective stable trees. If immediate patching is not feasible, temporary mitigation involves blacklisting the ov5647 kernel module (add 'blacklist ov5647' to /etc/modprobe.d/blacklist.conf and rebuild initramfs) to prevent the driver from loading. This workaround eliminates functionality for OV5647 camera hardware. Side effect: camera devices using this sensor will be non-functional until the driver is re-enabled post-patch. This mitigation is only viable for systems where OV5647 camera functionality is non-critical. No network-level compensating controls are applicable since the vulnerability requires local authenticated access.