Linux Kernel CVE-2026-43340

Update to patched Linux kernel versions: 5.10.253 or later for 5.10.y branch, 5.15.203 or later for 5.15.y branch, 6.1.168 or later for 6.1.y branch, 6.6.134 or later for 6.6.y branch, 6.12.81 or later for 6.12.y branch, 6.18.22 or later for 6.18.y branch, 6.19.12 or later for 6.19.y branch, or 7.0 or later for mainline. Upstream patches available at https://git.kernel.org/stable/c/c01bcc67a9a692d65508ebd480405b5e77d562b7 and stable branch equivalents. For systems unable to immediately patch, mitigation options include: disable CONFIG_LOCKDEP in production kernels (eliminates the inconsistent lock state detection, though this is typically already disabled for performance reasons), set comedi.comedi_num_legacy_minors=0 kernel parameter to disable legacy COMEDI device creation (prevents the vulnerable code path entirely but breaks legacy COMEDI device reattachment functionality), or restrict access to /dev/comedi* device nodes to trusted users only via udev rules (limits local attack surface but does not eliminate risk from privileged local users). Note that disabling CONFIG_LOCKDEP is standard practice in production environments and carries no security trade-off as it only affects debugging instrumentation. Setting comedi_num_legacy_minors=0 is the most effective mitigation if legacy COMEDI reattachment is not required, with no operational side effects beyond disabling that specific feature.