Linux Kernel CVE-2026-43354

Apply vendor-released kernel patches immediately for affected stable branches: upgrade to Linux 6.12.78 or later for 6.12.x series, 6.18.19 or later for 6.18.x series, 6.19.9 or later for 6.19.x series, or mainline 7.0 or later. Patches available at kernel.org stable repository via commit links provided in CVE references (https://git.kernel.org/stable/c/451ec5e67444f8460f9706a1bde146b5bbc86ce6 and associated commits). For systems unable to apply kernel updates immediately, compensating controls include: disable the hx9023s kernel module via modprobe blacklist if the HX9023S sensor hardware is not operationally required (trade-off: loss of proximity sensor functionality), restrict access to /sys/bus/iio/devices/ sysfs attributes to root only via chmod/chown (trade-off: breaks applications expecting standard IIO permissions), or implement mandatory access control policies (SELinux/AppArmor) to prevent untrusted local users from writing to IIO device sampling frequency attributes (trade-off: requires custom policy development and testing). Verify patch application by checking kernel version with uname -r and confirming presence of fixed commits in kernel git log.