Linux Kernel CVE-2026-43383

Update to patched Linux kernel versions: 5.10.253 (LTS), 6.1.167 (LTS), 6.6.130 (stable), 6.12.78 (stable), 6.18.19 (stable), 6.19.9 (stable), or 7.0+ (mainline). Distribution-specific updates available through normal package management channels (apt, yum, dnf, zypper). Verify kernel version with 'uname -r' post-update and reboot to activate. Upstream fix commits available at https://git.kernel.org/stable/c/821c8751fdeecdeecabeb11704dd33439c9e4bbc (mainline) and branch-specific commits in references. For systems that cannot immediately patch: disable TCP MD5 authentication on affected connections if operationally feasible (note: this eliminates BGP session authentication and may violate peering requirements). Alternative mitigation is IPsec encapsulation of BGP sessions (RFC 4301), which provides cryptographically stronger authentication not vulnerable to timing attacks - requires coordination with BGP peers and additional IPsec infrastructure. Network-level mitigation via strict ingress filtering can reduce attacker's ability to inject forged packets, but does not address timing oracle exploitation from legitimate network positions. No configuration change alone fully mitigates without patching; workarounds require disabling vulnerable feature or replacing with alternative mechanism.