Linux Kernel CVE-2026-46152

Upgrade to a patched stable kernel: 6.6.140 or later on the 6.6.y series, 6.12.88 or later on 6.12.y, 6.18.30 or later on 6.18.y, 7.0.7 or later on 7.0.y, or 7.1-rc3+ on mainline, applying the fix that converts rx_result from static to an automatic stack variable in ieee80211_invoke_fast_rx() (commits at git.kernel.org/stable/c/3ef44f96ccc3e06e059dec57842e366f0c4b1893 and siblings). On distribution kernels, install the vendor-rebuilt package once the backport is available and reboot. As a temporary compensating control where patching is delayed, you can mitigate exposure by disabling 802.11 mesh interfaces (iw dev <iface> del for any type mesh interface) on systems that do not require mesh networking, or by unloading the mac80211 module / disabling WiFi entirely on appliances that do not need wireless - both eliminate the affected code path at the cost of losing mesh or WiFi functionality. Restricting which devices may associate to the WLAN (WPA3-SAE, MAC ACLs, isolated SSIDs) reduces who can deliver crafted frames but does not close the race itself.