Linux Kernel CVE-2026-46300

Apply vendor-released kernel security updates as soon as available from your Linux distribution maintainer. Red Hat, Ubuntu, Debian, SUSE, and other major distributions will publish kernel patches addressing CVE-2026-46300 through their standard security update channels. No specific patched kernel version has been confirmed in available data-monitor your distribution's security mailing lists and repositories. For Red Hat-based systems, check for updates via 'yum update kernel' or 'dnf update kernel' and subscribe to Red Hat Security Advisories. For Debian/Ubuntu systems, monitor USN announcements and apply updates with 'apt update && apt upgrade'. Reboot systems after kernel updates to load the patched version. As a temporary workaround until patches are deployed, disable or unload the ESP-in-TCP kernel module if your environment does not require IPsec NAT traversal functionality-this eliminates the vulnerable code path but breaks ESP-in-TCP VPN connectivity. Use 'modprobe -r xfrm_espintcp' to unload (note: module name may vary by kernel version). For containerized environments, update the host kernel rather than container images, as this is a kernel-level vulnerability. Restricting local user access reduces exposure but does not eliminate risk from compromised user accounts.