Linux Kernel CVE-2026-46332

Vendor-released patch: upgrade the Linux kernel to 6.12.86, 6.18.27, 7.0.4, or 7.1-rc1 (or any later stable release that includes commits 663c2728, 0339a746, 1214bf28, or fb91d4e4), which add the remaining-space check before the memcpy() in cc1352_bootloader_rx() so oversized serdev chunks are dropped instead of overflowing rx_buffer; the upstream fixes are at https://git.kernel.org/stable/c/663c2728a6d0f781044431111b53a27f71027e48 and the three sibling commits listed in the references. On systems where an immediate kernel update is not possible, the only meaningful compensating control is to avoid loading the gb-beagleplay driver on hardware that does not need it (blacklist the module in /etc/modprobe.d/, accepting that BeaglePlay greybus connectivity to the CC1352 radio will be unavailable) and to restrict physical access to the UART/serdev link that feeds the bootloader receive path. There is no meaningful network-side mitigation since the data path is an on-board serial link.