Linux Kernel CVE-2026-53030

The primary fix is to upgrade to a patched Linux kernel version: 6.18.33, 7.0.10, or 7.1, all of which include the correction via the __free(kfree) cleanup attribute. Stable-tree fix commits are available at https://git.kernel.org/stable/c/1b6a7e94be678d34a9ccb9db7e2443ae02ad2bc8, https://git.kernel.org/stable/c/d7665c3b4f575251e449e2656879392346ca612b, and https://git.kernel.org/stable/c/ab8f00ffcca0f618fb8198d358f24728950d9860 for backporting to downstream trees. Ubuntu users should apply the updates referenced in USN-8568-1 (https://ubuntu.com/security/notices/USN-8568-1) and USN-8566-1 (https://ubuntu.com/security/notices/USN-8566-1). As a compensating control on systems where immediate patching is not feasible, restricting unprivileged local shell access to the system reduces exploitation opportunity, though this does not eliminate the underlying defect. Unloading or blacklisting the Renesas i3c master kernel module (if not required) would prevent the code path from being reached entirely, with the trade-off of disabling i3c device communication on the affected SoC.