Linux Kernel CVE-2026-53054

Patch available per vendor advisory: upgrade to a Linux stable release containing the fix - the EUVD references patched targets including 6.18.33, 7.0.10, and 7.1, with the upstream stable commits at https://git.kernel.org/stable/c/206f812ef140727b75697111391ae320fd8aa652 , https://git.kernel.org/stable/c/d9ecf758270501b2e7a0bc1dd69a6f28f1ae3cae , and https://git.kernel.org/stable/c/85042c2cd970a6b0e686329387096fe19989ae62 ; the originating change is at https://patchwork.freedesktop.org/patch/713898/ . On distribution kernels, apply the vendor's backported security update and reboot. If immediate patching is not possible, the practical compensating control is to restrict local access to GPU device/render nodes (tighten permissions on /dev/dri/render* and card devices to trusted users/groups) and avoid running untrusted local code or untrusted GPU workloads on affected hardware - the trade-off is that locking down render nodes can break legitimate graphics/compute applications for non-privileged users. Because exploitation is purely local (AV:L), there is no network port to block.