Linux Kernel CVE-2026-53087

Vendor-released patch: update to a fixed stable kernel - 6.18.33, 7.0.10, or 7.1 (or apply the relevant backport for your branch), pulling the bcmgenet fix from the kernel stable tree commits listed at https://git.kernel.org/stable/c/150d06aae1839a6564ab200ef0e7291c3528bbb0 and its siblings; on distribution kernels, install the vendor's updated kernel package. There is no clean feature-level workaround because the leak is in the driver's core TX reclaim path; as compensating controls until patched, you can monitor the interface for rising TX stalls/dropped counters and periodically reset the interface (ip link set dev <iface> down/up) or reload the genet module to reset the BD pool - note this causes brief network outages and only resets, not prevents, the leak. On platforms where an alternate NIC is available, shifting traffic off the GENET interface avoids the path entirely at the cost of using different hardware.