Linux Kernel CVE-2026-53115

Apply the vendor kernel update as the primary fix: upgrade to a patched stable release - 6.12.91, 6.18.33, 7.0.10, or 7.1 or later - per the kernel.org stable commits (https://git.kernel.org/stable/c/4911b836f35c034c36f102db4ecbe339b38e7d1d and the related 8139ce66..., 60bfb563..., 6c8dfb03... commits). Distribution users should install the corresponding fixed packages via Ubuntu USN-8566-1, USN-8567-1, and USN-8568-1 (https://ubuntu.com/security/notices/USN-8568-1) or their distro's equivalent advisory and reboot. Where immediate patching is not possible, compensating controls include restricting local shell and sysfs access to trusted operators and, on systems that do not require NXP DPAA2/Management Complex hardware, not loading the fsl_mc_bus module (blacklist it), which removes the vulnerable code path entirely; the trade-off is loss of DPAA2 device management, so this is only viable on platforms that do not depend on that bus. Tightening permissions on the driver_override sysfs attributes limits who can trigger the race but does not fully eliminate it.