Linux Kernel CVE-2026-53182

Vendor-released patch: upgrade to a fixed stable kernel - 6.1.176, 6.6.143, 6.12.94, 7.0.13, 6.18.36, or mainline 7.1 (or your distribution's build incorporating these commits). The authoritative fixes are the git.kernel.org stable commits listed above and tracked under https://nvd.nist.gov/vuln/detail/CVE-2026-53182; apply your distro's kernel security update as the primary action. Where immediate patching is not possible, reduce exposure by restricting CAP_NET_ADMIN: avoid granting that capability to untrusted users or containers, and ensure unprivileged user namespaces cannot reach this path for untrusted workloads (e.g., constrain or disable unprivileged netns/CAP_NET_ADMIN delegation for those tenants) - the trade-off is that legitimate in-container network configuration and WiFi AP/beaconing management will be blocked. There is no clean feature toggle for the specific EMA RNR parser short of the patch, so capability restriction is the main compensating control until the kernel is updated.