Linux Kernel CVE-2026-53297

Upgrade to Linux kernel 6.18.33, 7.0.10, or 7.1 where the NULL guard in mana_remove() has been applied; patch commits are confirmed at the three kernel.org stable links in the references. Distribution-specific kernel packages (RHEL, Ubuntu, SUSE, Debian) should be monitored for backport availability using each vendor's security advisories. If immediate kernel upgrade is not feasible, a practical compensating control is to avoid issuing PM suspend/resume cycles on Azure VMs running affected kernel versions - disabling system suspend via systemctl mask sleep.target hibernate.target suspend.target hybrid-sleep.target prevents the PM resume path that triggers the vulnerability, at the cost of losing power-save functionality. Alternatively, organizations with strict change windows can restrict local shell access to the VM (reducing PR:L exposure) as a defense-in-depth measure, though this does not address the underlying race condition if PM resume failures occur through infrastructure events. No confidentiality or integrity risk means there is no urgency beyond routine patch cycles for environments that do not perform frequent suspend/resume operations.