Linux Kernel CVE-2026-53355

Apply the vendor-released stable kernel update for your branch - Vendor-released patch: upgrade to 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36, or 7.0.13/7.1 (or later) depending on the series you run, taking your distribution's backport where available. The fix corresponds to the git.kernel.org stable commits (e.g. https://git.kernel.org/stable/c/e7cf30aa5f1fc6c2a86df65df8b731df20e44d79 and the sibling per-branch commits). If you cannot patch immediately, the most effective compensating control is to prevent the vulnerable code from loading at all: blacklist the RDS modules (rds, rds_rdma) via modprobe if RDS is not required - the trade-off is that any application relying on the AF_RDS socket family (notably some Oracle RDBMS/RAC interconnect configurations) will break. Where RDS is required, restrict local access to the affected hosts and avoid granting untrusted local users the ability to open RDS sockets, since the trigger is a local setup/teardown path rather than a remote packet. Consult your distribution's security tracker for the exact backported package version.