Linux Kernel CVE-2026-53356

Vendor-released patch: upgrade to the fixed version for your stable series - 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36, 7.0.13, or 7.1 (or later), applying the cherry-picked commit 3e49a2f85070b2fb672c1e0fdba281a4ea3aebe6 which corrects the sg_page() pointer scaling for phys BO pread/pwrite. The individual stable commits are available at https://git.kernel.org/stable/c/ (e.g. .../40f738991058eb3e3530c3006a5bd6fd5e29f035 and the sibling hashes in the reference set); take whichever your distribution ships and rebuild or install the updated kernel package. Since the fix is straightforward and released, patching is preferred over mitigation. If you cannot patch immediately, the compensating control is to restrict access to the DRM render/graphics devices (/dev/dri/*) to trusted users only and, on affected legacy hardware, avoid exposing multi-user local sessions - the trade-off is that limiting DRM access can break local graphical or GPU-compute functionality for non-privileged users, and this only matters on the rare Gen3/945G systems that use phys mapping.