Linux Kernel CVE-2026-64107

The primary remediation is to upgrade to Linux kernel 7.0.11 or 7.1, which incorporate the fix substituting snd_soc_component_to_dapm() for the incorrect snd_soc_dapm_kcontrol_to_dapm() call. The upstream fix commits are available at https://git.kernel.org/stable/c/285159ca199cbbe424223d4b14db227b279b5767 and https://git.kernel.org/stable/c/09e8f9a9aa19aa8c1b0cc7a0ebc68f6ecf86a660 for manual backporting to older stable branches. Ubuntu users should apply the update from USN-8593-1 at https://ubuntu.com/security/notices/USN-8593-1. As a compensating control where immediate patching is not feasible, removing or blacklisting the snd_soc_pcm512x kernel module (via /etc/modprobe.d/blacklist.conf) will prevent the vulnerable code from loading, at the cost of disabling PCM512x audio output. Alternatively, restricting write access to ALSA device nodes (/dev/snd/*) to the audio group and ensuring untrusted local users are excluded from that group will prevent exploitation without disabling audio entirely.