Linux Kernel CVE-2026-68466

The primary fix is to upgrade to a patched Linux kernel version on any LPC32xx-based system: 5.10.261 or later on the 5.10 LTS branch, 5.15.212 or later on the 5.15 LTS branch, 6.1.178 or later on the 6.1 LTS branch, 6.6.145 or later on the 6.6 LTS branch, 6.12.97 or later on the 6.12 branch, 6.18.40 or later on the 6.18 branch, or 7.1.5 / 7.2-rc4 on current mainline branches. The patch corrects lpc32xx_xmit_dma() to check the return value of wait_for_completion_timeout(), terminate the DMA channel before unmapping the scatterlist on timeout, and return -ETIMEDOUT to the NAND subsystem. Fix commits are indexed at https://git.kernel.org/stable/c/ (see references for all eight commit hashes). For systems where an immediate kernel upgrade is operationally infeasible, a compensating control is to restrict local user access to the affected embedded device to trusted operators only, since exploitation requires local privilege; this does not eliminate the risk but reduces the attacker population. There is no known mechanism to disable the lpc32xx_slc DMA path independently without recompiling the kernel with CONFIG_MTD_NAND_LPC32XX_SLC disabled, which would also disable NAND flash entirely on affected hardware.