Linux Kernel CVE-2026-72009

The primary fix is to upgrade to a patched kernel: 7.2-rc4 or later in the 7.2 series, 7.1.5 or later in the 7.1 stable series, or 6.18.42 or later in the 6.18 stable series. Patch commits are publicly available at the three kernel.org stable links referenced above. For 6.1 longterm branch users, backport of the fix commits should be evaluated, as the EUVD data identifies 6.1 as affected but does not list a specific 6.1.x fix version - vendors maintaining 6.1-based BSPs for i.MX93 should consult their SoC vendor (NXP) or apply the upstream commits manually. As a compensating control where patching is not immediately feasible, restricting local user access to power-management sysfs/debugfs interfaces (e.g., via restrictive permissions on /sys/kernel/debug/pm_genpd/) reduces the surface but does not eliminate the flaw. Disabling unused MIPI CSI or DSI interfaces in the device tree eliminates the shared-resource conflict entirely for deployments that do not require both interfaces simultaneously, at the cost of losing camera or display functionality. No general-purpose workaround exists for systems requiring both DSI and CSI simultaneously.