Linux Kernel CVE-2026-72165

The primary remediation is to upgrade to a patched Linux kernel release: 5.10.261, 5.15.212, 6.1.178, 6.6.145, 6.12.97, 6.18.40, 7.1.5, or 7.2-rc1 or later. Upstream fix commits are available at git.kernel.org/stable (see references) and can be backported to custom or vendor kernels. For embedded or industrial systems where an immediate kernel upgrade is operationally impractical, restrict unprivileged local user access to the affected system - removing local shell accounts from untrusted users eliminates the PR:L attack surface, though this does not remediate the underlying flaw and has operational trade-offs in multi-user environments. If the nand_select_target() path is not needed at runtime (i.e., raw NAND storage is not in active use), denylisting the nand kernel module via /etc/modprobe.d/ prevents driver load, but this will prevent access to any NAND-backed storage and is only viable when NAND flash is not required for system operation.