Linux Kernel CVE-2026-72339

Vendor-released patch: upgrade to a fixed kernel for your branch - 5.10.261, 5.15.212, 6.1.178, 6.6.145, 6.12.97, 6.18.40, 7.1.5, or 7.2-rc3 (or later), which add the missing NULL checks on qede_build_skb() so the callers return before any BD ring manipulation. Apply the stable patch at https://git.kernel.org/stable/c/814a5edac8c9fc04051808d5faaa93768e989281 (and the sibling commits for other branches). Where an immediate kernel update is not possible, the practical compensating control is to reduce the likelihood of the triggering condition: keep the host well clear of memory pressure (right-size workloads, avoid memory overcommit, alarm on low free memory), since the fault only fires when a build_skb() allocation fails. On hosts that do not require these adapters you can avoid the code path entirely by blacklisting the qede module, at the cost of losing connectivity on those QLogic FastLinQ interfaces - not viable where the NIC is the primary uplink. Consult your distribution's advisory for the exact backported package version.