Linux Kernel EUVD-2026-27634

Upgrade to patched kernel versions: 6.6.136+ for 6.6 LTS branch, 6.12.83+ for 6.12 stable, 6.18.24+ for 6.18 stable, 6.19.14+ for 6.19 stable, or 7.0+ for mainline. Specific fix commits available at kernel.org stable tree (78ec5bf2f589, 5d4fe469fe7d, 49b1ce6d7cfb, 2d29214448ec, 86f9c23e0814). Distribution-specific updates should be applied through native package managers (apt, yum, zypper) which will incorporate these upstream fixes into vendor kernels. Compensating controls for environments unable to immediately patch: restrict CIFS/SMB mount operations to trusted network segments only via firewall rules blocking SMB ports (445/TCP, 139/TCP) from untrusted networks; implement mount restrictions using kernel module parameters or AppArmor/SELinux policies to prevent unprivileged users from mounting external CIFS shares; disable CIFS kernel module entirely (modprobe blacklist) if SMB client functionality is not required-note this prevents Windows file share access and may break workflows dependent on SMB. Consider mandating VPN for all external SMB access to controlled infrastructure. Advisory reference: https://nvd.nist.gov/vuln/detail/CVE-2026-43112 and linked kernel.org commits.