Linux Kernel EUVD-2026-27697

Update the Linux kernel to one of the patched stable releases: 5.10.252 or later (fix commit fc4df593a8ff), 5.15.202 or later (fix commit 0b7f56084cc3), 6.1.165 or later (fix commit fda46c9025b7), 6.6.128 or later (fix commit 505630dd1ebf), 6.12.75 or later (fix commit 9c0a6ff53866), 6.18.16 or later (fix commit 141c81849fab), 6.19.6 or later (fix commit 9544b73cad4e), or any 7.0+ release (fix commit 544215cc37d0). Upstream stable patches are available at the git.kernel.org references listed above. Ubuntu users should apply USN-8492-1. As a compensating control for systems that cannot be patched immediately, blacklisting the cx23885 kernel module (echo 'blacklist cx23885' >> /etc/modprobe.d/blacklist.conf) prevents the driver from loading entirely, eliminating the attack surface - the trade-off being loss of cx23885 hardware functionality. No confidentiality or integrity impact means there is no urgency to apply out-of-band patches outside normal patch cycles.