Linux Kernel EUVD-2026-28663

Upgrade to patched Linux kernel versions appropriate for your deployment: 5.10.253 (LTS), 5.15.203 (LTS), 6.1.167 (LTS), 6.6.130 (stable), 6.12.78 (stable), 6.18.19 (stable), 6.19.9 (stable), or 7.0 (mainline). Patches are available from https://git.kernel.org/stable/ with specific commits listed in affected_products section. If immediate patching is not feasible, implement these compensating controls with noted limitations: Disable the mpu3050 IIO driver module (rmmod mpu3050_i2c; rmmod mpu3050_spi; blacklist in /etc/modprobe.d/) if MPU3050 gyroscope functionality is not required, which eliminates the vulnerable code path but disables motion sensing capabilities for applications depending on this hardware. Alternatively, restrict access to /dev/iio:deviceX entries via udev rules to trusted users only, limiting local attack surface but not preventing exploitation by compromised privileged processes. Apply mandatory access controls (SELinux/AppArmor policies) to prevent untrusted applications from accessing IIO subsystem devices, which adds defense-in-depth but may break legitimate sensor applications. Note that workarounds do not fix the underlying kernel bug and should be considered temporary until patching is completed. Systems without MPU3050 hardware are not affected and do not require mitigation.