Linux Kernel EUVD-2026-32876

Vendor-released patch: upgrade to Linux 6.12.91, 6.18.30, 7.0.7, or 7.1-rc3 (or any later release) which contain the commits that reject QP creation when WQs share a CQ; the canonical fixes are at https://git.kernel.org/stable/c/9cc0c6b1ba8cd5c55aef043e1384de0a8b4efa71 and the parallel stable backports listed in the ENISA EUVD entry. On distribution kernels, install the vendor-provided kernel security update once available and reboot. As a compensating control until patching, unload or blacklist the mana_ib kernel module (modprobe -r mana_ib; add 'blacklist mana_ib' under /etc/modprobe.d/) on hosts that do not require Azure MANA RDMA - this fully removes the vulnerable code path but disables RDMA acceleration for the MANA NIC. Alternatively, restrict access to /dev/infiniband/uverbs* via udev rules or namespace/container policies so only trusted users can open RDMA verbs devices, accepting that legitimate RDMA workloads running as non-root will lose functionality.