Linux Kernel EUVD-2026-39294

Vendor-released patch: update to a fixed stable kernel - 6.12.94 or later in the 6.12.y line, 6.18.36 or later in the 6.18.y line, or 7.0.13 or later in the 7.0.y line (corresponding upstream fix commits 4e5047cc94bea1cc7b670b7f503358e9af0542df, d3c12ed33e8923f3090909a1738f3e59292996a6, fa598556ecef412edcb391f144b7642e18fdfd45, fb176425837693f50c5c9fc8db6fbb04af22bd0a on git.kernel.org). Apply the kernel update your distribution ships and reboot. If you cannot patch immediately, the most effective compensating control is to restrict access to the accelerator device by removing or denying access to the ivpu driver / /dev/accel device nodes (e.g. blacklist the intel_vpu/ivpu module or tighten device-node permissions so only trusted users can issue ioctls); the trade-off is that the NPU becomes unavailable for AI/ML acceleration workloads on that host. There is no remote exposure to block at the network layer since the attack vector is local.