After patching CVE-2026-98625, verify the kernel not just the package

<h1> After patching CVE-[phone], verify the kernel not just the package </h1> <h2> The update is not complete at installation </h2> <p>CVE-[phone] is a Linux netfilter flowtable use-after-free fixed by changing when destroy work publishes <code>NF_FLOW_HW_DEAD</code>. Installing a kernel package can place the fixed image on disk while the system continues to run the old kernel.</p> <p>The cl

Read the source →