# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [net/rds: don't let rds_conn_shutdown() consume a concurrent drop](https://agentprime.io/advisories/CVE-2026-98068.md)
  `CVE-2026-98068` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [erofs: disable LZ4 rolling decompression for now](https://agentprime.io/advisories/CVE-2026-98067.md)
  `CVE-2026-98067` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ALSA: caiaq: Fix potential double-free at error path](https://agentprime.io/advisories/CVE-2026-98066.md)
  `CVE-2026-98066` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Reject key-less BTF for hash maps](https://agentprime.io/advisories/CVE-2026-98065.md)
  `CVE-2026-98065` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Fix NULL-ptr-deref when showing a void BTF type](https://agentprime.io/advisories/CVE-2026-98064.md)
  `CVE-2026-98064` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Fix NULL-ptr-deref in btf_var_show()](https://agentprime.io/advisories/CVE-2026-98063.md)
  `CVE-2026-98063` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Mark signal tracepoint siginfo arguments as scalar](https://agentprime.io/advisories/CVE-2026-98062.md)
  `CVE-2026-98062` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Reject tail calls directly from callback frames](https://agentprime.io/advisories/CVE-2026-98061.md)
  `CVE-2026-98061` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Reject resilient lock operations in rbtree callbacks](https://agentprime.io/advisories/CVE-2026-98060.md)
  `CVE-2026-98060` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Mark sched_process_wait argument as nullable](https://agentprime.io/advisories/CVE-2026-98059.md)
  `CVE-2026-98059` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Mark syscall helpers as sleepable](https://agentprime.io/advisories/CVE-2026-98058.md)
  `CVE-2026-98058` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ring-buffer: Add checking nr_subbufs to persistent ring buffer validation](https://agentprime.io/advisories/CVE-2026-98057.md)
  `CVE-2026-98057` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [nvme: remove stale namespaces by NSID range during scan](https://agentprime.io/advisories/CVE-2026-98056.md)
  `CVE-2026-98056` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2026
- [ASoC: Intel: avs: Clean up the bus when fetching ML caps fails](https://agentprime.io/advisories/CVE-2026-98055.md)
  `CVE-2026-98055` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ASoC: Intel: avs: Fix unbalanced module reference count](https://agentprime.io/advisories/CVE-2026-98054.md)
  `CVE-2026-98054` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ASoC: Intel: avs: Refactor and fix init_config access](https://agentprime.io/advisories/CVE-2026-98053.md)
  `CVE-2026-98053` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: bcmasp: clear txcb->last before writing each descriptor](https://agentprime.io/advisories/CVE-2026-98052.md)
  `CVE-2026-98052` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times](https://agentprime.io/advisories/CVE-2026-98051.md)
  `CVE-2026-98051` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context](https://agentprime.io/advisories/CVE-2026-98050.md)
  `CVE-2026-98050` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2026
- [bpf: zero extend the result of an arena 32-bit cmpxchg](https://agentprime.io/advisories/CVE-2026-98049.md)
  `CVE-2026-98049` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: don't rewrite bpf_fastcall patterns entered by a jump](https://agentprime.io/advisories/CVE-2026-98048.md)
  `CVE-2026-98048` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Check ancestor frames for rbtree callbacks](https://agentprime.io/advisories/CVE-2026-98047.md)
  `CVE-2026-98047` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Mark bpf_btf_find_by_name_kind() as sleepable](https://agentprime.io/advisories/CVE-2026-98046.md)
  `CVE-2026-98046` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Mark faultable stack helpers as sleepable](https://agentprime.io/advisories/CVE-2026-98045.md)
  `CVE-2026-98045` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Reject legacy packet loads from callbacks](https://agentprime.io/advisories/CVE-2026-98044.md)
  `CVE-2026-98044` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Don't infer non-NULL from a pointer with an unbounded offset](https://agentprime.io/advisories/CVE-2026-98043.md)
  `CVE-2026-98043` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Don't resurrect a scalar id dropped by collect_linked_regs()](https://agentprime.io/advisories/CVE-2026-98042.md)
  `CVE-2026-98042` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Don't predict JMP32 pointer vs zero comparisons](https://agentprime.io/advisories/CVE-2026-98041.md)
  `CVE-2026-98041` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 25 Sept 2026
- [bpf: Mark the zero register precise for a register-form NULL check](https://agentprime.io/advisories/CVE-2026-98040.md)
  `CVE-2026-98040` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Require MEM_PERCPU for percpu kptr stores](https://agentprime.io/advisories/CVE-2026-98039.md)
  `CVE-2026-98039` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Keep refcount_acquire nullable for borrowed RCU kptrs](https://agentprime.io/advisories/CVE-2026-98038.md)
  `CVE-2026-98038` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Reject untrusted allocated-object pointers](https://agentprime.io/advisories/CVE-2026-98037.md)
  `CVE-2026-98037` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Preserve special fields in recycled rhtab elements](https://agentprime.io/advisories/CVE-2026-98036.md)
  `CVE-2026-98036` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Cancel special fields when recycling rhtab elements](https://agentprime.io/advisories/CVE-2026-98035.md)
  `CVE-2026-98035` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Mark NULL kptr stores precise](https://agentprime.io/advisories/CVE-2026-98034.md)
  `CVE-2026-98034` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Preserve inner map identity in callback frames](https://agentprime.io/advisories/CVE-2026-98033.md)
  `CVE-2026-98033` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [tracing: Fix subbuf resize races with trace_pipe_raw readers](https://agentprime.io/advisories/CVE-2026-98032.md)
  `CVE-2026-98032` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [nexthop: Initialize extack in remove_nh_grp_entry()](https://agentprime.io/advisories/CVE-2026-98031.md)
  `CVE-2026-98031` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size](https://agentprime.io/advisories/CVE-2026-98030.md)
  `CVE-2026-98030` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 25 Sept 2026
- [eth: nfp: bound the ntuple rule dump by the caller's buffer size](https://agentprime.io/advisories/CVE-2026-98029.md)
  `CVE-2026-98029` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 25 Sept 2026
- [eth: nfp: drop the replaced rule from the list when reprogramming fails](https://agentprime.io/advisories/CVE-2026-98028.md)
  `CVE-2026-98028` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size](https://agentprime.io/advisories/CVE-2026-98027.md)
  `CVE-2026-98027` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 25 Sept 2026
- [net: bridge: mcast: properly convert mglist to rcu](https://agentprime.io/advisories/CVE-2026-98026.md)
  `CVE-2026-98026` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow](https://agentprime.io/advisories/CVE-2026-98025.md)
  `CVE-2026-98025` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [s390/ism: folio_put() after error](https://agentprime.io/advisories/CVE-2026-98024.md)
  `CVE-2026-98024` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [vxlan: reject dynamic fdb entries that reference a nexthop id](https://agentprime.io/advisories/CVE-2026-98023.md)
  `CVE-2026-98023` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations](https://agentprime.io/advisories/CVE-2026-98022.md)
  `CVE-2026-98022` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: reject oversized tx_queue_len at netlink parse time](https://agentprime.io/advisories/CVE-2026-98021.md)
  `CVE-2026-98021` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [pds_core: fix cmd_regs access racing BAR unmap on reset](https://agentprime.io/advisories/CVE-2026-98020.md)
  `CVE-2026-98020` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: mark a NULL call argument precise](https://agentprime.io/advisories/CVE-2026-98019.md)
  `CVE-2026-98019` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: mctp: i3c: serialize probe with bus removal](https://agentprime.io/advisories/CVE-2026-98018.md)
  `CVE-2026-98018` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net/sched: defer qdisc freeing after failed creation](https://agentprime.io/advisories/CVE-2026-98017.md)
  `CVE-2026-98017` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [net/mlx5e: Fix use-after-free race in sample_restore_put()](https://agentprime.io/advisories/CVE-2026-98016.md)
  `CVE-2026-98016` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put](https://agentprime.io/advisories/CVE-2026-98015.md)
  `CVE-2026-98015` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net/mlx5: E-Switch, prevent mc_list repopulation during vport disable](https://agentprime.io/advisories/CVE-2026-98014.md)
  `CVE-2026-98014` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net/sched: fq_pie: clamp quantum in change path](https://agentprime.io/advisories/CVE-2026-98013.md)
  `CVE-2026-98013` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net/sched: sfq: clamp quantum in change path](https://agentprime.io/advisories/CVE-2026-98012.md)
  `CVE-2026-98012` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net/sched: hhf: clamp quantum in change and init paths](https://agentprime.io/advisories/CVE-2026-98011.md)
  `CVE-2026-98011` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net/sched: drr: clamp quantum in change class](https://agentprime.io/advisories/CVE-2026-98010.md)
  `CVE-2026-98010` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net/sched: ets: clamp quantum in parse and fallback paths](https://agentprime.io/advisories/CVE-2026-98009.md)
  `CVE-2026-98009` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTI1VDEwOjIzOjM0LjE0NDAwMFoiLCJDVkUtMjAyNi05ODAwOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTI1VDEwOjI0OjEwLjg4NzAwMFoiLCJDVkUtMjAyNi05ODA2OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTI1VDEwOjI0OjEwLjg4NzAwMFoiLCJDVkUtMjAyNi05ODA2OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.