# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [net: macb: fix NULL pointer dereference on unbind with fixed-link](https://agentprime.io/advisories/CVE-2026-98008.md)
  `CVE-2026-98008` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Reject non-scalar bpf_loop iteration counts](https://agentprime.io/advisories/CVE-2026-98007.md)
  `CVE-2026-98007` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev](https://agentprime.io/advisories/CVE-2026-98006.md)
  `CVE-2026-98006` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [erofs: delimit inode_share cache key components](https://agentprime.io/advisories/CVE-2026-98005.md)
  `CVE-2026-98005` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [iommu/riscv: Serialize command queue publishing](https://agentprime.io/advisories/CVE-2026-98004.md)
  `CVE-2026-98004` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [iommu/amd: Do not reallocate GA log buffers on resume](https://agentprime.io/advisories/CVE-2026-98003.md)
  `CVE-2026-98003` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [iommu/amd: Fix ineffective error check in nested domain allocation](https://agentprime.io/advisories/CVE-2026-98002.md)
  `CVE-2026-98002` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [hwmon: (ltc4282) Make sure clk_init_data is fully initialized](https://agentprime.io/advisories/CVE-2026-98001.md)
  `CVE-2026-98001` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [hwmon: Fix potential UAF in pec_store](https://agentprime.io/advisories/CVE-2026-98000.md)
  `CVE-2026-98000` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [netfilter: nfnetlink_log: cope with concurrent instance destruction](https://agentprime.io/advisories/CVE-2026-97998.md)
  `CVE-2026-97998` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [virtio_ring: fix stale descriptor flags after a failed packed add](https://agentprime.io/advisories/CVE-2026-97997.md)
  `CVE-2026-97997` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [virtio: fix use-after-free in unregister_virtio_device()](https://agentprime.io/advisories/CVE-2026-97996.md)
  `CVE-2026-97996` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [virtio_console: do not free control-out buffers on remove](https://agentprime.io/advisories/CVE-2026-97995.md)
  `CVE-2026-97995` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [vhost/vdpa: reject VRING_NUM larger than device max](https://agentprime.io/advisories/CVE-2026-97994.md)
  `CVE-2026-97994` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx](https://agentprime.io/advisories/CVE-2026-97993.md)
  `CVE-2026-97993` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [vhost-vdpa: protect config_ctx from being freed under the config callback](https://agentprime.io/advisories/CVE-2026-97992.md)
  `CVE-2026-97992` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [vdpa_sim_blk: reject out-of-range sector starts](https://agentprime.io/advisories/CVE-2026-97991.md)
  `CVE-2026-97991` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [vdpa_sim_net: check TX pull result before RX copy](https://agentprime.io/advisories/CVE-2026-97990.md)
  `CVE-2026-97990` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2026
- [vduse: validate virtqueue alignment](https://agentprime.io/advisories/CVE-2026-97989.md)
  `CVE-2026-97989` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [vhost: invalidate vring access on IOTLB transitions](https://agentprime.io/advisories/CVE-2026-97988.md)
  `CVE-2026-97988` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [virtio_input: reset device if input_register_device() fails](https://agentprime.io/advisories/CVE-2026-97987.md)
  `CVE-2026-97987` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [virtio_input: stop callbacks before unregistering input device](https://agentprime.io/advisories/CVE-2026-97986.md)
  `CVE-2026-97986` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [af_unix: Update last skb marker in manage_oob().](https://agentprime.io/advisories/CVE-2026-97985.md)
  `CVE-2026-97985` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: ipv6: Fix UDP length overflow with PMTU discover and big MTU](https://agentprime.io/advisories/CVE-2026-97984.md)
  `CVE-2026-97984` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [vduse: return compat ioctl results directly](https://agentprime.io/advisories/CVE-2026-97983.md)
  `CVE-2026-97983` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: ethernet: cortina: Fix budget accounting](https://agentprime.io/advisories/CVE-2026-97982.md)
  `CVE-2026-97982` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: ethernet: cortina: Count dropped frames as NAPI work](https://agentprime.io/advisories/CVE-2026-97981.md)
  `CVE-2026-97981` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [s390/debug: Fix NULL pointer dereference in debug_set_level()](https://agentprime.io/advisories/CVE-2026-97980.md)
  `CVE-2026-97980` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ice: add missing xa_destroy for sched_node_ids](https://agentprime.io/advisories/CVE-2026-97979.md)
  `CVE-2026-97979` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [eth: ice: don't dereference pointers from TP_printk()](https://agentprime.io/advisories/CVE-2026-97978.md)
  `CVE-2026-97978` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [Bluetooth: btusb: Fix UAF of btusb_data by rx_work](https://agentprime.io/advisories/CVE-2026-97977.md)
  `CVE-2026-97977` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [Bluetooth: btintel_pcie: validate packet_len before skb_put_data](https://agentprime.io/advisories/CVE-2026-97976.md)
  `CVE-2026-97976` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del()](https://agentprime.io/advisories/CVE-2026-97975.md)
  `CVE-2026-97975` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ipv6: null-check fib6_node before accessing in \_\_ip6_del_rt_siblings()](https://agentprime.io/advisories/CVE-2026-97974.md)
  `CVE-2026-97974` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: macb: destroy the phylink instance on the probe error path](https://agentprime.io/advisories/CVE-2026-97973.md)
  `CVE-2026-97973` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: macb: put the "mdio" child node reference on success](https://agentprime.io/advisories/CVE-2026-97972.md)
  `CVE-2026-97972` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [nstree: check listing permission before taking a namespace reference](https://agentprime.io/advisories/CVE-2026-97971.md)
  `CVE-2026-97971` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [watchdog: msc313e: Avoid division by zero](https://agentprime.io/advisories/CVE-2026-97970.md)
  `CVE-2026-97970` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [watchdog: msc313e: Fix clock leak and spurious timer in settimeout()](https://agentprime.io/advisories/CVE-2026-97969.md)
  `CVE-2026-97969` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [hwmon: (corsair-cpro) Create debugfs entries after hwmon registration](https://agentprime.io/advisories/CVE-2026-97968.md)
  `CVE-2026-97968` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [hwmon: (corsair-cpro) Remove debugfs entries when probe fails](https://agentprime.io/advisories/CVE-2026-97967.md)
  `CVE-2026-97967` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [octeontx2-pf: reset HTB scheduler topology before freeing queues](https://agentprime.io/advisories/CVE-2026-97966.md)
  `CVE-2026-97966` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [vxlan: initialize \_md in vxlan_xmit_one()](https://agentprime.io/advisories/CVE-2026-97965.md)
  `CVE-2026-97965` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ppp_synctty: ensure a writeable skb header](https://agentprime.io/advisories/CVE-2026-97964.md)
  `CVE-2026-97964` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: stmmac: initialize ptp_lock at probe time](https://agentprime.io/advisories/CVE-2026-97963.md)
  `CVE-2026-97963` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net/mlx5e: Move representor vnic reporter to eswitch devlink port](https://agentprime.io/advisories/CVE-2026-97962.md)
  `CVE-2026-97962` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [perf/core: Allow list_del during perf_event_overflow()](https://agentprime.io/advisories/CVE-2026-97961.md)
  `CVE-2026-97961` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [perf/x86/intel: Prevent drain_pebs() reentry](https://agentprime.io/advisories/CVE-2026-97960.md)
  `CVE-2026-97960` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net/sched: cls_route: free emptied bucket on filter move](https://agentprime.io/advisories/CVE-2026-97959.md)
  `CVE-2026-97959` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain().](https://agentprime.io/advisories/CVE-2026-97958.md)
  `CVE-2026-97958` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: hinic: fix mailbox segment buffer overflow](https://agentprime.io/advisories/CVE-2026-97957.md)
  `CVE-2026-97957` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 25 Sept 2026
- [net: net_failover: Fix the deadlock in net_failover_slave_name_change()](https://agentprime.io/advisories/CVE-2026-97956.md)
  `CVE-2026-97956` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: mana: restore the XDP program pointer when pre-allocation fails](https://agentprime.io/advisories/CVE-2026-97955.md)
  `CVE-2026-97955` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net/rds: fix tcp stream corruption with large pages](https://agentprime.io/advisories/CVE-2026-97954.md)
  `CVE-2026-97954` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: stmmac: fix TX descriptor availability check for TSO traffic](https://agentprime.io/advisories/CVE-2026-97953.md)
  `CVE-2026-97953` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 25 Sept 2026
- [sunvdc: unmap LDC cookies when the descriptor send fails](https://agentprime.io/advisories/CVE-2026-97952.md)
  `CVE-2026-97952` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands](https://agentprime.io/advisories/CVE-2026-97951.md)
  `CVE-2026-97951` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [configfs: pin the symlink target's dirent instead of chasing ->ci_dentry](https://agentprime.io/advisories/CVE-2026-97950.md)
  `CVE-2026-97950` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [configfs: unhash the dentry before dropping the item in rmdir](https://agentprime.io/advisories/CVE-2026-97949.md)
  `CVE-2026-97949` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver](https://agentprime.io/advisories/CVE-2026-97948.md)
  `CVE-2026-97948` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTI1VDEwOjIyOjU3Ljc1NzAwMFoiLCJDVkUtMjAyNi05Nzk0OCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTI1VDEwOjIzOjM0LjE0NDAwMFoiLCJDVkUtMjAyNi05ODAwOSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTI1VDEwOjIzOjM0LjE0NDAwMFoiLCJDVkUtMjAyNi05ODAwOSJd>. Everything for agents: <https://agentprime.io/llms.txt>.