# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()](https://agentprime.io/advisories/CVE-2026-98129.md)
  `CVE-2026-98129` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()](https://agentprime.io/advisories/CVE-2026-98128.md)
  `CVE-2026-98128` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [smb/client: validate new EOF for insert range](https://agentprime.io/advisories/CVE-2026-98127.md)
  `CVE-2026-98127` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [smb/client: validate new EOF for zero range](https://agentprime.io/advisories/CVE-2026-98126.md)
  `CVE-2026-98126` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [smb/client: fix stale page cache in insert/collapse range](https://agentprime.io/advisories/CVE-2026-98125.md)
  `CVE-2026-98125` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [smb/client: invalidate fscache for fallocate range operations](https://agentprime.io/advisories/CVE-2026-98124.md)
  `CVE-2026-98124` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration](https://agentprime.io/advisories/CVE-2026-98123.md)
  `CVE-2026-98123` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()](https://agentprime.io/advisories/CVE-2026-98122.md)
  `CVE-2026-98122` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [watchdog: msc313e: Fix NULL pointer dereference in PM callbacks](https://agentprime.io/advisories/CVE-2026-98121.md)
  `CVE-2026-98121` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [netfs: Fix subreq ref leak](https://agentprime.io/advisories/CVE-2026-98120.md)
  `CVE-2026-98120` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [netfs: break unbuffered write when netfs_alloc_subrequest() fails](https://agentprime.io/advisories/CVE-2026-98119.md)
  `CVE-2026-98119` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [netfs: Fix readahead synchronisation issues by loading all folios upfront](https://agentprime.io/advisories/CVE-2026-98118.md)
  `CVE-2026-98118` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [cachefiles: Fix potential UAF/KASAN warning](https://agentprime.io/advisories/CVE-2026-98117.md)
  `CVE-2026-98117` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF](https://agentprime.io/advisories/CVE-2026-98116.md)
  `CVE-2026-98116` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [ksmbd: safely drain sessions during logoff](https://agentprime.io/advisories/CVE-2026-98115.md)
  `CVE-2026-98115` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 25 Sept 2026
- [ksmbd: propagate DACL parsing errors](https://agentprime.io/advisories/CVE-2026-98114.md)
  `CVE-2026-98114` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ksmbd: rate limit unmapped SID errors](https://agentprime.io/advisories/CVE-2026-98113.md)
  `CVE-2026-98113` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ksmbd: fix listener task lifetime on netdev events](https://agentprime.io/advisories/CVE-2026-98112.md)
  `CVE-2026-98112` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [Bluetooth: btintel: validate version TLV value lengths](https://agentprime.io/advisories/CVE-2026-98111.md)
  `CVE-2026-98111` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [Bluetooth: btintel: bound firmware ID by TLV length](https://agentprime.io/advisories/CVE-2026-98110.md)
  `CVE-2026-98110` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [Bluetooth: hci_core: Fix race condition during device registration](https://agentprime.io/advisories/CVE-2026-98109.md)
  `CVE-2026-98109` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan](https://agentprime.io/advisories/CVE-2026-98108.md)
  `CVE-2026-98108` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2026
- [Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect](https://agentprime.io/advisories/CVE-2026-98107.md)
  `CVE-2026-98107` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [drm/pagemap: Prevent double migration of device pages](https://agentprime.io/advisories/CVE-2026-98106.md)
  `CVE-2026-98106` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: ethernet: oa_tc6: Improve the error recovery](https://agentprime.io/advisories/CVE-2026-98105.md)
  `CVE-2026-98105` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted](https://agentprime.io/advisories/CVE-2026-98104.md)
  `CVE-2026-98104` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [igmp: convert struct ip_sf_list to RCU](https://agentprime.io/advisories/CVE-2026-98103.md)
  `CVE-2026-98103` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src()](https://agentprime.io/advisories/CVE-2026-98102.md)
  `CVE-2026-98102` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source()](https://agentprime.io/advisories/CVE-2026-98101.md)
  `CVE-2026-98101` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ipv6: mcast: use rcu_assign_pointer() for \_\_rcu list updates](https://agentprime.io/advisories/CVE-2026-98099.md)
  `CVE-2026-98099` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [tipc: fix NULL deref in tipc_named_node_up() on empty publication list](https://agentprime.io/advisories/CVE-2026-98098.md)
  `CVE-2026-98098` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [tipc: Dont send random pad bytes in RESET/ACTIVATE messages](https://agentprime.io/advisories/CVE-2026-98097.md)
  `CVE-2026-98097` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ipv6: sr: restore network header before routing and forwarding](https://agentprime.io/advisories/CVE-2026-98096.md)
  `CVE-2026-98096` · CVE record: Linux Linux · CVSS 7.4 High · Not analysed yet · Published 25 Sept 2026
- [af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header().](https://agentprime.io/advisories/CVE-2026-98095.md)
  `CVE-2026-98095` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [staging: fbtft: make dirty_lock IRQ-safe](https://agentprime.io/advisories/CVE-2026-98094.md)
  `CVE-2026-98094` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ASoC: fsl_micfil: balance mclk enable/disable](https://agentprime.io/advisories/CVE-2026-98093.md)
  `CVE-2026-98093` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close()](https://agentprime.io/advisories/CVE-2026-98092.md)
  `CVE-2026-98092` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [btrfs: detach failed sprout device from transaction update list](https://agentprime.io/advisories/CVE-2026-98091.md)
  `CVE-2026-98091` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [btrfs: restore active device pointers after failed sprout](https://agentprime.io/advisories/CVE-2026-98090.md)
  `CVE-2026-98090` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bonding: alb: fix uninitialized transport header access in alb_determine_nd()](https://agentprime.io/advisories/CVE-2026-98089.md)
  `CVE-2026-98089` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in \_base_assign_reply_queues()](https://agentprime.io/advisories/CVE-2026-98088.md)
  `CVE-2026-98088` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate](https://agentprime.io/advisories/CVE-2026-98087.md)
  `CVE-2026-98087` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ALSA: ump: do not touch legacy_rmidi before it exists](https://agentprime.io/advisories/CVE-2026-98086.md)
  `CVE-2026-98086` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: backtrack_insn(): Handle ld\_{abs,ind} subprog exit edge](https://agentprime.io/advisories/CVE-2026-98085.md)
  `CVE-2026-98085` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks](https://agentprime.io/advisories/CVE-2026-98084.md)
  `CVE-2026-98084` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [btrfs: fix transaction use-after-free in raid stripe insertion](https://agentprime.io/advisories/CVE-2026-98083.md)
  `CVE-2026-98083` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 25 Sept 2026
- [btrfs: fix the possible bioc_list memory leak during error](https://agentprime.io/advisories/CVE-2026-98082.md)
  `CVE-2026-98082` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [btrfs: zoned: finish active block group cleanup if call_zone_finish() fails](https://agentprime.io/advisories/CVE-2026-98081.md)
  `CVE-2026-98081` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [btrfs: do not force reloc root creation during qgroup_account_snapshot()](https://agentprime.io/advisories/CVE-2026-98080.md)
  `CVE-2026-98080` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [btrfs: zstd: fix lost wakeup when waiting for a workspace](https://agentprime.io/advisories/CVE-2026-98079.md)
  `CVE-2026-98079` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ipvs: fix reversed sequence option serialization](https://agentprime.io/advisories/CVE-2026-98078.md)
  `CVE-2026-98078` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()](https://agentprime.io/advisories/CVE-2026-98077.md)
  `CVE-2026-98077` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [tracing/probes: Fix use-after-free on field name/type of events with multiple probes](https://agentprime.io/advisories/CVE-2026-98076.md)
  `CVE-2026-98076` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: reject BPF_PSEUDO_FUNC reference to the main program](https://agentprime.io/advisories/CVE-2026-98075.md)
  `CVE-2026-98075` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bonding: do not clear curr_active_slave prematurely when releasing all slaves](https://agentprime.io/advisories/CVE-2026-98074.md)
  `CVE-2026-98074` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: Remove conflicting altnames for dying netns in \_\_dev_change_net_namespace().](https://agentprime.io/advisories/CVE-2026-98073.md)
  `CVE-2026-98073` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [net/rds: use wq_has_sleeper() in release_in_xmit()](https://agentprime.io/advisories/CVE-2026-98072.md)
  `CVE-2026-98072` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net/rds: clear cp_flags bits individually in rds_conn_path_reset()](https://agentprime.io/advisories/CVE-2026-98071.md)
  `CVE-2026-98071` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()](https://agentprime.io/advisories/CVE-2026-98070.md)
  `CVE-2026-98070` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 25 Sept 2026
- [net/rds: acquire the fastpath locks in rds_conn_shutdown()](https://agentprime.io/advisories/CVE-2026-98069.md)
  `CVE-2026-98069` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 25 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTI1VDEwOjI0OjEwLjg4NzAwMFoiLCJDVkUtMjAyNi05ODA2OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTI1VDEwOjM2OjEwLjI0MzAwMFoiLCJDVkUtMjAyNi05ODEzMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTI1VDEwOjM2OjEwLjI0MzAwMFoiLCJDVkUtMjAyNi05ODEzMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.