# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [drm/msm: RCU-free the scheduler-containing ring and VM objects](https://agentprime.io/advisories/CVE-2026-98180.md)
  `CVE-2026-98180` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026
- [drm/amdgpu: fix rmmio iounmap skipped on device removal](https://agentprime.io/advisories/CVE-2026-98179.md)
  `CVE-2026-98179` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [drm/amdgpu: Skip KFD mapping clear before initialization](https://agentprime.io/advisories/CVE-2026-98178.md)
  `CVE-2026-98178` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [drm/amdkfd: Avoid integer underflow in EOP ring size calculation.](https://agentprime.io/advisories/CVE-2026-98177.md)
  `CVE-2026-98177` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc](https://agentprime.io/advisories/CVE-2026-98176.md)
  `CVE-2026-98176` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [smb: client: cancel reconnect work in clean_demultiplex_info()](https://agentprime.io/advisories/CVE-2026-98175.md)
  `CVE-2026-98175` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 6 Oct 2026
- [smb: client: fix rlist race and missing initialization](https://agentprime.io/advisories/CVE-2026-98174.md)
  `CVE-2026-98174` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 6 Oct 2026
- [smb: client: fix use-after-free of iface in cifs_try_adding_channels()](https://agentprime.io/advisories/CVE-2026-98173.md)
  `CVE-2026-98173` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 6 Oct 2026
- [smb: client: fix smbd_connection leak on cifs_get_tcp_session() error](https://agentprime.io/advisories/CVE-2026-98172.md)
  `CVE-2026-98172` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs](https://agentprime.io/advisories/CVE-2026-98171.md)
  `CVE-2026-98171` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026
- [smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()](https://agentprime.io/advisories/CVE-2026-98170.md)
  `CVE-2026-98170` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [smb: client: fix potential OOB read in smb3_enum_snapshots()](https://agentprime.io/advisories/CVE-2026-98169.md)
  `CVE-2026-98169` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026
- [smb: client: fix reparse buffer bounds in cifs_query_reparse_point()](https://agentprime.io/advisories/CVE-2026-98168.md)
  `CVE-2026-98168` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [smb: client: fix server->total_read for compound encrypted PDUs](https://agentprime.io/advisories/CVE-2026-98167.md)
  `CVE-2026-98167` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [drm/ttm: fix swapped-out resources never leaving their bulk_move range](https://agentprime.io/advisories/CVE-2026-98166.md)
  `CVE-2026-98166` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [KVM: x86/mmu: Check write tracking in all address spaces](https://agentprime.io/advisories/CVE-2026-98164.md)
  `CVE-2026-98164` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026
- [cgroup: Avoid iteration of dying tasks with zero refcount](https://agentprime.io/advisories/CVE-2026-98163.md)
  `CVE-2026-98163` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 26 Sept 2026
- [smb/server: fix tree connection leak in smb2_tree_connect()](https://agentprime.io/advisories/CVE-2026-98162.md)
  `CVE-2026-98162` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [nvdimm: pmem: keep PREFLUSH before data writes](https://agentprime.io/advisories/CVE-2026-98161.md)
  `CVE-2026-98161` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init()](https://agentprime.io/advisories/CVE-2026-98160.md)
  `CVE-2026-98160` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [usb: typec: ucsi: unregister debugfs entries on teardown](https://agentprime.io/advisories/CVE-2026-100079.md)
  `CVE-2026-100079` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [wifi: iwlwifi: mei: pass correct argument to function](https://agentprime.io/advisories/CVE-2026-100078.md)
  `CVE-2026-100078` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [drm/msm: Recover HW before retire hung submit](https://agentprime.io/advisories/CVE-2026-100077.md)
  `CVE-2026-100077` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths](https://agentprime.io/advisories/CVE-2026-100076.md)
  `CVE-2026-100076` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters](https://agentprime.io/advisories/CVE-2026-100075.md)
  `CVE-2026-100075` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Sept 2026
- [bpf: Mark bpf_refcount field as unique](https://agentprime.io/advisories/CVE-2026-100074.md)
  `CVE-2026-100074` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ext4: fix transaction overflow during writeback](https://agentprime.io/advisories/CVE-2026-100073.md)
  `CVE-2026-100073` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ACPI: platform: Use acpi_bus_get_primary_device()](https://agentprime.io/advisories/CVE-2026-100072.md)
  `CVE-2026-100072` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: hsr: free learned nodes on device setup failure](https://agentprime.io/advisories/CVE-2026-100071.md)
  `CVE-2026-100071` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet](https://agentprime.io/advisories/CVE-2026-100070.md)
  `CVE-2026-100070` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [wifi: mt76: mt7921: validate CLC firmware records](https://agentprime.io/advisories/CVE-2026-98159.md)
  `CVE-2026-98159` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ppp_async: drop the errored frame instead of resetting its headroom](https://agentprime.io/advisories/CVE-2026-98158.md)
  `CVE-2026-98158` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation](https://agentprime.io/advisories/CVE-2026-98157.md)
  `CVE-2026-98157` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [drm/virtio: use the DMA API for resource backing on Xen](https://agentprime.io/advisories/CVE-2026-98156.md)
  `CVE-2026-98156` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [accel/qaic: Address potential out-of-bounds read in resp_worker()](https://agentprime.io/advisories/CVE-2026-98155.md)
  `CVE-2026-98155` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [nvme-rdma: fix -EIO cleanup order in queue_rq](https://agentprime.io/advisories/CVE-2026-98154.md)
  `CVE-2026-98154` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 25 Sept 2026
- [nvme: fix racy access to FDP placement id array](https://agentprime.io/advisories/CVE-2026-98153.md)
  `CVE-2026-98153` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [nvmet-rdma: fix queue leak when connect backlog is exceeded](https://agentprime.io/advisories/CVE-2026-98152.md)
  `CVE-2026-98152` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic](https://agentprime.io/advisories/CVE-2026-98151.md)
  `CVE-2026-98151` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: Fix BPF_F_CPU validation for sparse CPU IDs](https://agentprime.io/advisories/CVE-2026-98150.md)
  `CVE-2026-98150` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 25 Sept 2026
- [bpf: Fix percpu map update indexing with sparse CPU IDs](https://agentprime.io/advisories/CVE-2026-98149.md)
  `CVE-2026-98149` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [drm/gud: validate GUD_ROTATION_0 is present in supported rotations](https://agentprime.io/advisories/CVE-2026-98148.md)
  `CVE-2026-98148` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [printk: Don't WARN on kthread_run failure.](https://agentprime.io/advisories/CVE-2026-98147.md)
  `CVE-2026-98147` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [accel/amdxdna: Remove \_\_counted_by from struct amdxdna_cmd_chain](https://agentprime.io/advisories/CVE-2026-98146.md)
  `CVE-2026-98146` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [accel/amdxdna: reject a command chain that carries no commands](https://agentprime.io/advisories/CVE-2026-98145.md)
  `CVE-2026-98145` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [accel/amdxdna: put the chained BO when its mapping fails](https://agentprime.io/advisories/CVE-2026-98144.md)
  `CVE-2026-98144` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [accel: ethosu: Don't read the U65 rounding mode as a storage mode](https://agentprime.io/advisories/CVE-2026-98143.md)
  `CVE-2026-98143` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [drm/cirrus-qemu: Validate BAR0 size during probe](https://agentprime.io/advisories/CVE-2026-98142.md)
  `CVE-2026-98142` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ntfs: propagate reparse index insertion failure](https://agentprime.io/advisories/CVE-2026-98141.md)
  `CVE-2026-98141` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ntfs: fix kmap_local leak in write_mft_record_nolock() error paths](https://agentprime.io/advisories/CVE-2026-98140.md)
  `CVE-2026-98140` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ntfs: only count successfully cleared runs when freeing clusters](https://agentprime.io/advisories/CVE-2026-98139.md)
  `CVE-2026-98139` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ntfs: do not mark the volume clean in sync_fs when errors were recorded](https://agentprime.io/advisories/CVE-2026-98138.md)
  `CVE-2026-98138` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ntfs: treat any nonzero dio zero-range return as an error](https://agentprime.io/advisories/CVE-2026-98137.md)
  `CVE-2026-98137` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ntfs: bound $AttrDef table walk to the loaded table size](https://agentprime.io/advisories/CVE-2026-98136.md)
  `CVE-2026-98136` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ntfs: reject invalid sectors_per_cluster in the boot sector](https://agentprime.io/advisories/CVE-2026-98135.md)
  `CVE-2026-98135` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: check_cond_jmp_op(): properly infer if register is null](https://agentprime.io/advisories/CVE-2026-98134.md)
  `CVE-2026-98134` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ntfs: leave HasEA flag untouched on setxattr failure](https://agentprime.io/advisories/CVE-2026-98133.md)
  `CVE-2026-98133` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bpf: don't downgrade half-dead scalar zero spills to STACK_ZERO](https://agentprime.io/advisories/CVE-2026-98132.md)
  `CVE-2026-98132` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: stmmac: fix dma mapping leak in stmmac_tso_xmit()](https://agentprime.io/advisories/CVE-2026-98131.md)
  `CVE-2026-98131` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START](https://agentprime.io/advisories/CVE-2026-98130.md)
  `CVE-2026-98130` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 25 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTI1VDEwOjM2OjEwLjI0MzAwMFoiLCJDVkUtMjAyNi05ODEzMCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTA2VDA4OjQ0OjI0LjI4NDAwMFoiLCJDVkUtMjAyNi05ODE4MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTA2VDA4OjQ0OjI0LjI4NDAwMFoiLCJDVkUtMjAyNi05ODE4MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.