# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [net: ip_tunnel: initialize \`options_len\` before referencing options](https://agentprime.io/advisories/CVE-2026-98240.md)
  `CVE-2026-98240` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [net: lan743x: fix RX checksum use-after-free](https://agentprime.io/advisories/CVE-2026-98239.md)
  `CVE-2026-98239` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 6 Oct 2026
- [net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()](https://agentprime.io/advisories/CVE-2026-98238.md)
  `CVE-2026-98238` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain](https://agentprime.io/advisories/CVE-2026-98237.md)
  `CVE-2026-98237` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value](https://agentprime.io/advisories/CVE-2026-98236.md)
  `CVE-2026-98236` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [net/sched: act_api: release tail references on DELACTION failure](https://agentprime.io/advisories/CVE-2026-98235.md)
  `CVE-2026-98235` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [net/sched: hhf: cap hh_flows_limit at change time](https://agentprime.io/advisories/CVE-2026-98234.md)
  `CVE-2026-98234` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [net/packet: clear RX owner on VNET header error](https://agentprime.io/advisories/CVE-2026-98233.md)
  `CVE-2026-98233` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()](https://agentprime.io/advisories/CVE-2026-98232.md)
  `CVE-2026-98232` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [xfrm: serialize state GC with device state flush](https://agentprime.io/advisories/CVE-2026-98231.md)
  `CVE-2026-98231` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [xfrm: use hlist_del_init_rcu for state_cache and state_cache_input](https://agentprime.io/advisories/CVE-2026-98230.md)
  `CVE-2026-98230` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 6 Oct 2026
- [xfrm: save input state data before secpath resets](https://agentprime.io/advisories/CVE-2026-98229.md)
  `CVE-2026-98229` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ](https://agentprime.io/advisories/CVE-2026-98228.md)
  `CVE-2026-98228` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [memstick: ms_block: destroy io_queue workqueue on removal](https://agentprime.io/advisories/CVE-2026-98227.md)
  `CVE-2026-98227` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count](https://agentprime.io/advisories/CVE-2026-98226.md)
  `CVE-2026-98226` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem](https://agentprime.io/advisories/CVE-2026-98225.md)
  `CVE-2026-98225` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [mm/vma: correctly unaccount on mmap_prepare() failure](https://agentprime.io/advisories/CVE-2026-98224.md)
  `CVE-2026-98224` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [mm: filemap: retain mapped dropbehind folios](https://agentprime.io/advisories/CVE-2026-98223.md)
  `CVE-2026-98223` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [KEYS: encrypted: fix integer overflow of datablob_len](https://agentprime.io/advisories/CVE-2026-98222.md)
  `CVE-2026-98222` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [KEYS: trusted: Fix tpm2_load_cmd() boundary check](https://agentprime.io/advisories/CVE-2026-98221.md)
  `CVE-2026-98221` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [sched_ext: Fix NULL sched deref in kfunc sub-sched error paths](https://agentprime.io/advisories/CVE-2026-98220.md)
  `CVE-2026-98220` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [sched_ext: Close the pre-enable ops error claim window](https://agentprime.io/advisories/CVE-2026-98219.md)
  `CVE-2026-98219` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [i2c: atr: fix dangling adapter pointer on add failure](https://agentprime.io/advisories/CVE-2026-98218.md)
  `CVE-2026-98218` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [IB/mlx4: Fix use-after-free on pkey sysfs registration failure](https://agentprime.io/advisories/CVE-2026-98217.md)
  `CVE-2026-98217` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [IB/hfi1: Fix the PIO_CRED credit-return mmap](https://agentprime.io/advisories/CVE-2026-98216.md)
  `CVE-2026-98216` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026
- [selinux: preserve user SID across nested backing files](https://agentprime.io/advisories/CVE-2026-98215.md)
  `CVE-2026-98215` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [selinux: recheck intermediate backing files on mprotect()](https://agentprime.io/advisories/CVE-2026-98214.md)
  `CVE-2026-98214` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [mmc: core: Cancel SDIO IRQ work before freeing host](https://agentprime.io/advisories/CVE-2026-98213.md)
  `CVE-2026-98213` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [mmc: hsq: Fix use-after-free in retry work](https://agentprime.io/advisories/CVE-2026-98212.md)
  `CVE-2026-98212` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [mmc: mmci: Fix use-after-free in busy-timeout work](https://agentprime.io/advisories/CVE-2026-98211.md)
  `CVE-2026-98211` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [mmc: mxcmmc: cancel data work and watchdog on remove](https://agentprime.io/advisories/CVE-2026-98210.md)
  `CVE-2026-98210` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [mmc: sdhci-of-aspeed: Remove children before releasing SDC resources](https://agentprime.io/advisories/CVE-2026-98209.md)
  `CVE-2026-98209` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [mmc: sdio_uart: fix xmit_fifo leak when the port table is full](https://agentprime.io/advisories/CVE-2026-98208.md)
  `CVE-2026-98208` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [mmc: spi: reset bytes_xfered before retrying CRC failures](https://agentprime.io/advisories/CVE-2026-98207.md)
  `CVE-2026-98207` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [Input: cyttsp5 - clamp the HID report size before memcpy](https://agentprime.io/advisories/CVE-2026-98206.md)
  `CVE-2026-98206` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [Input: evdev - zero absinfo before partial copy in EVIOCSABS](https://agentprime.io/advisories/CVE-2026-98205.md)
  `CVE-2026-98205` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()](https://agentprime.io/advisories/CVE-2026-98204.md)
  `CVE-2026-98204` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [Input: soc_button_array - check btns_desc->package.count](https://agentprime.io/advisories/CVE-2026-98203.md)
  `CVE-2026-98203` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound](https://agentprime.io/advisories/CVE-2026-98202.md)
  `CVE-2026-98202` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [Input: zero ff_effect before compat copy in input_ff_effect_from_user](https://agentprime.io/advisories/CVE-2026-98201.md)
  `CVE-2026-98201` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()](https://agentprime.io/advisories/CVE-2026-98200.md)
  `CVE-2026-98200` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [hwmon: (pmbus/core) increase number of phases and add new mask](https://agentprime.io/advisories/CVE-2026-98199.md)
  `CVE-2026-98199` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [hwmon: (pwm-fan) Stop RPM timer before freeing tach data](https://agentprime.io/advisories/CVE-2026-98198.md)
  `CVE-2026-98198` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove](https://agentprime.io/advisories/CVE-2026-98197.md)
  `CVE-2026-98197` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 6 Oct 2026
- [wifi: brcmsmac: fix UAF in brcms_free_timer()](https://agentprime.io/advisories/CVE-2026-98196.md)
  `CVE-2026-98196` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: iwlegacy: fix broadcast stations deallocation](https://agentprime.io/advisories/CVE-2026-98195.md)
  `CVE-2026-98195` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: libertas_tf: fix UAF in lbtf_free_adapter()](https://agentprime.io/advisories/CVE-2026-98194.md)
  `CVE-2026-98194` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: libipw: reject TKIP frames without a full MIC](https://agentprime.io/advisories/CVE-2026-98193.md)
  `CVE-2026-98193` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown](https://agentprime.io/advisories/CVE-2026-98192.md)
  `CVE-2026-98192` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: wlcore: release runtime PM ref on regdomain config failure](https://agentprime.io/advisories/CVE-2026-98191.md)
  `CVE-2026-98191` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: wilc1000: fix out-of-bounds read in P2P public action frames](https://agentprime.io/advisories/CVE-2026-98190.md)
  `CVE-2026-98190` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()](https://agentprime.io/advisories/CVE-2026-98189.md)
  `CVE-2026-98189` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: p54: validate curve data length in the calibration curve converters](https://agentprime.io/advisories/CVE-2026-98188.md)
  `CVE-2026-98188` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST](https://agentprime.io/advisories/CVE-2026-98187.md)
  `CVE-2026-98187` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length](https://agentprime.io/advisories/CVE-2026-98186.md)
  `CVE-2026-98186` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: mwifiex: validate scan response extents](https://agentprime.io/advisories/CVE-2026-98185.md)
  `CVE-2026-98185` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: mwifiex: prevent authentication frame length truncation](https://agentprime.io/advisories/CVE-2026-98184.md)
  `CVE-2026-98184` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: mac80211: avoid out-of-bounds read for empty PREQ elements](https://agentprime.io/advisories/CVE-2026-98183.md)
  `CVE-2026-98183` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: mac80211: refuse to make a monitor active when it has no queue](https://agentprime.io/advisories/CVE-2026-98182.md)
  `CVE-2026-98182` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [drm/gud: fix out-of-bounds write in gud_plane_atomic_check()](https://agentprime.io/advisories/CVE-2026-98181.md)
  `CVE-2026-98181` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTA2VDA4OjQ0OjI0LjI4NDAwMFoiLCJDVkUtMjAyNi05ODE4MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTA2VDA4OjQ1OjExLjk1NDAwMFoiLCJDVkUtMjAyNi05ODI0MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTA2VDA4OjQ1OjExLjk1NDAwMFoiLCJDVkUtMjAyNi05ODI0MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.