# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().](https://agentprime.io/advisories/CVE-2026-98300.md)
  `CVE-2026-98300` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [tcp: do not let tcp_rmem be set below 4096](https://agentprime.io/advisories/CVE-2026-98299.md)
  `CVE-2026-98299` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()](https://agentprime.io/advisories/CVE-2026-98298.md)
  `CVE-2026-98298` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained](https://agentprime.io/advisories/CVE-2026-98297.md)
  `CVE-2026-98297` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [Bluetooth: btintel_pcie: validate TX skb length in send_sync](https://agentprime.io/advisories/CVE-2026-98296.md)
  `CVE-2026-98296` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [Bluetooth: coredump: Quiesce dump work on unregister](https://agentprime.io/advisories/CVE-2026-98295.md)
  `CVE-2026-98295` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [Bluetooth: hci_qca: Do not write to the serial port after it is closed](https://agentprime.io/advisories/CVE-2026-98294.md)
  `CVE-2026-98294` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()](https://agentprime.io/advisories/CVE-2026-98293.md)
  `CVE-2026-98293` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access](https://agentprime.io/advisories/CVE-2026-98292.md)
  `CVE-2026-98292` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit](https://agentprime.io/advisories/CVE-2026-98291.md)
  `CVE-2026-98291` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup](https://agentprime.io/advisories/CVE-2026-98290.md)
  `CVE-2026-98290` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 6 Oct 2026
- [af_unix: Unify scc_index when finalising SCC in \_\_unix_walk_scc().](https://agentprime.io/advisories/CVE-2026-98289.md)
  `CVE-2026-98289` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [net: stmmac: fix TSO header length truncation](https://agentprime.io/advisories/CVE-2026-98288.md)
  `CVE-2026-98288` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [pppoatm: ensure a writable skb header and linear data](https://agentprime.io/advisories/CVE-2026-98287.md)
  `CVE-2026-98287` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown](https://agentprime.io/advisories/CVE-2026-98286.md)
  `CVE-2026-98286` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [net: bridge: vlan: fix bugs caused by switchdev deletion errors](https://agentprime.io/advisories/CVE-2026-98285.md)
  `CVE-2026-98285` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [netlink: do not free nlk->groups while lockless readers can use it](https://agentprime.io/advisories/CVE-2026-98284.md)
  `CVE-2026-98284` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()](https://agentprime.io/advisories/CVE-2026-98283.md)
  `CVE-2026-98283` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026
- [powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba](https://agentprime.io/advisories/CVE-2026-98282.md)
  `CVE-2026-98282` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026
- [futex: Also allocate private hash on vfork()](https://agentprime.io/advisories/CVE-2026-98281.md)
  `CVE-2026-98281` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [drm/xe/i2c: Disable IRQ on unbind](https://agentprime.io/advisories/CVE-2026-98280.md)
  `CVE-2026-98280` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [btrfs: handle lack of space when cleaning up verity items](https://agentprime.io/advisories/CVE-2026-98279.md)
  `CVE-2026-98279` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check](https://agentprime.io/advisories/CVE-2026-98278.md)
  `CVE-2026-98278` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [eth: fbnic: ring the doorbell if a burst ends in a drop](https://agentprime.io/advisories/CVE-2026-98277.md)
  `CVE-2026-98277` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [net: lock the socket in sock_gettstamp()](https://agentprime.io/advisories/CVE-2026-98276.md)
  `CVE-2026-98276` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [net: ethernet: cortina: Ack RX overrun interrupt correctly](https://agentprime.io/advisories/CVE-2026-98275.md)
  `CVE-2026-98275` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()](https://agentprime.io/advisories/CVE-2026-98274.md)
  `CVE-2026-98274` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [x86/kprobes: Fix crash when probing CS CALL instructions](https://agentprime.io/advisories/CVE-2026-98273.md)
  `CVE-2026-98273` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [net: mvpp2: prevent buffer overflow in page_pool allocation](https://agentprime.io/advisories/CVE-2026-98272.md)
  `CVE-2026-98272` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [net: skbuff: do not leave stale header offsets after pskb_carve()](https://agentprime.io/advisories/CVE-2026-98271.md)
  `CVE-2026-98271` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [drm/amdgpu: check ras and obj before dereference](https://agentprime.io/advisories/CVE-2026-98270.md)
  `CVE-2026-98270` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [btrfs: abort transaction on failure to update inode for hole punching and reflinking](https://agentprime.io/advisories/CVE-2026-98269.md)
  `CVE-2026-98269` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [perf: Fix null pointer access in is_include_guest_event()](https://agentprime.io/advisories/CVE-2026-98268.md)
  `CVE-2026-98268` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [9p: Fix v9fs_issue_write() to update i_size and remote_i_size](https://agentprime.io/advisories/CVE-2026-98267.md)
  `CVE-2026-98267` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [ALSA: core: Fix potential UAF after asynchronous card release](https://agentprime.io/advisories/CVE-2026-98266.md)
  `CVE-2026-98266` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity](https://agentprime.io/advisories/CVE-2026-98265.md)
  `CVE-2026-98265` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [ALSA: virtio: reset device before deleting virtqueues](https://agentprime.io/advisories/CVE-2026-98264.md)
  `CVE-2026-98264` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type](https://agentprime.io/advisories/CVE-2026-98263.md)
  `CVE-2026-98263` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY](https://agentprime.io/advisories/CVE-2026-98262.md)
  `CVE-2026-98262` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [cifs: Fix server use-after-free in cifs_chan_skip_or_disable()](https://agentprime.io/advisories/CVE-2026-98261.md)
  `CVE-2026-98261` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 6 Oct 2026
- [exec: Cleanup POSIX timers right after de_thread()](https://agentprime.io/advisories/CVE-2026-98260.md)
  `CVE-2026-98260` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [fs/dax: check zero or empty entry before converting xarray entry](https://agentprime.io/advisories/CVE-2026-98259.md)
  `CVE-2026-98259` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list](https://agentprime.io/advisories/CVE-2026-98258.md)
  `CVE-2026-98258` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [rds: ib: use rds_conn_drop() on protocol version mismatch](https://agentprime.io/advisories/CVE-2026-98257.md)
  `CVE-2026-98257` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 6 Oct 2026
- [signal: Prevent exec() race](https://agentprime.io/advisories/CVE-2026-98256.md)
  `CVE-2026-98256` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [tcp: exclude old ACKs from tcp fast path](https://agentprime.io/advisories/CVE-2026-98255.md)
  `CVE-2026-98255` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [swiotlb: use the adjusted address for the highmem page lookup](https://agentprime.io/advisories/CVE-2026-98254.md)
  `CVE-2026-98254` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [RDMA/ucma: Serialize join and leave on copy_to_user failure](https://agentprime.io/advisories/CVE-2026-98253.md)
  `CVE-2026-98253` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()](https://agentprime.io/advisories/CVE-2026-98252.md)
  `CVE-2026-98252` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 6 Oct 2026
- [openvswitch: avoid reallocating confirmed conntrack labels](https://agentprime.io/advisories/CVE-2026-98251.md)
  `CVE-2026-98251` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [nfsd: fix handling of NFSEXP_PNFS in the netlink codepath](https://agentprime.io/advisories/CVE-2026-98250.md)
  `CVE-2026-98250` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc](https://agentprime.io/advisories/CVE-2026-98249.md)
  `CVE-2026-98249` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [arm64: percpu: Fix LSE operations on {8,16}-bit types](https://agentprime.io/advisories/CVE-2026-98248.md)
  `CVE-2026-98248` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [Bluetooth: hci_codec: validate vendor codec count length](https://agentprime.io/advisories/CVE-2026-98247.md)
  `CVE-2026-98247` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [Bluetooth: hci_sync: Serialize local codec list cleanup](https://agentprime.io/advisories/CVE-2026-98246.md)
  `CVE-2026-98246` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()](https://agentprime.io/advisories/CVE-2026-98245.md)
  `CVE-2026-98245` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [btrfs: clear free space tree creation state on rebuild failure](https://agentprime.io/advisories/CVE-2026-98244.md)
  `CVE-2026-98244` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3](https://agentprime.io/advisories/CVE-2026-98243.md)
  `CVE-2026-98243` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026
- [dma-buf: Fix silent overflow for phys vec to sgt](https://agentprime.io/advisories/CVE-2026-98242.md)
  `CVE-2026-98242` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [ipv6: xfrm: use full sockets in local error paths](https://agentprime.io/advisories/CVE-2026-98241.md)
  `CVE-2026-98241` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTA2VDA4OjQ1OjExLjk1NDAwMFoiLCJDVkUtMjAyNi05ODI0MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTA2VDA4OjQ1OjU4LjkwODAwMFoiLCJDVkUtMjAyNi05ODMwMSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTA2VDA4OjQ1OjU4LjkwODAwMFoiLCJDVkUtMjAyNi05ODMwMSJd>. Everything for agents: <https://agentprime.io/llms.txt>.