# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds](https://agentprime.io/advisories/CVE-2026-98360.md)
  `CVE-2026-98360` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 6 Oct 2026
- [RDMA/core: Reject unregistering netdevs in ib_get_eth_speed](https://agentprime.io/advisories/CVE-2026-98359.md)
  `CVE-2026-98359` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 6 Oct 2026
- [IB/iser: reject a remote invalidation of an unregistered direction](https://agentprime.io/advisories/CVE-2026-98358.md)
  `CVE-2026-98358` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [IB/isert: wait for deferred control PDU completions before releasing the connection](https://agentprime.io/advisories/CVE-2026-98357.md)
  `CVE-2026-98357` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 6 Oct 2026
- [RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup](https://agentprime.io/advisories/CVE-2026-98356.md)
  `CVE-2026-98356` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [RDMA/rtrs: guard against null kobj name](https://agentprime.io/advisories/CVE-2026-98355.md)
  `CVE-2026-98355` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [RDMA/mad: Fix receive buffer leak when PKey enforcement fails](https://agentprime.io/advisories/CVE-2026-98354.md)
  `CVE-2026-98354` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables](https://agentprime.io/advisories/CVE-2026-98353.md)
  `CVE-2026-98353` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted](https://agentprime.io/advisories/CVE-2026-98352.md)
  `CVE-2026-98352` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: virt_wifi: free skb when disconnected](https://agentprime.io/advisories/CVE-2026-98351.md)
  `CVE-2026-98351` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: brcmfmac: cyw: pass PMKID to firmware if present](https://agentprime.io/advisories/CVE-2026-98350.md)
  `CVE-2026-98350` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: libipw: reject too-short beacon and probe responses](https://agentprime.io/advisories/CVE-2026-98349.md)
  `CVE-2026-98349` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026
- [wifi: libipw: reject too-short association responses](https://agentprime.io/advisories/CVE-2026-98348.md)
  `CVE-2026-98348` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026
- [IB/IPoIB: Avoid restoring OPER_UP after multicast flush](https://agentprime.io/advisories/CVE-2026-98347.md)
  `CVE-2026-98347` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: cfg80211: don't get the radio mask for netdev-less wdevs](https://agentprime.io/advisories/CVE-2026-98346.md)
  `CVE-2026-98346` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: cfg80211: check IP header size in cfg80211_classify8021d()](https://agentprime.io/advisories/CVE-2026-98345.md)
  `CVE-2026-98345` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [dmaengine: Fix device kref underflow in dma_chan_put()](https://agentprime.io/advisories/CVE-2026-98344.md)
  `CVE-2026-98344` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()](https://agentprime.io/advisories/CVE-2026-98343.md)
  `CVE-2026-98343` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [dmaengine: wait for RCU readers before releasing dma_device](https://agentprime.io/advisories/CVE-2026-98342.md)
  `CVE-2026-98342` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: cfg80211: don't free driver-owned scan requests](https://agentprime.io/advisories/CVE-2026-98341.md)
  `CVE-2026-98341` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [wifi: cfg80211: only group hidden BSSes with beacon entries](https://agentprime.io/advisories/CVE-2026-98340.md)
  `CVE-2026-98340` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: cfg80211: don't filter by BSS type when removing stale entries](https://agentprime.io/advisories/CVE-2026-98339.md)
  `CVE-2026-98339` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026
- [wifi: cfg80211: ibss: ref BSS entry for joined event](https://agentprime.io/advisories/CVE-2026-98338.md)
  `CVE-2026-98338` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: mac80211: don't start a ROC while scanning](https://agentprime.io/advisories/CVE-2026-98337.md)
  `CVE-2026-98337` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: mac80211: don't offload TC setup on AP_VLAN interfaces](https://agentprime.io/advisories/CVE-2026-98336.md)
  `CVE-2026-98336` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: mac80211: abort chanswitch when leaving a mesh](https://agentprime.io/advisories/CVE-2026-98335.md)
  `CVE-2026-98335` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: mac80211: reset state when starting AP fails](https://agentprime.io/advisories/CVE-2026-98334.md)
  `CVE-2026-98334` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: mac80211: reset the LED state when ifup fails](https://agentprime.io/advisories/CVE-2026-98333.md)
  `CVE-2026-98333` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: mac80211: only operate on TDLS peers in the TDLS code](https://agentprime.io/advisories/CVE-2026-98332.md)
  `CVE-2026-98332` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: mac80211: unlist vifs when their netdev is unregistered](https://agentprime.io/advisories/CVE-2026-98331.md)
  `CVE-2026-98331` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 6 Oct 2026
- [wifi: cfg80211: get the wiphy out of a dying network namespace](https://agentprime.io/advisories/CVE-2026-98330.md)
  `CVE-2026-98330` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 6 Oct 2026
- [wifi: mac80211: don't allow injecting frames wider than the chanctx](https://agentprime.io/advisories/CVE-2026-98329.md)
  `CVE-2026-98329` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: mac80211: add HE 6 GHz capability in the scan elems len](https://agentprime.io/advisories/CVE-2026-98328.md)
  `CVE-2026-98328` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: mac80211: mesh: reset the CSA state when leaving](https://agentprime.io/advisories/CVE-2026-98327.md)
  `CVE-2026-98327` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: mac80211: mesh: release the channel if start fails](https://agentprime.io/advisories/CVE-2026-98326.md)
  `CVE-2026-98326` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: mac80211: set up the TX info early to fix failure paths](https://agentprime.io/advisories/CVE-2026-98325.md)
  `CVE-2026-98325` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [dmaengine: pxa: fix double counting of the hw descriptors](https://agentprime.io/advisories/CVE-2026-98324.md)
  `CVE-2026-98324` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [RDMA/siw: Bound fragmented header copies by the remaining length](https://agentprime.io/advisories/CVE-2026-98323.md)
  `CVE-2026-98323` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026
- [netfilter: nft_nat: fully initialise new_addr in netmap setup](https://agentprime.io/advisories/CVE-2026-98322.md)
  `CVE-2026-98322` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [netfilter: nf_nat: unregister and release hooks on error](https://agentprime.io/advisories/CVE-2026-98321.md)
  `CVE-2026-98321` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [netfilter: flowtable: hold reference on ct until flow is released](https://agentprime.io/advisories/CVE-2026-98320.md)
  `CVE-2026-98320` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr](https://agentprime.io/advisories/CVE-2026-98319.md)
  `CVE-2026-98319` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [smb: client: validate absolute native symlink targets before NT fixups](https://agentprime.io/advisories/CVE-2026-98318.md)
  `CVE-2026-98318` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.](https://agentprime.io/advisories/CVE-2026-98317.md)
  `CVE-2026-98317` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [ALSA: bcd2000: Fix race between rawmidi and disconnect](https://agentprime.io/advisories/CVE-2026-98316.md)
  `CVE-2026-98316` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [ntfs: protect runlist updates with the runlist lock](https://agentprime.io/advisories/CVE-2026-98315.md)
  `CVE-2026-98315` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [ALSA: pcm: set timer->private_data before registering the PCM timer](https://agentprime.io/advisories/CVE-2026-98314.md)
  `CVE-2026-98314` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [drm/msm/dp: skip PUSH_IDLE when the link was never enabled](https://agentprime.io/advisories/CVE-2026-98313.md)
  `CVE-2026-98313` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [ALSA: 6fire: fix OOB write from device-reported iso length](https://agentprime.io/advisories/CVE-2026-98312.md)
  `CVE-2026-98312` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: virt_wifi: don't transfer operstate before register](https://agentprime.io/advisories/CVE-2026-98311.md)
  `CVE-2026-98311` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory](https://agentprime.io/advisories/CVE-2026-98310.md)
  `CVE-2026-98310` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [drm/vc4: Use managed KMS polling to fix UAF on unbind](https://agentprime.io/advisories/CVE-2026-98309.md)
  `CVE-2026-98309` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [ALSA: hda: trace PCM open only after assigning a stream](https://agentprime.io/advisories/CVE-2026-98308.md)
  `CVE-2026-98308` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()](https://agentprime.io/advisories/CVE-2026-98307.md)
  `CVE-2026-98307` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation](https://agentprime.io/advisories/CVE-2026-98306.md)
  `CVE-2026-98306` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [net: dsa: mxl862xx: disable the stats poll on teardown](https://agentprime.io/advisories/CVE-2026-98305.md)
  `CVE-2026-98305` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [net: bcmgenet: restore the hardware filters on open](https://agentprime.io/advisories/CVE-2026-98304.md)
  `CVE-2026-98304` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup](https://agentprime.io/advisories/CVE-2026-98303.md)
  `CVE-2026-98303` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [net: fddi: skfp: fix NULL deref when setting the MAC address while down](https://agentprime.io/advisories/CVE-2026-98302.md)
  `CVE-2026-98302` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [net: bridge: mst: move switchdev call outside rcu](https://agentprime.io/advisories/CVE-2026-98301.md)
  `CVE-2026-98301` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTA2VDA4OjQ1OjU4LjkwODAwMFoiLCJDVkUtMjAyNi05ODMwMSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTA2VDA4OjQ2OjQ3LjYwMDAwMFoiLCJDVkUtMjAyNi05ODM2MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTA2VDA4OjQ2OjQ3LjYwMDAwMFoiLCJDVkUtMjAyNi05ODM2MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.