# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [ksmbd: follow SMB2 session expiration semantics](https://agentprime.io/advisories/CVE-2026-98420.md)
  `CVE-2026-98420` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [drop_monitor: fix out-of-bounds write in reset_per_cpu_data()](https://agentprime.io/advisories/CVE-2026-98419.md)
  `CVE-2026-98419` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2026
- [sched/core: Avoid false migration warning for proxy donors](https://agentprime.io/advisories/CVE-2026-98418.md)
  `CVE-2026-98418` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [net: xfrm: reject unrepresentable espintcp transport headers](https://agentprime.io/advisories/CVE-2026-98417.md)
  `CVE-2026-98417` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()](https://agentprime.io/advisories/CVE-2026-98416.md)
  `CVE-2026-98416` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node](https://agentprime.io/advisories/CVE-2026-98415.md)
  `CVE-2026-98415` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [memcg: avoid charging the root memcg from obj_cgroup_charge_pages()](https://agentprime.io/advisories/CVE-2026-98414.md)
  `CVE-2026-98414` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [selinux: always fill AVC decision in avc_has_perm_noaudit()](https://agentprime.io/advisories/CVE-2026-98413.md)
  `CVE-2026-98413` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()](https://agentprime.io/advisories/CVE-2026-98412.md)
  `CVE-2026-98412` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()](https://agentprime.io/advisories/CVE-2026-98411.md)
  `CVE-2026-98411` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog](https://agentprime.io/advisories/CVE-2026-98410.md)
  `CVE-2026-98410` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [watchdog: rtd119x: Avoid division by zero](https://agentprime.io/advisories/CVE-2026-98409.md)
  `CVE-2026-98409` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [watchdog: rzv2h: Avoid division by zero](https://agentprime.io/advisories/CVE-2026-98408.md)
  `CVE-2026-98408` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [wifi: rsi: fix heap OOB write on key removal](https://agentprime.io/advisories/CVE-2026-98407.md)
  `CVE-2026-98407` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver](https://agentprime.io/advisories/CVE-2026-98406.md)
  `CVE-2026-98406` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [smb: client: fix missing iov bounds check in parse_posix_sids()](https://agentprime.io/advisories/CVE-2026-98405.md)
  `CVE-2026-98405` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 14 Oct 2026
- [drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()](https://agentprime.io/advisories/CVE-2026-98404.md)
  `CVE-2026-98404` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [s390/boot: Avoid IPL parameter append past command line](https://agentprime.io/advisories/CVE-2026-98403.md)
  `CVE-2026-98403` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [net: icmp: avoid invalid transport header access in icmp_send tracepoint](https://agentprime.io/advisories/CVE-2026-98402.md)
  `CVE-2026-98402` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [net: iptunnel: fix stale transport header during tunnel decapsulation](https://agentprime.io/advisories/CVE-2026-98401.md)
  `CVE-2026-98401` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2026
- [s390/ipl: Fix NULL deref in kdump without re-IPL parm block](https://agentprime.io/advisories/CVE-2026-98400.md)
  `CVE-2026-98400` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block](https://agentprime.io/advisories/CVE-2026-98399.md)
  `CVE-2026-98399` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [locking/lockdep: Invalidate stale class_cache entries for zapped classes](https://agentprime.io/advisories/CVE-2026-98398.md)
  `CVE-2026-98398` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown](https://agentprime.io/advisories/CVE-2026-98397.md)
  `CVE-2026-98397` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()](https://agentprime.io/advisories/CVE-2026-98396.md)
  `CVE-2026-98396` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit](https://agentprime.io/advisories/CVE-2026-98395.md)
  `CVE-2026-98395` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.](https://agentprime.io/advisories/CVE-2026-98394.md)
  `CVE-2026-98394` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [net: ipv4: Fix UDP length overflow with PMTU discover and big MTU](https://agentprime.io/advisories/CVE-2026-98393.md)
  `CVE-2026-98393` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one](https://agentprime.io/advisories/CVE-2026-98392.md)
  `CVE-2026-98392` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [drm/xe: Guard page-fault worker with runtime PM check](https://agentprime.io/advisories/CVE-2026-98391.md)
  `CVE-2026-98391` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [x86/amd_node: Avoid divide by zero on virtualized systems](https://agentprime.io/advisories/CVE-2026-98390.md)
  `CVE-2026-98390` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [drm/amdgpu: skip gfx switch_power_profile during GPU reset](https://agentprime.io/advisories/CVE-2026-98389.md)
  `CVE-2026-98389` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [exec: do_close_on_exec() before taking exec_update_lock](https://agentprime.io/advisories/CVE-2026-98388.md)
  `CVE-2026-98388` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [s390/crypto: Fix skcipher_walk return code handling in aes_s390](https://agentprime.io/advisories/CVE-2026-98387.md)
  `CVE-2026-98387` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot](https://agentprime.io/advisories/CVE-2026-98386.md)
  `CVE-2026-98386` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [sched/cache: Decouple sched_cache_group from mm to fix UAF](https://agentprime.io/advisories/CVE-2026-98385.md)
  `CVE-2026-98385` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 12 Oct 2026
- [bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()](https://agentprime.io/advisories/CVE-2026-98384.md)
  `CVE-2026-98384` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 9 Oct 2026
- [bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL](https://agentprime.io/advisories/CVE-2026-98383.md)
  `CVE-2026-98383` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2026
- [bpf: Reject dev-bound-only programs on other devices](https://agentprime.io/advisories/CVE-2026-98382.md)
  `CVE-2026-98382` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2026
- [veth: manage XDP program pointers during channel resize](https://agentprime.io/advisories/CVE-2026-98381.md)
  `CVE-2026-98381` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2026
- [net/sched: reject IDR error pointers when deleting actions](https://agentprime.io/advisories/CVE-2026-98380.md)
  `CVE-2026-98380` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 9 Oct 2026
- [netfilter: ip6t_rpfilter: reject routes without inet6_dev](https://agentprime.io/advisories/CVE-2026-98379.md)
  `CVE-2026-98379` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 9 Oct 2026
- [bpf: Skip unsettled links in link iterator](https://agentprime.io/advisories/CVE-2026-98378.md)
  `CVE-2026-98378` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2026
- [vlan: require the MAC header to be present in \_\_vlan_insert_inner_tag()](https://agentprime.io/advisories/CVE-2026-98377.md)
  `CVE-2026-98377` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 9 Oct 2026
- [bpf: Use array_map_meta_equal for percpu array inner map replacement](https://agentprime.io/advisories/CVE-2026-98376.md)
  `CVE-2026-98376` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2026
- [xen/netfront: drop RX packets with a short Ethernet header](https://agentprime.io/advisories/CVE-2026-98375.md)
  `CVE-2026-98375` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 9 Oct 2026
- [tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()](https://agentprime.io/advisories/CVE-2026-98374.md)
  `CVE-2026-98374` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 7 Oct 2026
- [mm/hugetlb: preserve mremap address delta when skipping page tables](https://agentprime.io/advisories/CVE-2026-98373.md)
  `CVE-2026-98373` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 7 Oct 2026
- [xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()](https://agentprime.io/advisories/CVE-2026-98372.md)
  `CVE-2026-98372` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [xfrm: iptfs: fix runt reassembly panic from short inner tot_len](https://agentprime.io/advisories/CVE-2026-98371.md)
  `CVE-2026-98371` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [xfrm: fix compat ALLOCSPI request use-after-free](https://agentprime.io/advisories/CVE-2026-98370.md)
  `CVE-2026-98370` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()](https://agentprime.io/advisories/CVE-2026-98369.md)
  `CVE-2026-98369` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [esp: downgrade zerocopy managed frags before mutating skb frags](https://agentprime.io/advisories/CVE-2026-98368.md)
  `CVE-2026-98368` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept](https://agentprime.io/advisories/CVE-2026-98367.md)
  `CVE-2026-98367` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [RDMA/rxe: validate access flags before swapping the MR's PD](https://agentprime.io/advisories/CVE-2026-98366.md)
  `CVE-2026-98366` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access](https://agentprime.io/advisories/CVE-2026-98365.md)
  `CVE-2026-98365` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026
- [xfrm: hold net_device reference under RCU in bundle creation](https://agentprime.io/advisories/CVE-2026-98364.md)
  `CVE-2026-98364` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026
- [firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS](https://agentprime.io/advisories/CVE-2026-98363.md)
  `CVE-2026-98363` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate](https://agentprime.io/advisories/CVE-2026-98362.md)
  `CVE-2026-98362` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths](https://agentprime.io/advisories/CVE-2026-98361.md)
  `CVE-2026-98361` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTA2VDA4OjQ2OjQ3LjYwMDAwMFoiLCJDVkUtMjAyNi05ODM2MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTE0VDEzOjI3OjUwLjIwMDAwMFoiLCJDVkUtMjAyNi05ODQyMSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTE0VDEzOjI3OjUwLjIwMDAwMFoiLCJDVkUtMjAyNi05ODQyMSJd>. Everything for agents: <https://agentprime.io/llms.txt>.