# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [scsi: libiscsi_tcp: Check the data direction of a Data-In PDU](https://agentprime.io/advisories/CVE-2026-98479.md)
  `CVE-2026-98479` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2026
- [scsi: ufs: core: Keep internal commands dispatchable during error handling](https://agentprime.io/advisories/CVE-2026-98478.md)
  `CVE-2026-98478` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()](https://agentprime.io/advisories/CVE-2026-98477.md)
  `CVE-2026-98477` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()](https://agentprime.io/advisories/CVE-2026-98476.md)
  `CVE-2026-98476` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [s390/cmf: Fix virtual vs physical address confusion](https://agentprime.io/advisories/CVE-2026-98475.md)
  `CVE-2026-98475` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [s390/pci: Fix missing device lock in zpci_report_status()](https://agentprime.io/advisories/CVE-2026-98474.md)
  `CVE-2026-98474` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config](https://agentprime.io/advisories/CVE-2026-98473.md)
  `CVE-2026-98473` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV](https://agentprime.io/advisories/CVE-2026-98472.md)
  `CVE-2026-98472` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: SEV: Do cache maintenance on the source VM during intra-host migration](https://agentprime.io/advisories/CVE-2026-98471.md)
  `CVE-2026-98471` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 18 Oct 2026
- [KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode](https://agentprime.io/advisories/CVE-2026-98470.md)
  `CVE-2026-98470` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: arm64: Fix AArch32 DBGBXVR\<n> handling](https://agentprime.io/advisories/CVE-2026-98469.md)
  `CVE-2026-98469` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 18 Oct 2026
- [KVM: arm64: Fix spurious warning for benign stage 2 teardown race](https://agentprime.io/advisories/CVE-2026-98468.md)
  `CVE-2026-98468` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race](https://agentprime.io/advisories/CVE-2026-98467.md)
  `CVE-2026-98467` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: arm64: Transfer the hyp stack pages out of the host stage-2](https://agentprime.io/advisories/CVE-2026-98466.md)
  `CVE-2026-98466` · CVE record: Linux Linux · CVSS 8.2 High · Not analysed yet · Published 18 Oct 2026
- [RISC-V: KVM: Serialize IMSIC attributes with vCPU migration](https://agentprime.io/advisories/CVE-2026-98465.md)
  `CVE-2026-98465` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 18 Oct 2026
- [RISC-V: KVM: Synchronize hrtimer callback during teardown](https://agentprime.io/advisories/CVE-2026-98464.md)
  `CVE-2026-98464` · CVE record: Linux Linux · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Oct 2026
- [sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags](https://agentprime.io/advisories/CVE-2026-98463.md)
  `CVE-2026-98463` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: hci_conn: fix CIS hold ownership on reuse](https://agentprime.io/advisories/CVE-2026-98462.md)
  `CVE-2026-98462` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: hci_sock: validate event length before filtering](https://agentprime.io/advisories/CVE-2026-98461.md)
  `CVE-2026-98461` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: hci_sock: reject out-of-range OCF values](https://agentprime.io/advisories/CVE-2026-98460.md)
  `CVE-2026-98460` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: ISO: balance the parent hold in hci_bind_bis()](https://agentprime.io/advisories/CVE-2026-98459.md)
  `CVE-2026-98459` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: ISO: release unused CIS holds after channel attach](https://agentprime.io/advisories/CVE-2026-98458.md)
  `CVE-2026-98458` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: L2CAP: validate frame length before control and FCS access](https://agentprime.io/advisories/CVE-2026-98457.md)
  `CVE-2026-98457` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: mgmt: fix race in read_unconf_index_list()](https://agentprime.io/advisories/CVE-2026-98456.md)
  `CVE-2026-98456` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO](https://agentprime.io/advisories/CVE-2026-98455.md)
  `CVE-2026-98455` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [smb: client: fix create context out-of-bounds reads](https://agentprime.io/advisories/CVE-2026-98454.md)
  `CVE-2026-98454` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 18 Oct 2026
- [smb: client: close handle after create-context parsing failure](https://agentprime.io/advisories/CVE-2026-98453.md)
  `CVE-2026-98453` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [smb: client: clean up failed cached directory opens](https://agentprime.io/advisories/CVE-2026-98452.md)
  `CVE-2026-98452` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [smb: client: use finish_no_open() for non-regular inodes](https://agentprime.io/advisories/CVE-2026-98451.md)
  `CVE-2026-98451` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 18 Oct 2026
- [smb: client: close completed creates on compound wait errors](https://agentprime.io/advisories/CVE-2026-98450.md)
  `CVE-2026-98450` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [smb: client: delete compound mids on send failure before unlock](https://agentprime.io/advisories/CVE-2026-98449.md)
  `CVE-2026-98449` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [xfs: release orphanage dir inode if chown fails](https://agentprime.io/advisories/CVE-2026-98448.md)
  `CVE-2026-98448` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots](https://agentprime.io/advisories/CVE-2026-98447.md)
  `CVE-2026-98447` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [xfs: don't let hidden_space go negative in xfs_metafile_resv_init](https://agentprime.io/advisories/CVE-2026-98446.md)
  `CVE-2026-98446` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [xfs: don't let memory failures leak blocks and kill repairs](https://agentprime.io/advisories/CVE-2026-98445.md)
  `CVE-2026-98445` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [xfs: drop dquot flush lock when we can't find a buffer to flush](https://agentprime.io/advisories/CVE-2026-98444.md)
  `CVE-2026-98444` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [xfs: fix cursor and pointer handling when recovering iunlink buckets](https://agentprime.io/advisories/CVE-2026-98443.md)
  `CVE-2026-98443` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Oct 2026
- [net/sched: act_ct: fix helper UAF due to extensions realloc](https://agentprime.io/advisories/CVE-2026-98442.md)
  `CVE-2026-98442` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Oct 2026
- [net/sched: act_ct: avoid modifying shared unconfirmed ct entry](https://agentprime.io/advisories/CVE-2026-98441.md)
  `CVE-2026-98441` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Oct 2026
- [KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction](https://agentprime.io/advisories/CVE-2026-98440.md)
  `CVE-2026-98440` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 18 Oct 2026
- [smb/server: cancel async requests when closing connection](https://agentprime.io/advisories/CVE-2026-98439.md)
  `CVE-2026-98439` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [mptcp: options: fix uninit-value in mptcp_write_data_fin](https://agentprime.io/advisories/CVE-2026-98438.md)
  `CVE-2026-98438` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [media: qcom: iris: fix runtime PM reference leaks](https://agentprime.io/advisories/CVE-2026-98437.md)
  `CVE-2026-98437` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [accel/amdxdna: Disable device buffer exporting](https://agentprime.io/advisories/CVE-2026-98436.md)
  `CVE-2026-98436` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Oct 2026
- [EDAC/altera: Use parent device for devres in altr_portb_setup()](https://agentprime.io/advisories/CVE-2026-98435.md)
  `CVE-2026-98435` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [sysctl: Check range in proc_dointvec_ms_jiffies_minmax](https://agentprime.io/advisories/CVE-2026-98434.md)
  `CVE-2026-98434` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure](https://agentprime.io/advisories/CVE-2026-98433.md)
  `CVE-2026-98433` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ipv4: validate checksum_start before completing checksum](https://agentprime.io/advisories/CVE-2026-99999.md)
  `CVE-2026-99999` · CVE record: Linux Linux · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-20
- [ipv4: free inet_opt and ireq_opt after an RCU grace period](https://agentprime.io/advisories/CVE-2026-98432.md)
  `CVE-2026-98432` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026
- [RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency](https://agentprime.io/advisories/CVE-2026-98431.md)
  `CVE-2026-98431` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [RDMA/efa: Keep admin queues alive while IRQ is registered](https://agentprime.io/advisories/CVE-2026-98430.md)
  `CVE-2026-98430` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [RDMA/efa: Keep EQ resources alive while IRQ is registered](https://agentprime.io/advisories/CVE-2026-98429.md)
  `CVE-2026-98429` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [ALSA: usb: 6fire: Avoid embedded URBs](https://agentprime.io/advisories/CVE-2026-98428.md)
  `CVE-2026-98428` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [net/sched: codel: bound the dropping loop per dequeue call](https://agentprime.io/advisories/CVE-2026-98427.md)
  `CVE-2026-98427` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path](https://agentprime.io/advisories/CVE-2026-98426.md)
  `CVE-2026-98426` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [wifi: mac80211: don't warn when an IBSS has no channel to scan](https://agentprime.io/advisories/CVE-2026-98425.md)
  `CVE-2026-98425` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [wifi: cfg80211: undo netns switch if renaming the wiphy fails](https://agentprime.io/advisories/CVE-2026-98424.md)
  `CVE-2026-98424` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping](https://agentprime.io/advisories/CVE-2026-98423.md)
  `CVE-2026-98423` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown](https://agentprime.io/advisories/CVE-2026-98422.md)
  `CVE-2026-98422` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026
- [wifi: mac80211: require a peer station for TDLS setup confirm](https://agentprime.io/advisories/CVE-2026-98421.md)
  `CVE-2026-98421` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 14 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTE0VDEzOjI3OjUwLjIwMDAwMFoiLCJDVkUtMjAyNi05ODQyMSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTE4VDE1OjE1OjU0LjUyODAwMFoiLCJDVkUtMjAyNi05ODQ4MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTE4VDE1OjE1OjU0LjUyODAwMFoiLCJDVkUtMjAyNi05ODQ4MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.