# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga](https://agentprime.io/advisories/CVE-2026-98539.md)
  `CVE-2026-98539` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes](https://agentprime.io/advisories/CVE-2026-98538.md)
  `CVE-2026-98538` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [workqueue: Fix NULL current_pwq deref in flush dependency check](https://agentprime.io/advisories/CVE-2026-98537.md)
  `CVE-2026-98537` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [writeback: report a Tasks-RCU quiescent state per cgwb drain pass](https://agentprime.io/advisories/CVE-2026-98536.md)
  `CVE-2026-98536` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [fsl/fman: Fix clk reference leak in read_dts_node()](https://agentprime.io/advisories/CVE-2026-98535.md)
  `CVE-2026-98535` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ipe: fix use-after-free when auditing a newly loaded policy](https://agentprime.io/advisories/CVE-2026-98534.md)
  `CVE-2026-98534` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ipe: protect the dm-verity root hash with RCU](https://agentprime.io/advisories/CVE-2026-98533.md)
  `CVE-2026-98533` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ipv6: do not let ipv6_find_hdr() return an offset past the packet end](https://agentprime.io/advisories/CVE-2026-98532.md)
  `CVE-2026-98532` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 18 Oct 2026
- [ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST](https://agentprime.io/advisories/CVE-2026-98531.md)
  `CVE-2026-98531` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [kprobes: Fix permanent hang when flushing the kprobe optimizer](https://agentprime.io/advisories/CVE-2026-98530.md)
  `CVE-2026-98530` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()](https://agentprime.io/advisories/CVE-2026-98529.md)
  `CVE-2026-98529` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [gpio: cdev: fix kernel stack leak to user-space in error path](https://agentprime.io/advisories/CVE-2026-98528.md)
  `CVE-2026-98528` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [gpio: zynq: fix runtime PM leak on request error path](https://agentprime.io/advisories/CVE-2026-98527.md)
  `CVE-2026-98527` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [llc: reserve device headroom for allocated frames](https://agentprime.io/advisories/CVE-2026-98526.md)
  `CVE-2026-98526` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()](https://agentprime.io/advisories/CVE-2026-98525.md)
  `CVE-2026-98525` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [rds: ib: Clear the sg list when mapping an MR fails](https://agentprime.io/advisories/CVE-2026-98524.md)
  `CVE-2026-98524` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Oct 2026
- [drm/client: fix restore of partially initialized client](https://agentprime.io/advisories/CVE-2026-98523.md)
  `CVE-2026-98523` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()](https://agentprime.io/advisories/CVE-2026-98522.md)
  `CVE-2026-98522` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/i915: fix incorrect RCU teardown order](https://agentprime.io/advisories/CVE-2026-98521.md)
  `CVE-2026-98521` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping](https://agentprime.io/advisories/CVE-2026-98520.md)
  `CVE-2026-98520` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Oct 2026
- [drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()](https://agentprime.io/advisories/CVE-2026-98519.md)
  `CVE-2026-98519` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/nouveau/dmem: pin VRAM for the whole registered range](https://agentprime.io/advisories/CVE-2026-98518.md)
  `CVE-2026-98518` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 18 Oct 2026
- [drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM](https://agentprime.io/advisories/CVE-2026-98517.md)
  `CVE-2026-98517` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Oct 2026
- [drm/nouveau: Fix bridge reference leak in nv1a_ram_new()](https://agentprime.io/advisories/CVE-2026-98516.md)
  `CVE-2026-98516` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/nouveau: fix double-free in nvif_vmm_dtor](https://agentprime.io/advisories/CVE-2026-98515.md)
  `CVE-2026-98515` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Oct 2026
- [drm/nouveau: Fix gem reference leak in validate_init()](https://agentprime.io/advisories/CVE-2026-98514.md)
  `CVE-2026-98514` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()](https://agentprime.io/advisories/CVE-2026-98513.md)
  `CVE-2026-98513` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/nouveau: RCU-free the scheduler-containing nouveau_sched](https://agentprime.io/advisories/CVE-2026-98512.md)
  `CVE-2026-98512` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 18 Oct 2026
- [drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()](https://agentprime.io/advisories/CVE-2026-98511.md)
  `CVE-2026-98511` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/xe/vm: nuke PTs only after unlinking contested VMAs](https://agentprime.io/advisories/CVE-2026-98510.md)
  `CVE-2026-98510` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Oct 2026
- [drm/virtio: fix memory leak of fence event on execbuffer failure](https://agentprime.io/advisories/CVE-2026-98509.md)
  `CVE-2026-98509` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/virtio: fix NULL pointer dereference on fence allocation failure](https://agentprime.io/advisories/CVE-2026-98508.md)
  `CVE-2026-98508` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish](https://agentprime.io/advisories/CVE-2026-98507.md)
  `CVE-2026-98507` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Oct 2026
- [mm/hugetlb: do not dissolve gigantic pages without runtime support](https://agentprime.io/advisories/CVE-2026-98506.md)
  `CVE-2026-98506` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()](https://agentprime.io/advisories/CVE-2026-98505.md)
  `CVE-2026-98505` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [PCI: of_property: Omit bus properties without a subordinate bus](https://agentprime.io/advisories/CVE-2026-98504.md)
  `CVE-2026-98504` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [packet: use ubuf_info completion for TX_RING packets](https://agentprime.io/advisories/CVE-2026-98503.md)
  `CVE-2026-98503` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [HID: alps: unregister DualPoint Stick input device on remove](https://agentprime.io/advisories/CVE-2026-98502.md)
  `CVE-2026-98502` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [HID: alps: fix use-after-free on input2 registration failure](https://agentprime.io/advisories/CVE-2026-98501.md)
  `CVE-2026-98501` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 18 Oct 2026
- [HID: hid-oxp: use cancel_delayed_work_sync() in remove](https://agentprime.io/advisories/CVE-2026-98500.md)
  `CVE-2026-98500` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()](https://agentprime.io/advisories/CVE-2026-98499.md)
  `CVE-2026-98499` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 18 Oct 2026
- [net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()](https://agentprime.io/advisories/CVE-2026-98498.md)
  `CVE-2026-98498` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net/mlx5e: fix swapped IPv6 IPsec policy masks](https://agentprime.io/advisories/CVE-2026-98497.md)
  `CVE-2026-98497` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2026
- [net: airoha: npu: cancel wdt_work after releasing the WDT IRQ](https://agentprime.io/advisories/CVE-2026-98496.md)
  `CVE-2026-98496` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: arp: terminate device name before lookup](https://agentprime.io/advisories/CVE-2026-98495.md)
  `CVE-2026-98495` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read](https://agentprime.io/advisories/CVE-2026-98494.md)
  `CVE-2026-98494` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: ipconfig: bound DHCP option construction](https://agentprime.io/advisories/CVE-2026-98493.md)
  `CVE-2026-98493` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths](https://agentprime.io/advisories/CVE-2026-98492.md)
  `CVE-2026-98492` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry](https://agentprime.io/advisories/CVE-2026-98491.md)
  `CVE-2026-98491` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Oct 2026
- [net: openvswitch: conntrack: fix helper UAF due to extensions realloc](https://agentprime.io/advisories/CVE-2026-98490.md)
  `CVE-2026-98490` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Oct 2026
- [net: atl1c: fix soft lockup on out-of-range tpd_cons read](https://agentprime.io/advisories/CVE-2026-98489.md)
  `CVE-2026-98489` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read](https://agentprime.io/advisories/CVE-2026-98488.md)
  `CVE-2026-98488` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: bridge: mdb: restart port group walk after deletion](https://agentprime.io/advisories/CVE-2026-98487.md)
  `CVE-2026-98487` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Oct 2026
- [net: ena: fix MMIO read buffer leak on probe failure](https://agentprime.io/advisories/CVE-2026-98486.md)
  `CVE-2026-98486` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read](https://agentprime.io/advisories/CVE-2026-98485.md)
  `CVE-2026-98485` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 18 Oct 2026
- [netfilter: nf_tables: skip expired catchall elements on insert and delete](https://agentprime.io/advisories/CVE-2026-98484.md)
  `CVE-2026-98484` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nfc: fix use-after-free in nfc_get_local_general_bytes](https://agentprime.io/advisories/CVE-2026-98483.md)
  `CVE-2026-98483` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()](https://agentprime.io/advisories/CVE-2026-98482.md)
  `CVE-2026-98482` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nfc: port100: reject frames whose declared length exceeds the received data](https://agentprime.io/advisories/CVE-2026-98481.md)
  `CVE-2026-98481` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nfc: trf7970a: power down on startup RX gain failure](https://agentprime.io/advisories/CVE-2026-98480.md)
  `CVE-2026-98480` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTE4VDE1OjE1OjU0LjUyODAwMFoiLCJDVkUtMjAyNi05ODQ4MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTE4VDE1OjE4OjA4LjM1MjAwMFoiLCJDVkUtMjAyNi05ODU0MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTE4VDE1OjE4OjA4LjM1MjAwMFoiLCJDVkUtMjAyNi05ODU0MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.