# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [bpf: Reject non-negative offsets in stack_slot_obj_get_spi()](https://agentprime.io/advisories/CVE-2026-98599.md)
  `CVE-2026-98599` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ipv6: Prevent rt6_insert_exception() for dying fib6_info.](https://agentprime.io/advisories/CVE-2026-98598.md)
  `CVE-2026-98598` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: usb: sr9700: include receive overhead in the length check](https://agentprime.io/advisories/CVE-2026-98597.md)
  `CVE-2026-98597` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ipv6: Fix dst leak for uncached routes.](https://agentprime.io/advisories/CVE-2026-98596.md)
  `CVE-2026-98596` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [udp: remove a disconnected socket from the 4-tuple hash table](https://agentprime.io/advisories/CVE-2026-98595.md)
  `CVE-2026-98595` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [tg3: clean up PHYLIB resources on probe failure](https://agentprime.io/advisories/CVE-2026-98594.md)
  `CVE-2026-98594` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [s390/debug: Fix NULL pointer dereference in debug_info_copy()](https://agentprime.io/advisories/CVE-2026-98593.md)
  `CVE-2026-98593` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: spacemit: clear TX descriptor on fragment mapping failure](https://agentprime.io/advisories/CVE-2026-98592.md)
  `CVE-2026-98592` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Fix bounds check for skb-backed dynptrs](https://agentprime.io/advisories/CVE-2026-98591.md)
  `CVE-2026-98591` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Fix bpf_sock context code generation](https://agentprime.io/advisories/CVE-2026-98590.md)
  `CVE-2026-98590` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Reject pkt arguments in mutating subprogs](https://agentprime.io/advisories/CVE-2026-98589.md)
  `CVE-2026-98589` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc](https://agentprime.io/advisories/CVE-2026-98588.md)
  `CVE-2026-98588` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [firewire: cdev: fix back-transition for iso_resource_auto client resource](https://agentprime.io/advisories/CVE-2026-98587.md)
  `CVE-2026-98587` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [sctp: hold asoc or transport before mod_timer() in timer handlers](https://agentprime.io/advisories/CVE-2026-98586.md)
  `CVE-2026-98586` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [eth: fbnic: Avoid rounding zero ring sizes](https://agentprime.io/advisories/CVE-2026-98585.md)
  `CVE-2026-98585` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net/sched: fix potential stack infoleak in em_text_dump()](https://agentprime.io/advisories/CVE-2026-98584.md)
  `CVE-2026-98584` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nfc: nfcmrvl: validate helper command length before pull](https://agentprime.io/advisories/CVE-2026-98583.md)
  `CVE-2026-98583` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nfc: st21nfca: validate received frame size](https://agentprime.io/advisories/CVE-2026-98582.md)
  `CVE-2026-98582` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()](https://agentprime.io/advisories/CVE-2026-98581.md)
  `CVE-2026-98581` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nfc: llcp: Fix race condition in accept_queue lifecycle](https://agentprime.io/advisories/CVE-2026-98580.md)
  `CVE-2026-98580` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure](https://agentprime.io/advisories/CVE-2026-98579.md)
  `CVE-2026-98579` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nfc: st21nfca: validate ISO15693 inventory length](https://agentprime.io/advisories/CVE-2026-98578.md)
  `CVE-2026-98578` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()](https://agentprime.io/advisories/CVE-2026-98577.md)
  `CVE-2026-98577` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nfc: llcp: fix slab-out-of-bounds reads when logging service names](https://agentprime.io/advisories/CVE-2026-98576.md)
  `CVE-2026-98576` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()](https://agentprime.io/advisories/CVE-2026-98575.md)
  `CVE-2026-98575` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: bcmgenet: stop Tx NAPI before disabling the queues](https://agentprime.io/advisories/CVE-2026-98574.md)
  `CVE-2026-98574` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()](https://agentprime.io/advisories/CVE-2026-98573.md)
  `CVE-2026-98573` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Fix immediate JMP JEQ/JNE on MIPS32](https://agentprime.io/advisories/CVE-2026-98572.md)
  `CVE-2026-98572` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: stmmac: clear stale buf->page after recycling on skb build failure](https://agentprime.io/advisories/CVE-2026-98571.md)
  `CVE-2026-98571` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: ipv6: keep room for the mac header in dst_dev_overhead()](https://agentprime.io/advisories/CVE-2026-98570.md)
  `CVE-2026-98570` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ip_gre: Reject enabling collect metadata through changelink](https://agentprime.io/advisories/CVE-2026-98569.md)
  `CVE-2026-98569` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [vxlan: use one headroom snapshot for neighbour replies](https://agentprime.io/advisories/CVE-2026-98568.md)
  `CVE-2026-98568` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: xps: reject an out of range traffic class](https://agentprime.io/advisories/CVE-2026-98567.md)
  `CVE-2026-98567` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/imagination: clamp freelist reconstruction requests](https://agentprime.io/advisories/CVE-2026-98566.md)
  `CVE-2026-98566` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621](https://agentprime.io/advisories/CVE-2026-98565.md)
  `CVE-2026-98565` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq](https://agentprime.io/advisories/CVE-2026-98564.md)
  `CVE-2026-98564` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: phylink: record the PHY only once bringup cannot fail](https://agentprime.io/advisories/CVE-2026-98563.md)
  `CVE-2026-98563` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: libwx: fix races in Tx timestamp handling](https://agentprime.io/advisories/CVE-2026-98562.md)
  `CVE-2026-98562` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nfp: hold IPsec RX state under the XArray lock](https://agentprime.io/advisories/CVE-2026-98561.md)
  `CVE-2026-98561` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net/rds: size a connection's path set by the transport it ends up with](https://agentprime.io/advisories/CVE-2026-98560.md)
  `CVE-2026-98560` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net/smc: fix UAF on lgr list traversal in smcr_port_err()](https://agentprime.io/advisories/CVE-2026-98559.md)
  `CVE-2026-98559` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: flush skb_defer_nodes in dev_cpu_dead()](https://agentprime.io/advisories/CVE-2026-98558.md)
  `CVE-2026-98558` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO](https://agentprime.io/advisories/CVE-2026-98557.md)
  `CVE-2026-98557` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [gve: DQO: reject TSO packets with an out of range MSS](https://agentprime.io/advisories/CVE-2026-98556.md)
  `CVE-2026-98556` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [llc: fix skb UAF and leaks on llc_mac_hdr_init() failure](https://agentprime.io/advisories/CVE-2026-98555.md)
  `CVE-2026-98555` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2026
- [vlan: ensure sufficient headroom in vlan_dev_hard_header()](https://agentprime.io/advisories/CVE-2026-98554.md)
  `CVE-2026-98554` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [autofs: fix sbi->pipe file reference leak in autofs_kill_sb()](https://agentprime.io/advisories/CVE-2026-98553.md)
  `CVE-2026-98553` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [perf/core: Fix a refcount leak in attach_perf_ctx_data()](https://agentprime.io/advisories/CVE-2026-98552.md)
  `CVE-2026-98552` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [perf/core: Fill branch entries with a single assignment](https://agentprime.io/advisories/CVE-2026-98551.md)
  `CVE-2026-98551` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow](https://agentprime.io/advisories/CVE-2026-98550.md)
  `CVE-2026-98550` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2026
- [tcp: prevent collapsing skbs across boundary in rtx queue](https://agentprime.io/advisories/CVE-2026-98549.md)
  `CVE-2026-98549` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Oct 2026
- [sctp: discard the rest of the packet on a stale-cookie error](https://agentprime.io/advisories/CVE-2026-98548.md)
  `CVE-2026-98548` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Oct 2026
- [af_packet: fix integer overflow in prb_calc_retire_blk_tmo()](https://agentprime.io/advisories/CVE-2026-98547.md)
  `CVE-2026-98547` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [arm64/boot: Disable trapping of PMZR_EL0 writes to EL2](https://agentprime.io/advisories/CVE-2026-98546.md)
  `CVE-2026-98546` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ata: libata-scsi: bound the ATA passthru sense descriptor writes](https://agentprime.io/advisories/CVE-2026-98545.md)
  `CVE-2026-98545` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bna: prevent IOC timer rearm during teardown](https://agentprime.io/advisories/CVE-2026-98544.md)
  `CVE-2026-98544` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir](https://agentprime.io/advisories/CVE-2026-98543.md)
  `CVE-2026-98543` · CVE record: Linux Linux · CVSS 7.3 High · Not analysed yet · Published 18 Oct 2026
- [cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict](https://agentprime.io/advisories/CVE-2026-98542.md)
  `CVE-2026-98542` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT](https://agentprime.io/advisories/CVE-2026-98541.md)
  `CVE-2026-98541` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [fprobe: Terminate the fgraph_data list when the reservation is not filled](https://agentprime.io/advisories/CVE-2026-98540.md)
  `CVE-2026-98540` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTE4VDE1OjE4OjA4LjM1MjAwMFoiLCJDVkUtMjAyNi05ODU0MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTE4VDE1OjE5OjEyLjg2NDAwMFoiLCJDVkUtMjAyNi05ODYwMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTE4VDE1OjE5OjEyLjg2NDAwMFoiLCJDVkUtMjAyNi05ODYwMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.