# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup](https://agentprime.io/advisories/CVE-2026-98660.md)
  `CVE-2026-98660` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: pressure: rohm-bm1390: Return error when read fails](https://agentprime.io/advisories/CVE-2026-98659.md)
  `CVE-2026-98659` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: proximity: aw96103: validate firmware data length](https://agentprime.io/advisories/CVE-2026-98658.md)
  `CVE-2026-98658` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure](https://agentprime.io/advisories/CVE-2026-98657.md)
  `CVE-2026-98657` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: trigger: cancel reenable_work before freeing trigger](https://agentprime.io/advisories/CVE-2026-98656.md)
  `CVE-2026-98656` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [perf: Require kernel access for text poke events](https://agentprime.io/advisories/CVE-2026-98655.md)
  `CVE-2026-98655` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: s390: Fix \_gaccess_shadow_fault()](https://agentprime.io/advisories/CVE-2026-98653.md)
  `CVE-2026-98653` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: s390: Add missing srcu in kvm_s390_set_irq_state()](https://agentprime.io/advisories/CVE-2026-98652.md)
  `CVE-2026-98652` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()](https://agentprime.io/advisories/CVE-2026-98651.md)
  `CVE-2026-98651` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: s390: Fix potential races in dat skey functions](https://agentprime.io/advisories/CVE-2026-98650.md)
  `CVE-2026-98650` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: s390: Fix race in \_destroy_pages_crste()](https://agentprime.io/advisories/CVE-2026-98649.md)
  `CVE-2026-98649` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [s390/uv: Prevent potential out-of-bounds read](https://agentprime.io/advisories/CVE-2026-98648.md)
  `CVE-2026-98648` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Fix divide-by-zero in btf_struct_walk()](https://agentprime.io/advisories/CVE-2026-98647.md)
  `CVE-2026-98647` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context](https://agentprime.io/advisories/CVE-2026-98646.md)
  `CVE-2026-98646` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [HID: winwing: fix use-after-free in force feedback teardown](https://agentprime.io/advisories/CVE-2026-98645.md)
  `CVE-2026-98645` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Avoid soft lockup in \_\_htab_map_lookup_and_delete_batch()](https://agentprime.io/advisories/CVE-2026-98644.md)
  `CVE-2026-98644` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Fix out-of-bounds read of rtt_min in sock_ops](https://agentprime.io/advisories/CVE-2026-98643.md)
  `CVE-2026-98643` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk](https://agentprime.io/advisories/CVE-2026-98642.md)
  `CVE-2026-98642` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf, arm64: set up the frame pointer for the exception callback](https://agentprime.io/advisories/CVE-2026-98641.md)
  `CVE-2026-98641` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [HID: amd_sfh: Validate PCI BAR size before mapping](https://agentprime.io/advisories/CVE-2026-98640.md)
  `CVE-2026-98640` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: riscv: Fix NACL hfence entry update order](https://agentprime.io/advisories/CVE-2026-98639.md)
  `CVE-2026-98639` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()](https://agentprime.io/advisories/CVE-2026-98638.md)
  `CVE-2026-98638` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure](https://agentprime.io/advisories/CVE-2026-98637.md)
  `CVE-2026-98637` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [squashfs: Add dictionary size range check to prevent shift-out-of-bounds](https://agentprime.io/advisories/CVE-2026-98636.md)
  `CVE-2026-98636` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [scsi: block: Fix zones_cond out-of-bounds write on zone report](https://agentprime.io/advisories/CVE-2026-98635.md)
  `CVE-2026-98635` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [scsi: sd_zbc: Reject disks with too many zones](https://agentprime.io/advisories/CVE-2026-98634.md)
  `CVE-2026-98634` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()](https://agentprime.io/advisories/CVE-2026-98633.md)
  `CVE-2026-98633` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel](https://agentprime.io/advisories/CVE-2026-98632.md)
  `CVE-2026-98632` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [xsk: Use a 32-bit compare in xsk_map_gen_lookup](https://agentprime.io/advisories/CVE-2026-98631.md)
  `CVE-2026-98631` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [eth: fbnic: Fix payload page pool error cleanup](https://agentprime.io/advisories/CVE-2026-98630.md)
  `CVE-2026-98630` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net/sched: cls_u32: fix manual hash table handle IDR aliasing](https://agentprime.io/advisories/CVE-2026-98629.md)
  `CVE-2026-98629` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Make post-verification instruction rewrites killable](https://agentprime.io/advisories/CVE-2026-98628.md)
  `CVE-2026-98628` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Preserve packet pointer class displacement in regsafe()](https://agentprime.io/advisories/CVE-2026-98627.md)
  `CVE-2026-98627` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Restrict CO-RE poisoning to relocatable instructions](https://agentprime.io/advisories/CVE-2026-98626.md)
  `CVE-2026-98626` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [netfilter: flowtable: publish HW_DEAD after worker is done](https://agentprime.io/advisories/CVE-2026-98625.md)
  `CVE-2026-98625` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [netfilter: nfnetlink_queue: hold nfnl mutex in event notifier](https://agentprime.io/advisories/CVE-2026-98624.md)
  `CVE-2026-98624` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update](https://agentprime.io/advisories/CVE-2026-98623.md)
  `CVE-2026-98623` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure](https://agentprime.io/advisories/CVE-2026-98622.md)
  `CVE-2026-98622` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: gue: reject invalid REMCSUM offsets](https://agentprime.io/advisories/CVE-2026-98621.md)
  `CVE-2026-98621` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure](https://agentprime.io/advisories/CVE-2026-98620.md)
  `CVE-2026-98620` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: ethtool: keep rtnl_lock for the ioctl self test](https://agentprime.io/advisories/CVE-2026-98619.md)
  `CVE-2026-98619` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [eth: fbnic: Handle maximum standalone channels](https://agentprime.io/advisories/CVE-2026-98618.md)
  `CVE-2026-98618` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [eth: fbnic: use the Rx queue napi pointer to find the napi vector](https://agentprime.io/advisories/CVE-2026-98617.md)
  `CVE-2026-98617` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [eth: fbnic: reset num_napi when the napi vectors are freed](https://agentprime.io/advisories/CVE-2026-98616.md)
  `CVE-2026-98616` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox](https://agentprime.io/advisories/CVE-2026-98615.md)
  `CVE-2026-98615` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [sctp: avoid livelock while updating retransmit path](https://agentprime.io/advisories/CVE-2026-98614.md)
  `CVE-2026-98614` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Bound ownership depth through local kptrs and graph roots](https://agentprime.io/advisories/CVE-2026-98613.md)
  `CVE-2026-98613` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: usb: catc: bound the RX packet length in catc_rx_done()](https://agentprime.io/advisories/CVE-2026-98612.md)
  `CVE-2026-98612` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Check params size before reading reserved fields](https://agentprime.io/advisories/CVE-2026-98611.md)
  `CVE-2026-98611` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget](https://agentprime.io/advisories/CVE-2026-98610.md)
  `CVE-2026-98610` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/virtio: fix object leak when drm_gem_handle_create() fails](https://agentprime.io/advisories/CVE-2026-98609.md)
  `CVE-2026-98609` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()](https://agentprime.io/advisories/CVE-2026-98608.md)
  `CVE-2026-98608` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()](https://agentprime.io/advisories/CVE-2026-98607.md)
  `CVE-2026-98607` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/virtio: release the GEM object on virtio_gpu_vram_create() errors](https://agentprime.io/advisories/CVE-2026-98606.md)
  `CVE-2026-98606` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach](https://agentprime.io/advisories/CVE-2026-98605.md)
  `CVE-2026-98605` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ovpn: replace bind when learning local endpoint](https://agentprime.io/advisories/CVE-2026-98604.md)
  `CVE-2026-98604` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ovpn: replace bind when clearing stale local source](https://agentprime.io/advisories/CVE-2026-98603.md)
  `CVE-2026-98603` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough](https://agentprime.io/advisories/CVE-2026-98602.md)
  `CVE-2026-98602` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: btintel_pcie: validate device-supplied DMA indices](https://agentprime.io/advisories/CVE-2026-98601.md)
  `CVE-2026-98601` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()](https://agentprime.io/advisories/CVE-2026-98600.md)
  `CVE-2026-98600` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTE4VDE1OjE5OjEyLjg2NDAwMFoiLCJDVkUtMjAyNi05ODYwMCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTE4VDE1OjQ0OjIxLjU0MzAwMFoiLCJDVkUtMjAyNi05ODY2MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTE4VDE1OjQ0OjIxLjU0MzAwMFoiLCJDVkUtMjAyNi05ODY2MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.