# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified](https://agentprime.io/advisories/CVE-2026-98720.md)
  `CVE-2026-98720` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it](https://agentprime.io/advisories/CVE-2026-98719.md)
  `CVE-2026-98719` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: SEV: Do cache maintenance on the source VM \*before\* clearing SEV state](https://agentprime.io/advisories/CVE-2026-98718.md)
  `CVE-2026-98718` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy](https://agentprime.io/advisories/CVE-2026-98717.md)
  `CVE-2026-98717` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted](https://agentprime.io/advisories/CVE-2026-98716.md)
  `CVE-2026-98716` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN](https://agentprime.io/advisories/CVE-2026-98715.md)
  `CVE-2026-98715` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded](https://agentprime.io/advisories/CVE-2026-98714.md)
  `CVE-2026-98714` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT](https://agentprime.io/advisories/CVE-2026-98713.md)
  `CVE-2026-98713` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq](https://agentprime.io/advisories/CVE-2026-98712.md)
  `CVE-2026-98712` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: cw1200: fix TX padding OOB read leaking heap data to device](https://agentprime.io/advisories/CVE-2026-98711.md)
  `CVE-2026-98711` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: iwlegacy: 3945: free EEPROM data on remove](https://agentprime.io/advisories/CVE-2026-98710.md)
  `CVE-2026-98710` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: mac80211: count only matching reservations in reserved switch](https://agentprime.io/advisories/CVE-2026-98709.md)
  `CVE-2026-98709` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: mac80211: keep paired old chanctx alive](https://agentprime.io/advisories/CVE-2026-98708.md)
  `CVE-2026-98708` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: mac80211: shut down RX BA session timer on teardown](https://agentprime.io/advisories/CVE-2026-98707.md)
  `CVE-2026-98707` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: mac80211: drain PS delivery work during station teardown](https://agentprime.io/advisories/CVE-2026-98706.md)
  `CVE-2026-98706` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: mac80211: account proxy paths against the mesh path limit](https://agentprime.io/advisories/CVE-2026-98705.md)
  `CVE-2026-98705` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: mac80211: keep fallback association elements alive](https://agentprime.io/advisories/CVE-2026-98704.md)
  `CVE-2026-98704` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: mac80211: minstrel_ht: validate fixed rate index](https://agentprime.io/advisories/CVE-2026-98703.md)
  `CVE-2026-98703` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: mac80211: reject invalid 320 MHz CSA bandwidth](https://agentprime.io/advisories/CVE-2026-98702.md)
  `CVE-2026-98702` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: mac80211: release mesh path quota on failed additions](https://agentprime.io/advisories/CVE-2026-98701.md)
  `CVE-2026-98701` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: mac80211: set info->band for 802.3 encap offload frames](https://agentprime.io/advisories/CVE-2026-98700.md)
  `CVE-2026-98700` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: mac80211: fix mesh fast xmit path deletion UAF](https://agentprime.io/advisories/CVE-2026-98699.md)
  `CVE-2026-98699` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: mac80211: handle empty FILS association request payload](https://agentprime.io/advisories/CVE-2026-98698.md)
  `CVE-2026-98698` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [USB: serial: fix dynamic id driver deregistration race](https://agentprime.io/advisories/CVE-2026-98697.md)
  `CVE-2026-98697` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [USB: serial: fix driver deregistration order](https://agentprime.io/advisories/CVE-2026-98696.md)
  `CVE-2026-98696` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [USB: serial: fix ioctl hangup race](https://agentprime.io/advisories/CVE-2026-98695.md)
  `CVE-2026-98695` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [thunderbolt: Fix KASAN reported use-after-free when request is canceled](https://agentprime.io/advisories/CVE-2026-98694.md)
  `CVE-2026-98694` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [thunderbolt: Hold a router reference for each allocated HopID](https://agentprime.io/advisories/CVE-2026-98693.md)
  `CVE-2026-98693` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [thunderbolt: Make the DP tunnel activation callback mandatory](https://agentprime.io/advisories/CVE-2026-98692.md)
  `CVE-2026-98692` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [thunderbolt: Tear down inactive DP tunnels when the domain is stopped](https://agentprime.io/advisories/CVE-2026-98691.md)
  `CVE-2026-98691` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [thunderbolt: Fix domain reference leak when DPRX read is canceled](https://agentprime.io/advisories/CVE-2026-98690.md)
  `CVE-2026-98690` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [thunderbolt: Don't access a DP tunnel after its DPRX read was canceled](https://agentprime.io/advisories/CVE-2026-98689.md)
  `CVE-2026-98689` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [thunderbolt: Fix NULL dereference in tb_remove_work()](https://agentprime.io/advisories/CVE-2026-98688.md)
  `CVE-2026-98688` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [thunderbolt: Reject oversized XDomain properties responses](https://agentprime.io/advisories/CVE-2026-98687.md)
  `CVE-2026-98687` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [smb: client: discard post-EOF pagecache when extending a file via zero range](https://agentprime.io/advisories/CVE-2026-98686.md)
  `CVE-2026-98686` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [smb: client: discard post-EOF pagecache when extending a file via clone range](https://agentprime.io/advisories/CVE-2026-98685.md)
  `CVE-2026-98685` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [smb: client: flush and commit data before querying allocated ranges](https://agentprime.io/advisories/CVE-2026-98684.md)
  `CVE-2026-98684` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [smb: client: flush dirty data before zeroing a range](https://agentprime.io/advisories/CVE-2026-98683.md)
  `CVE-2026-98683` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [smb: client: drain and invalidate before server-side copy/clone](https://agentprime.io/advisories/CVE-2026-98682.md)
  `CVE-2026-98682` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races](https://agentprime.io/advisories/CVE-2026-98681.md)
  `CVE-2026-98681` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: accel: kionix-kx022a: Prevent memory leak and fix state](https://agentprime.io/advisories/CVE-2026-98680.md)
  `CVE-2026-98680` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: accel: kxcjk-1013: reject duplicate event disable](https://agentprime.io/advisories/CVE-2026-98679.md)
  `CVE-2026-98679` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: adc: ad4030: fix invalid oversampling_ratio validation](https://agentprime.io/advisories/CVE-2026-98678.md)
  `CVE-2026-98678` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: adc: ad_sigma_delta: fix use-after-free on unbind](https://agentprime.io/advisories/CVE-2026-98677.md)
  `CVE-2026-98677` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: adc: ade9000: fix NULL pointer dereference in clkout registration](https://agentprime.io/advisories/CVE-2026-98676.md)
  `CVE-2026-98676` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: adc: ade9000: handle Phase C dip events in IRQ1 handler](https://agentprime.io/advisories/CVE-2026-98675.md)
  `CVE-2026-98675` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: adc: adi-axi-adc: Initialize state mutex](https://agentprime.io/advisories/CVE-2026-98674.md)
  `CVE-2026-98674` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: adc: pac1934: check ACPI label duplication](https://agentprime.io/advisories/CVE-2026-98673.md)
  `CVE-2026-98673` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: adc: stm32-adc: fix possible division by zero in processed channel](https://agentprime.io/advisories/CVE-2026-98672.md)
  `CVE-2026-98672` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure](https://agentprime.io/advisories/CVE-2026-98671.md)
  `CVE-2026-98671` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind](https://agentprime.io/advisories/CVE-2026-98670.md)
  `CVE-2026-98670` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: buffer: serialize buffer teardown with mode claims](https://agentprime.io/advisories/CVE-2026-98669.md)
  `CVE-2026-98669` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.](https://agentprime.io/advisories/CVE-2026-98668.md)
  `CVE-2026-98668` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data](https://agentprime.io/advisories/CVE-2026-98667.md)
  `CVE-2026-98667` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: gyro: adis16136: fix unprotected debugfs reads](https://agentprime.io/advisories/CVE-2026-98666.md)
  `CVE-2026-98666` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: health: max30102: fix NULL dereference in interrupt handler](https://agentprime.io/advisories/CVE-2026-98665.md)
  `CVE-2026-98665` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: imu: adis16400: fix unprotected debugfs reads](https://agentprime.io/advisories/CVE-2026-98664.md)
  `CVE-2026-98664` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: imu: adis16480: fix unprotected debugfs reads](https://agentprime.io/advisories/CVE-2026-98663.md)
  `CVE-2026-98663` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: light: gp2ap020a00f: drain irq_work after free_irq](https://agentprime.io/advisories/CVE-2026-98662.md)
  `CVE-2026-98662` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: light: rohm-bu27034: Fix infinite delay on error](https://agentprime.io/advisories/CVE-2026-98661.md)
  `CVE-2026-98661` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTE4VDE1OjQ0OjIxLjU0MzAwMFoiLCJDVkUtMjAyNi05ODY2MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTE4VDE1OjQ2OjU2Ljg1NzAwMFoiLCJDVkUtMjAyNi05ODcyMSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTE4VDE1OjQ2OjU2Ljg1NzAwMFoiLCJDVkUtMjAyNi05ODcyMSJd>. Everything for agents: <https://agentprime.io/llms.txt>.