# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [drm/amdgpu: fix IP instance memory leak on kobject add failure](https://agentprime.io/advisories/CVE-2026-98780.md)
  `CVE-2026-98780` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/amdgpu: fix ACP MFD device leak on init failure](https://agentprime.io/advisories/CVE-2026-98779.md)
  `CVE-2026-98779` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [binder: fix is_failure flag for superseded transaction cleanup](https://agentprime.io/advisories/CVE-2026-98778.md)
  `CVE-2026-98778` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [binder: fix leaked fd fixups on TF_UPDATE_TXN supersede](https://agentprime.io/advisories/CVE-2026-98777.md)
  `CVE-2026-98777` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [binderfs: fix UAF write in binder_add_device](https://agentprime.io/advisories/CVE-2026-98776.md)
  `CVE-2026-98776` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nitro_enclaves: fix use-after-free on SLOT_ALLOC failure](https://agentprime.io/advisories/CVE-2026-98775.md)
  `CVE-2026-98775` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [rust_binder: cancel deferred work items in thread exit](https://agentprime.io/advisories/CVE-2026-98774.md)
  `CVE-2026-98774` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [USB: cdc-acm: skip URB restart in port_shutdown if disconnected](https://agentprime.io/advisories/CVE-2026-98773.md)
  `CVE-2026-98773` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [USB: serial: fix port tear down use-after-free](https://agentprime.io/advisories/CVE-2026-98772.md)
  `CVE-2026-98772` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [usb: storage: sierra_ms: reject short SWoC info transfers](https://agentprime.io/advisories/CVE-2026-98771.md)
  `CVE-2026-98771` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [usb: gadget: midi2: Fix the jack descriptor array sizes](https://agentprime.io/advisories/CVE-2026-98770.md)
  `CVE-2026-98770` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [usb: gadget: f_uac1_legacy: validate bRequest index in generic\_{set,get}\_cmd](https://agentprime.io/advisories/CVE-2026-98769.md)
  `CVE-2026-98769` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [usb: typec: anx7411 - stop the IRQ before destroying the workqueue](https://agentprime.io/advisories/CVE-2026-98768.md)
  `CVE-2026-98768` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [usb: dwc3: gadget: fix IRQ storm on invalid event buffer count](https://agentprime.io/advisories/CVE-2026-98767.md)
  `CVE-2026-98767` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [usb: gadget: aspeed-vhub: cancel wake work on device removal](https://agentprime.io/advisories/CVE-2026-98766.md)
  `CVE-2026-98766` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [USB: gadget: dummy-hcd: Fix wait for outstanding request completions](https://agentprime.io/advisories/CVE-2026-98765.md)
  `CVE-2026-98765` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC](https://agentprime.io/advisories/CVE-2026-98764.md)
  `CVE-2026-98764` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [usb: core: clear both ep_in and ep_out for non-ep0 control endpoints](https://agentprime.io/advisories/CVE-2026-98763.md)
  `CVE-2026-98763` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [USB: dwc2: shut down wakeup timer before freeing HCD state](https://agentprime.io/advisories/CVE-2026-98762.md)
  `CVE-2026-98762` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [usb: typec: tcpm: recover after failure to start the frs ams](https://agentprime.io/advisories/CVE-2026-98761.md)
  `CVE-2026-98761` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()](https://agentprime.io/advisories/CVE-2026-98760.md)
  `CVE-2026-98760` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()](https://agentprime.io/advisories/CVE-2026-98759.md)
  `CVE-2026-98759` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [usb: typec: ucsi: glink: fix use-after-free of ucsi on remove](https://agentprime.io/advisories/CVE-2026-98758.md)
  `CVE-2026-98758` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [usb: cdns3: fix use-after-free in cdns3_gadget_exit()](https://agentprime.io/advisories/CVE-2026-98757.md)
  `CVE-2026-98757` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe](https://agentprime.io/advisories/CVE-2026-98756.md)
  `CVE-2026-98756` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [tty: vcc: zero-initialize control packet in vcc_send_ctl()](https://agentprime.io/advisories/CVE-2026-98755.md)
  `CVE-2026-98755` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup](https://agentprime.io/advisories/CVE-2026-98754.md)
  `CVE-2026-98754` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [tty: tty_port: restore TTY_IO_ERROR on activation failure](https://agentprime.io/advisories/CVE-2026-98753.md)
  `CVE-2026-98753` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [tty: port: fix tty_port_tty_vhangup() race](https://agentprime.io/advisories/CVE-2026-98752.md)
  `CVE-2026-98752` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [tty: abort break signalling on hangup](https://agentprime.io/advisories/CVE-2026-98751.md)
  `CVE-2026-98751` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [tty: fix saved termios reset race](https://agentprime.io/advisories/CVE-2026-98750.md)
  `CVE-2026-98750` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [tty: serial: max3100: shut down timer before freeing port](https://agentprime.io/advisories/CVE-2026-98749.md)
  `CVE-2026-98749` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [serial: 8250_bcm7271: fix use-after-free in brcmuart_remove()](https://agentprime.io/advisories/CVE-2026-98748.md)
  `CVE-2026-98748` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [serial: core: fix NULL pointer dereference in serial_core_unregister_port()](https://agentprime.io/advisories/CVE-2026-98747.md)
  `CVE-2026-98747` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()](https://agentprime.io/advisories/CVE-2026-98746.md)
  `CVE-2026-98746` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems](https://agentprime.io/advisories/CVE-2026-98745.md)
  `CVE-2026-98745` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ASoC: codecs: max98363: fix uninitialized stream_config->type](https://agentprime.io/advisories/CVE-2026-98744.md)
  `CVE-2026-98744` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type](https://agentprime.io/advisories/CVE-2026-98743.md)
  `CVE-2026-98743` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ALSA: seq: Serialize compat port-info ioctls](https://agentprime.io/advisories/CVE-2026-98742.md)
  `CVE-2026-98742` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ALSA: ua101: reject mismatched capture/playback packet sizes](https://agentprime.io/advisories/CVE-2026-98741.md)
  `CVE-2026-98741` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [EDAC/altera: Drop \_\_init from ECC setup paths for re-probe safety](https://agentprime.io/advisories/CVE-2026-98740.md)
  `CVE-2026-98740` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: RFCOMM: Fix initial port reference race](https://agentprime.io/advisories/CVE-2026-98739.md)
  `CVE-2026-98739` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: Serialize SMP remote OOB data access](https://agentprime.io/advisories/CVE-2026-98738.md)
  `CVE-2026-98738` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: hci_sync: Fix inquiry cache use-after-free](https://agentprime.io/advisories/CVE-2026-98737.md)
  `CVE-2026-98737` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: hci_conn: Lock parent access during enhanced SCO setup](https://agentprime.io/advisories/CVE-2026-98736.md)
  `CVE-2026-98736` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: hci_core: Serialize ACL scheduling with channel deletion](https://agentprime.io/advisories/CVE-2026-98735.md)
  `CVE-2026-98735` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown](https://agentprime.io/advisories/CVE-2026-98734.md)
  `CVE-2026-98734` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: hci_core: Serialize fragmented ISO packet queueing](https://agentprime.io/advisories/CVE-2026-98733.md)
  `CVE-2026-98733` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: btintel: fix buffer over-read in btintel_hw_error()](https://agentprime.io/advisories/CVE-2026-98732.md)
  `CVE-2026-98732` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()](https://agentprime.io/advisories/CVE-2026-98731.md)
  `CVE-2026-98731` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()](https://agentprime.io/advisories/CVE-2026-98730.md)
  `CVE-2026-98730` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h](https://agentprime.io/advisories/CVE-2026-98729.md)
  `CVE-2026-98729` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [tpm: fix off-by-four bounds check in tpm2_get_random()](https://agentprime.io/advisories/CVE-2026-98728.md)
  `CVE-2026-98728` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known](https://agentprime.io/advisories/CVE-2026-98727.md)
  `CVE-2026-98727` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nvme-multipath: fix underflow in ANA log bounds checks](https://agentprime.io/advisories/CVE-2026-98726.md)
  `CVE-2026-98726` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()](https://agentprime.io/advisories/CVE-2026-98725.md)
  `CVE-2026-98725` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nvmet: pci-epf: reject too-short SGL segments](https://agentprime.io/advisories/CVE-2026-98724.md)
  `CVE-2026-98724` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nvmet: copy the hostid into the ctrl before creating PR pc_refs](https://agentprime.io/advisories/CVE-2026-98723.md)
  `CVE-2026-98723` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [mtd: block2mtd: Fix divide error when erase_size is zero](https://agentprime.io/advisories/CVE-2026-98722.md)
  `CVE-2026-98722` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ](https://agentprime.io/advisories/CVE-2026-98721.md)
  `CVE-2026-98721` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTE4VDE1OjQ2OjU2Ljg1NzAwMFoiLCJDVkUtMjAyNi05ODcyMSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTE4VDE1OjQ4OjE4LjU5MDAwMFoiLCJDVkUtMjAyNi05ODc4MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTE4VDE1OjQ4OjE4LjU5MDAwMFoiLCJDVkUtMjAyNi05ODc4MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.