# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF](https://agentprime.io/advisories/CVE-2026-98840.md)
  `CVE-2026-98840` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection()](https://agentprime.io/advisories/CVE-2026-98839.md)
  `CVE-2026-98839` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [vt: skip screen update for DEC alignment test on backgroup consoles](https://agentprime.io/advisories/CVE-2026-98838.md)
  `CVE-2026-98838` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ALSA: caiaq: unregister the input device when probe fails](https://agentprime.io/advisories/CVE-2026-98837.md)
  `CVE-2026-98837` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ALSA: line6: reject oversized playback packets](https://agentprime.io/advisories/CVE-2026-98836.md)
  `CVE-2026-98836` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [iio: accel: kionix-kx022a: Fix array boundary check](https://agentprime.io/advisories/CVE-2026-98835.md)
  `CVE-2026-98835` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [mtd: core: avoid double-free of OTP NVMEM device](https://agentprime.io/advisories/CVE-2026-98834.md)
  `CVE-2026-98834` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [mtd: core: call \_get_device() with the master MTD](https://agentprime.io/advisories/CVE-2026-98833.md)
  `CVE-2026-98833` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [blk-cgroup: save IRQ state in blkg_tryget_closest()](https://agentprime.io/advisories/CVE-2026-98832.md)
  `CVE-2026-98832` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [of/overlay: don't leak fragment references when changeset init fails](https://agentprime.io/advisories/CVE-2026-98831.md)
  `CVE-2026-98831` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: wfx: validate MIB read length before copying to caller](https://agentprime.io/advisories/CVE-2026-98830.md)
  `CVE-2026-98830` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: mac80211: drop oversized fragments to avoid extra_len overflow](https://agentprime.io/advisories/CVE-2026-98829.md)
  `CVE-2026-98829` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: ath9k: reject short WMI command responses](https://agentprime.io/advisories/CVE-2026-98828.md)
  `CVE-2026-98828` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE](https://agentprime.io/advisories/CVE-2026-98827.md)
  `CVE-2026-98827` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [rtc: ac100: Fix clock provider use-after-free on probe failure](https://agentprime.io/advisories/CVE-2026-98826.md)
  `CVE-2026-98826` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()](https://agentprime.io/advisories/CVE-2026-98825.md)
  `CVE-2026-98825` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: mac80211: validate TX status rate metadata](https://agentprime.io/advisories/CVE-2026-98824.md)
  `CVE-2026-98824` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: cfg80211: preserve hidden-group beacon IE ownership](https://agentprime.io/advisories/CVE-2026-98823.md)
  `CVE-2026-98823` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: mac80211: prevent AP VLAN tx from other interfaces](https://agentprime.io/advisories/CVE-2026-98822.md)
  `CVE-2026-98822` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [block: reject polled dio with user integrity metadata](https://agentprime.io/advisories/CVE-2026-98821.md)
  `CVE-2026-98821` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [blk-mq: set RQF_USE_SCHED when the operation is known](https://agentprime.io/advisories/CVE-2026-98820.md)
  `CVE-2026-98820` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: btintel: validate DDC record lengths](https://agentprime.io/advisories/CVE-2026-98819.md)
  `CVE-2026-98819` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [mm/slab: do not wake up kswapd in \_\_kfree_rcu_sheaf()](https://agentprime.io/advisories/CVE-2026-98818.md)
  `CVE-2026-98818` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ASoC: SDCA: Add better pm_runtime error handling in func probe](https://agentprime.io/advisories/CVE-2026-98817.md)
  `CVE-2026-98817` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Fix overflow of jump offset in constant blinding](https://agentprime.io/advisories/CVE-2026-98816.md)
  `CVE-2026-98816` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nvme: fix cdev lifetime](https://agentprime.io/advisories/CVE-2026-98815.md)
  `CVE-2026-98815` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [nvme: fix command effects log lifetime for multipath heads](https://agentprime.io/advisories/CVE-2026-98814.md)
  `CVE-2026-98814` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Hold map BTF for the memory allocator destructor record](https://agentprime.io/advisories/CVE-2026-98813.md)
  `CVE-2026-98813` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net/mctp: publish the mctp_dev only after it is initialised](https://agentprime.io/advisories/CVE-2026-98812.md)
  `CVE-2026-98812` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net/sched: cls_api: reclaim an empty proto on the error path](https://agentprime.io/advisories/CVE-2026-98811.md)
  `CVE-2026-98811` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()](https://agentprime.io/advisories/CVE-2026-98810.md)
  `CVE-2026-98810` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister](https://agentprime.io/advisories/CVE-2026-98809.md)
  `CVE-2026-98809` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: systemport: Fix buffer overflow in bcm_sysport_get_stats()](https://agentprime.io/advisories/CVE-2026-98808.md)
  `CVE-2026-98808` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net/mlx5: Fix slab-out-of-bounds when handling team device events](https://agentprime.io/advisories/CVE-2026-98807.md)
  `CVE-2026-98807` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled](https://agentprime.io/advisories/CVE-2026-98806.md)
  `CVE-2026-98806` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [tipc: prevent GCM nonce reuse on peer key changes](https://agentprime.io/advisories/CVE-2026-98805.md)
  `CVE-2026-98805` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()](https://agentprime.io/advisories/CVE-2026-98804.md)
  `CVE-2026-98804` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: stmmac: fix rx Scatter-Gather support](https://agentprime.io/advisories/CVE-2026-98803.md)
  `CVE-2026-98803` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [seg6: ensure packet data is writable before modifying SRH and IPv6 DA](https://agentprime.io/advisories/CVE-2026-98802.md)
  `CVE-2026-98802` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: restrict SO_RESERVE_MEM to TCP sockets and cap max value](https://agentprime.io/advisories/CVE-2026-98801.md)
  `CVE-2026-98801` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Wait for an RCU tasks grace period before freeing trampoline progs](https://agentprime.io/advisories/CVE-2026-98800.md)
  `CVE-2026-98800` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Skip detached progs in trampoline images that are still in use](https://agentprime.io/advisories/CVE-2026-98799.md)
  `CVE-2026-98799` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: bcmgenet: fix NULL dereference in set_coalesce before first open](https://agentprime.io/advisories/CVE-2026-98798.md)
  `CVE-2026-98798` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: cap skb->queue_mapping when the tx queue is picked](https://agentprime.io/advisories/CVE-2026-98797.md)
  `CVE-2026-98797` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: ethernet: mtk_eth_soc: allocate dummy netdev sooner](https://agentprime.io/advisories/CVE-2026-98796.md)
  `CVE-2026-98796` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: sparx5: skip ptp deinit if init was skipped](https://agentprime.io/advisories/CVE-2026-98795.md)
  `CVE-2026-98795` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ipvs: filter some flags received in the backup server](https://agentprime.io/advisories/CVE-2026-98794.md)
  `CVE-2026-98794` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [netfilter: bpf: reject invalid NAT manipulation types](https://agentprime.io/advisories/CVE-2026-98793.md)
  `CVE-2026-98793` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [netfilter: flowtable: generalize pending status bit](https://agentprime.io/advisories/CVE-2026-98792.md)
  `CVE-2026-98792` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference](https://agentprime.io/advisories/CVE-2026-98791.md)
  `CVE-2026-98791` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [perf: Fix race between perf_event_exit_task() and perf_pending_task()](https://agentprime.io/advisories/CVE-2026-98790.md)
  `CVE-2026-98790` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Fix objects stuck in free_by_rcu_ttrace](https://agentprime.io/advisories/CVE-2026-98789.md)
  `CVE-2026-98789` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [futex: Fix private hash use-after-free on resize](https://agentprime.io/advisories/CVE-2026-98788.md)
  `CVE-2026-98788` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [bpf: Fix missing migration protection in \_\_rhtab_map_lookup_and_delete_batch()](https://agentprime.io/advisories/CVE-2026-98787.md)
  `CVE-2026-98787` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/amd/display: guard dc_sink dereferences in MST mode validation](https://agentprime.io/advisories/CVE-2026-98786.md)
  `CVE-2026-98786` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend](https://agentprime.io/advisories/CVE-2026-98785.md)
  `CVE-2026-98785` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/amdgpu/gfx6: fix firmware leak on teardown](https://agentprime.io/advisories/CVE-2026-98784.md)
  `CVE-2026-98784` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device](https://agentprime.io/advisories/CVE-2026-98783.md)
  `CVE-2026-98783` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/mediatek: Fix ovl adaptor platform device leak](https://agentprime.io/advisories/CVE-2026-98782.md)
  `CVE-2026-98782` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [drm/mediatek: Fix pdev reference leak in mtk_drm_bind()](https://agentprime.io/advisories/CVE-2026-98781.md)
  `CVE-2026-98781` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTE4VDE1OjQ4OjE4LjU5MDAwMFoiLCJDVkUtMjAyNi05ODc4MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTE4VDE1OjUwOjE1LjIyNDAwMFoiLCJDVkUtMjAyNi05ODg0MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTE4VDE1OjUwOjE1LjIyNDAwMFoiLCJDVkUtMjAyNi05ODg0MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.