# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [tracing: Fix hist trigger timestamps for buffered events](https://agentprime.io/advisories/CVE-2026-99140.md)
  `CVE-2026-99140` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)](https://agentprime.io/advisories/CVE-2026-99139.md)
  `CVE-2026-99139` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)](https://agentprime.io/advisories/CVE-2026-99138.md)
  `CVE-2026-99138` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [cifs: don't update i_size in cifs_do_truncate without a cached handle](https://agentprime.io/advisories/CVE-2026-99137.md)
  `CVE-2026-99137` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [dm-crypt: fix a tiny race condition in crypt_dec_pending](https://agentprime.io/advisories/CVE-2026-99136.md)
  `CVE-2026-99136` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 28 Oct 2026
- [dm-integrity: fix infinite loop on discard with large tag size](https://agentprime.io/advisories/CVE-2026-99135.md)
  `CVE-2026-99135` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [mac802154: fix data race and NULL deref on local->assoc_dev](https://agentprime.io/advisories/CVE-2026-99134.md)
  `CVE-2026-99134` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [net/iucv: fix the recvmsg window update](https://agentprime.io/advisories/CVE-2026-99133.md)
  `CVE-2026-99133` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf](https://agentprime.io/advisories/CVE-2026-99132.md)
  `CVE-2026-99132` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [xfs: fix capability check in xfs](https://agentprime.io/advisories/CVE-2026-99131.md)
  `CVE-2026-99131` · CVE record: Linux Linux · CVSS 8.2 High · Not analysed yet · Published 28 Oct 2026
- [io_uring/cancel: don't spin on local work the task can't run](https://agentprime.io/advisories/CVE-2026-99130.md)
  `CVE-2026-99130` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [selinux: fix BPF token permission checks](https://agentprime.io/advisories/CVE-2026-99129.md)
  `CVE-2026-99129` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [sctp: validate chunk length in the inqueue parser](https://agentprime.io/advisories/CVE-2026-99128.md)
  `CVE-2026-99128` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [page_pool: keep frag_offset aligned for odd-sized requests](https://agentprime.io/advisories/CVE-2026-99127.md)
  `CVE-2026-99127` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [s390/ctcm: Prevent XID null dereference](https://agentprime.io/advisories/CVE-2026-99126.md)
  `CVE-2026-99126` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [s390/pai: Handle multiple PMU stop callback invocations](https://agentprime.io/advisories/CVE-2026-99125.md)
  `CVE-2026-99125` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [s390/pci: Fix leak of uninitialized kernel data in SCLP report](https://agentprime.io/advisories/CVE-2026-99124.md)
  `CVE-2026-99124` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [vsock/virtio: validate packet source for connected sockets](https://agentprime.io/advisories/CVE-2026-99123.md)
  `CVE-2026-99123` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 28 Oct 2026
- [vsock/vmci: validate packet source for connected sockets](https://agentprime.io/advisories/CVE-2026-99122.md)
  `CVE-2026-99122` · CVE record: Linux Linux · CVSS 7.3 High · Not analysed yet · Published 28 Oct 2026
- [ipv4: avoid divide by zero in fib_rebalance](https://agentprime.io/advisories/CVE-2026-99121.md)
  `CVE-2026-99121` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes](https://agentprime.io/advisories/CVE-2026-99120.md)
  `CVE-2026-99120` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [drm/amdgpu/userq: actually validate userq BOs](https://agentprime.io/advisories/CVE-2026-99119.md)
  `CVE-2026-99119` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [drm/i915/dmc: Harden DMC firmware payload parsing](https://agentprime.io/advisories/CVE-2026-99118.md)
  `CVE-2026-99118` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [net: bridge: mcast: don't truncate the port group walk on teardown](https://agentprime.io/advisories/CVE-2026-99117.md)
  `CVE-2026-99117` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 28 Oct 2026
- [net: psp: do not inherit the Rx association on clone](https://agentprime.io/advisories/CVE-2026-99116.md)
  `CVE-2026-99116` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 28 Oct 2026
- [ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION](https://agentprime.io/advisories/CVE-2026-99115.md)
  `CVE-2026-99115` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION](https://agentprime.io/advisories/CVE-2026-99114.md)
  `CVE-2026-99114` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in](https://agentprime.io/advisories/CVE-2026-99113.md)
  `CVE-2026-99113` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [net/sched: cls_flower: validate mask pointer after nla_next()](https://agentprime.io/advisories/CVE-2026-99112.md)
  `CVE-2026-99112` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 28 Oct 2026
- [smb: client: fix data corruption with concurrent writes and O_TRUNC](https://agentprime.io/advisories/CVE-2026-99111.md)
  `CVE-2026-99111` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [smb: client: fix heap overflow in cifs_do_set_acl()](https://agentprime.io/advisories/CVE-2026-99110.md)
  `CVE-2026-99110` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 28 Oct 2026
- [smb: client: reject SetEA requests that do not fit the request buffer](https://agentprime.io/advisories/CVE-2026-99109.md)
  `CVE-2026-99109` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 28 Oct 2026
- [ntfs: fix FITRIM range alignment](https://agentprime.io/advisories/CVE-2026-99108.md)
  `CVE-2026-99108` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize](https://agentprime.io/advisories/CVE-2026-99107.md)
  `CVE-2026-99107` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 28 Oct 2026
- [drm/amdgpu: free the userptr ranges when a CS fails after parser_bos](https://agentprime.io/advisories/CVE-2026-99106.md)
  `CVE-2026-99106` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ](https://agentprime.io/advisories/CVE-2026-99105.md)
  `CVE-2026-99105` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor](https://agentprime.io/advisories/CVE-2026-99104.md)
  `CVE-2026-99104` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [workqueue: Fix unbound pool lifetime for pending pwqs](https://agentprime.io/advisories/CVE-2026-99103.md)
  `CVE-2026-99103` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [ntfs: take invalidate_lock in ntfs_setattr_size()](https://agentprime.io/advisories/CVE-2026-99102.md)
  `CVE-2026-99102` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [ntfs: move attribute payload before shrinking its record](https://agentprime.io/advisories/CVE-2026-99101.md)
  `CVE-2026-99101` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [wifi: p54: validate firmware record lengths](https://agentprime.io/advisories/CVE-2026-99100.md)
  `CVE-2026-99100` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [x86/CPU/AMD: Fix AMD TLBI Erratum #1718](https://agentprime.io/advisories/CVE-2026-99099.md)
  `CVE-2026-99099` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 26 Oct 2026
- [dm-integrity: fix buffer overflow in inline mode with large tag size](https://agentprime.io/advisories/CVE-2026-99098.md)
  `CVE-2026-99098` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 26 Oct 2026
- [tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper()](https://agentprime.io/advisories/CVE-2026-99097.md)
  `CVE-2026-99097` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 26 Oct 2026
- [io_uring/register: don't exempt disabled rings from task restrictions](https://agentprime.io/advisories/CVE-2026-99096.md)
  `CVE-2026-99096` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 26 Oct 2026
- [drm/vc4: drain the hangcheck timer and works on V3D unbind](https://agentprime.io/advisories/CVE-2026-99095.md)
  `CVE-2026-99095` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 26 Oct 2026
- [Bluetooth: btintel_pcie: fix TX descriptor bounds check](https://agentprime.io/advisories/CVE-2026-99094.md)
  `CVE-2026-99094` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 26 Oct 2026
- [mm: don't schedule deferred kernel page table freeing while booting](https://agentprime.io/advisories/CVE-2026-99093.md)
  `CVE-2026-99093` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 26 Oct 2026
- [riscv: patch: fix handling of bpf-jit execmem addresses](https://agentprime.io/advisories/CVE-2026-99092.md)
  `CVE-2026-99092` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 26 Oct 2026
- [Bluetooth: MGMT: Fix status of pending commands flushed on power off](https://agentprime.io/advisories/CVE-2026-99091.md)
  `CVE-2026-99091` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 26 Oct 2026
- [drm/amdgpu: serialize vblank counter reads against GPU reset](https://agentprime.io/advisories/CVE-2026-99090.md)
  `CVE-2026-99090` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 26 Oct 2026
- [ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM](https://agentprime.io/advisories/CVE-2026-99089.md)
  `CVE-2026-99089` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 26 Oct 2026
- [net: openvswitch: validate transport header presence in set_ipv6_addr](https://agentprime.io/advisories/CVE-2026-99088.md)
  `CVE-2026-99088` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 26 Oct 2026
- [dm-integrity: fix NULL pointer dereference when the 'R' flag is used](https://agentprime.io/advisories/CVE-2026-99087.md)
  `CVE-2026-99087` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [dm-integrity: validate the superblock on resume](https://agentprime.io/advisories/CVE-2026-99086.md)
  `CVE-2026-99086` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler](https://agentprime.io/advisories/CVE-2026-99085.md)
  `CVE-2026-99085` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [readdir: take no inode lock on an immutable directory](https://agentprime.io/advisories/CVE-2026-99084.md)
  `CVE-2026-99084` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ksmbd: fix heap out-of-bounds write in krb5_authenticate()](https://agentprime.io/advisories/CVE-2026-99083.md)
  `CVE-2026-99083` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 23 Oct 2026
- [KVM: x86: Use active memslots for the per-vCPU MMIO cache](https://agentprime.io/advisories/CVE-2026-99082.md)
  `CVE-2026-99082` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 23 Oct 2026
- [bnxt_en: fix DMA mapping length for padded small packets](https://agentprime.io/advisories/CVE-2026-99081.md)
  `CVE-2026-99081` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 23 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTIzVDEyOjIzOjI4LjM0NzAwMFoiLCJDVkUtMjAyNi05OTA4MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTI4VDEwOjM0OjUyLjA5MTAwMFoiLCJDVkUtMjAyNi05OTE0MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTI4VDEwOjM0OjUyLjA5MTAwMFoiLCJDVkUtMjAyNi05OTE0MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.