# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [net: hisilicon: hisi_femac: Move setting of netops to fix crash](https://agentprime.io/advisories/CVE-2026-99200.md)
  `CVE-2026-99200` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [net: hisilicon: hip04_eth: Move setting of netops to fix crash](https://agentprime.io/advisories/CVE-2026-99199.md)
  `CVE-2026-99199` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [net: ethernet: actions: Move setting of netops to fix crash](https://agentprime.io/advisories/CVE-2026-99198.md)
  `CVE-2026-99198` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [net: mv643xx: move setting of netops to fix crash](https://agentprime.io/advisories/CVE-2026-99197.md)
  `CVE-2026-99197` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [net: au1000: move setting of netops to fix crash](https://agentprime.io/advisories/CVE-2026-99196.md)
  `CVE-2026-99196` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [net: ethoc: move setting of netops to fix crash](https://agentprime.io/advisories/CVE-2026-99195.md)
  `CVE-2026-99195` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [net: ethernet: aeroflex: move setting of netops to fix crash](https://agentprime.io/advisories/CVE-2026-99194.md)
  `CVE-2026-99194` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [net: ti: icssm-prueth: Move setting of netops to fix crash](https://agentprime.io/advisories/CVE-2026-99193.md)
  `CVE-2026-99193` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [net: bcmgenet: unshare the skb before writing the control block](https://agentprime.io/advisories/CVE-2026-99192.md)
  `CVE-2026-99192` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()](https://agentprime.io/advisories/CVE-2026-99191.md)
  `CVE-2026-99191` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths](https://agentprime.io/advisories/CVE-2026-99190.md)
  `CVE-2026-99190` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [gpio: mxc: fix race between chained IRQ handler install and probe completion](https://agentprime.io/advisories/CVE-2026-99189.md)
  `CVE-2026-99189` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [net: stmmac: dwmac1000: clear the RGMII status interrupt](https://agentprime.io/advisories/CVE-2026-99188.md)
  `CVE-2026-99188` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [perf: Fix perf_pmu_migrate_context() leaving events behind](https://agentprime.io/advisories/CVE-2026-99187.md)
  `CVE-2026-99187` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx()](https://agentprime.io/advisories/CVE-2026-99186.md)
  `CVE-2026-99186` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [firewire: core: fix race condition in split transaction handling](https://agentprime.io/advisories/CVE-2026-99185.md)
  `CVE-2026-99185` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 28 Oct 2026
- [accel/rocket: search every core slot when a core is removed](https://agentprime.io/advisories/CVE-2026-99184.md)
  `CVE-2026-99184` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [accel/rocket: search every core slot when looking up a scheduler](https://agentprime.io/advisories/CVE-2026-99183.md)
  `CVE-2026-99183` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture](https://agentprime.io/advisories/CVE-2026-99182.md)
  `CVE-2026-99182` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [autofs: ignore notification errors from a replaced pipe](https://agentprime.io/advisories/CVE-2026-99181.md)
  `CVE-2026-99181` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [unicode: free the map after a grace period](https://agentprime.io/advisories/CVE-2026-99180.md)
  `CVE-2026-99180` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 28 Oct 2026
- [watch_queue: Fix note pool publication race in watch_queue_set_size()](https://agentprime.io/advisories/CVE-2026-99179.md)
  `CVE-2026-99179` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context](https://agentprime.io/advisories/CVE-2026-99178.md)
  `CVE-2026-99178` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [KVM: SEV: Fix page dirtying in sev_gmem_post_populate()](https://agentprime.io/advisories/CVE-2026-99177.md)
  `CVE-2026-99177` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 28 Oct 2026
- [KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry](https://agentprime.io/advisories/CVE-2026-99176.md)
  `CVE-2026-99176` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [fsnotify: prevent mark additions during connector teardown](https://agentprime.io/advisories/CVE-2026-99175.md)
  `CVE-2026-99175` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [ext4: free the sbi after a grace period](https://agentprime.io/advisories/CVE-2026-99174.md)
  `CVE-2026-99174` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [eventfs: Free the eventfs_inode after an rcu grace period too](https://agentprime.io/advisories/CVE-2026-99173.md)
  `CVE-2026-99173` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 28 Oct 2026
- [ipc: drop the mqueue mount with kern_unmount() on setup failure](https://agentprime.io/advisories/CVE-2026-99172.md)
  `CVE-2026-99172` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [ntfs3: free the sbi after a grace period](https://agentprime.io/advisories/CVE-2026-99171.md)
  `CVE-2026-99171` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [namespace: a mount that copy_tree() leaves out can't take over a lock](https://agentprime.io/advisories/CVE-2026-99170.md)
  `CVE-2026-99170` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 28 Oct 2026
- [futex: Fix mm reuse handling for FUT_OFF_MMSHARED](https://agentprime.io/advisories/CVE-2026-99169.md)
  `CVE-2026-99169` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [mshv_vtl: Check per-CPU register page before mmap](https://agentprime.io/advisories/CVE-2026-99168.md)
  `CVE-2026-99168` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [net/sched: fix use-after-free in \_\_tcf_action_put()](https://agentprime.io/advisories/CVE-2026-99167.md)
  `CVE-2026-99167` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 28 Oct 2026
- [net: rds: fix uninitialized trans dereference in CM event handler](https://agentprime.io/advisories/CVE-2026-99166.md)
  `CVE-2026-99166` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [sctp: revalidate output stream after association connect wait](https://agentprime.io/advisories/CVE-2026-99165.md)
  `CVE-2026-99165` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [spi: imx: fix slab corruption from undersized DMA bounce buffers](https://agentprime.io/advisories/CVE-2026-99164.md)
  `CVE-2026-99164` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 28 Oct 2026
- [tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields](https://agentprime.io/advisories/CVE-2026-99163.md)
  `CVE-2026-99163` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 28 Oct 2026
- [gpio: shared: fix use-after-free bug when adding shared proxies](https://agentprime.io/advisories/CVE-2026-99162.md)
  `CVE-2026-99162` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()](https://agentprime.io/advisories/CVE-2026-99161.md)
  `CVE-2026-99161` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [ring-buffer: Do not show buffer_meta for CPUs without a buffer](https://agentprime.io/advisories/CVE-2026-99160.md)
  `CVE-2026-99160` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()](https://agentprime.io/advisories/CVE-2026-99159.md)
  `CVE-2026-99159` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [ring-buffer: Fix false warning in ring_buffer_map_get_reader()](https://agentprime.io/advisories/CVE-2026-99158.md)
  `CVE-2026-99158` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies](https://agentprime.io/advisories/CVE-2026-99157.md)
  `CVE-2026-99157` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [scsi: st: Fix use-after-free race between st_remove() and st_open()](https://agentprime.io/advisories/CVE-2026-99156.md)
  `CVE-2026-99156` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 28 Oct 2026
- [scsi: xen/scsifront: Check for a NULL shadow entry on a backend response](https://agentprime.io/advisories/CVE-2026-99155.md)
  `CVE-2026-99155` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [scsi: libiscsi: Reject a negative task index from parse_pdu_itt](https://agentprime.io/advisories/CVE-2026-99154.md)
  `CVE-2026-99154` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026
- [scsi: libiscsi: Validate the ITT reflected in a Reject PDU](https://agentprime.io/advisories/CVE-2026-99153.md)
  `CVE-2026-99153` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026
- [scsi: libiscsi: Validate the task named by a management response](https://agentprime.io/advisories/CVE-2026-99152.md)
  `CVE-2026-99152` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2026
- [drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions](https://agentprime.io/advisories/CVE-2026-99151.md)
  `CVE-2026-99151` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr](https://agentprime.io/advisories/CVE-2026-99150.md)
  `CVE-2026-99150` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl](https://agentprime.io/advisories/CVE-2026-99149.md)
  `CVE-2026-99149` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [drm/amdgpu: keep the eviction fence until the last handle is closed](https://agentprime.io/advisories/CVE-2026-99148.md)
  `CVE-2026-99148` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 28 Oct 2026
- [drm/exec: don't immediately add prelocked obj to array of locked objs](https://agentprime.io/advisories/CVE-2026-99147.md)
  `CVE-2026-99147` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [drm/i915/dmc: Add sanity check for DMC load address](https://agentprime.io/advisories/CVE-2026-99146.md)
  `CVE-2026-99146` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change](https://agentprime.io/advisories/CVE-2026-99145.md)
  `CVE-2026-99145` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue](https://agentprime.io/advisories/CVE-2026-99144.md)
  `CVE-2026-99144` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [tracing: Keep the predicate limit separate from program capacity](https://agentprime.io/advisories/CVE-2026-99143.md)
  `CVE-2026-99143` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 28 Oct 2026
- [tracing: Check operator stack capacity before pushing](https://agentprime.io/advisories/CVE-2026-99142.md)
  `CVE-2026-99142` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 28 Oct 2026
- [tracing: Fix crash in print_graph_function_event()](https://agentprime.io/advisories/CVE-2026-99141.md)
  `CVE-2026-99141` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 28 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTI4VDEwOjM0OjUyLjA5MTAwMFoiLCJDVkUtMjAyNi05OTE0MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTI4VDEwOjM1OjU2LjA2OTAwMFoiLCJDVkUtMjAyNi05OTIwMSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTI4VDEwOjM1OjU2LjA2OTAwMFoiLCJDVkUtMjAyNi05OTIwMSJd>. Everything for agents: <https://agentprime.io/llms.txt>.