# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [netfilter: ipset: mark the rcu locked areas properly](https://agentprime.io/advisories/CVE-2026-98899.md)
  `CVE-2026-98899` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized](https://agentprime.io/advisories/CVE-2026-98898.md)
  `CVE-2026-98898` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ksmbd: don't hold ci->m_lock while waiting for a lease break ack](https://agentprime.io/advisories/CVE-2026-98897.md)
  `CVE-2026-98897` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [thunderbolt: Keep the domain reference while processing hotplug](https://agentprime.io/advisories/CVE-2026-98896.md)
  `CVE-2026-98896` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [net/mlx5: HWS, Handle destroying table that has a miss table](https://agentprime.io/advisories/CVE-2026-98895.md)
  `CVE-2026-98895` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 23 Oct 2026
- [drm/amd/ras: reset CPER ring on corrupt entry size](https://agentprime.io/advisories/CVE-2026-98894.md)
  `CVE-2026-98894` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [firmware: arm_scmi: Validate SENSOR_UPDATE payload size](https://agentprime.io/advisories/CVE-2026-98893.md)
  `CVE-2026-98893` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size](https://agentprime.io/advisories/CVE-2026-98892.md)
  `CVE-2026-98892` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [wifi: mac80211: validate deauth frame length before reason access](https://agentprime.io/advisories/CVE-2026-98891.md)
  `CVE-2026-98891` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [wifi: libertas: reject short monitor TX frames](https://agentprime.io/advisories/CVE-2026-98890.md)
  `CVE-2026-98890` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [wifi: iwlwifi: mvm: fix sched scan IE sizing](https://agentprime.io/advisories/CVE-2026-98889.md)
  `CVE-2026-98889` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [arm64: kprobes: Allow reentering kprobes while single-stepping](https://agentprime.io/advisories/CVE-2026-98888.md)
  `CVE-2026-98888` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO](https://agentprime.io/advisories/CVE-2026-98887.md)
  `CVE-2026-98887` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [drm/gma500: return errors from Oaktrail HDMI I2C reads](https://agentprime.io/advisories/CVE-2026-98886.md)
  `CVE-2026-98886` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ima: return error early if file xattr cannot be changed](https://agentprime.io/advisories/CVE-2026-98885.md)
  `CVE-2026-98885` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [mmc: core: Add validation for host-provided max_segs](https://agentprime.io/advisories/CVE-2026-98884.md)
  `CVE-2026-98884` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [serial: 8250_port: recognize UPIO_AU](https://agentprime.io/advisories/CVE-2026-98883.md)
  `CVE-2026-98883` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [media: chips-media: wave5: Add range checks for dec_output_info](https://agentprime.io/advisories/CVE-2026-98882.md)
  `CVE-2026-98882` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()](https://agentprime.io/advisories/CVE-2026-98881.md)
  `CVE-2026-98881` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ntfs3: handle set_blocksize failures](https://agentprime.io/advisories/CVE-2026-98880.md)
  `CVE-2026-98880` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [isofs: handle set_blocksize failures](https://agentprime.io/advisories/CVE-2026-98879.md)
  `CVE-2026-98879` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [irqchip/gic-v5: Immediately exec priority drop following activate](https://agentprime.io/advisories/CVE-2026-98878.md)
  `CVE-2026-98878` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed](https://agentprime.io/advisories/CVE-2026-98877.md)
  `CVE-2026-98877` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [host1x: bus: Fix missing ops null check in error teardown](https://agentprime.io/advisories/CVE-2026-98876.md)
  `CVE-2026-98876` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [drm/nouveau/gsp: add SEC2 to GA100 chip table](https://agentprime.io/advisories/CVE-2026-98875.md)
  `CVE-2026-98875` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect](https://agentprime.io/advisories/CVE-2026-98874.md)
  `CVE-2026-98874` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [netfilter: nf_conntrack_expect: zero at allocation time](https://agentprime.io/advisories/CVE-2026-98873.md)
  `CVE-2026-98873` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [freevxfs: don't BUG() on unknown typed-extent type](https://agentprime.io/advisories/CVE-2026-98872.md)
  `CVE-2026-98872` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [crypto: ccp - Fix possible deadlock in SEV init failure path](https://agentprime.io/advisories/CVE-2026-98871.md)
  `CVE-2026-98871` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ksmbd: remove stale channels from all sessions on teardown](https://agentprime.io/advisories/CVE-2026-98870.md)
  `CVE-2026-98870` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 23 Oct 2026
- [Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID](https://agentprime.io/advisories/CVE-2023-7356.md)
  `CVE-2023-7356` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 21 Oct 2026
- [bpf: Infer zext_dst based on static register liveness analysis](https://agentprime.io/advisories/CVE-2026-98869.md)
  `CVE-2026-98869` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 21 Oct 2026
- [dm-pcache: reject a kset that overruns its segment](https://agentprime.io/advisories/CVE-2026-98868.md)
  `CVE-2026-98868` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [dm-pcache: bound the logical key offset from persistent memory](https://agentprime.io/advisories/CVE-2026-98867.md)
  `CVE-2026-98867` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [sched/cache: Introduce task_struct->sched_cache_grp to fix UAF](https://agentprime.io/advisories/CVE-2026-98866.md)
  `CVE-2026-98866` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [sched_ext: Don't run ops.dequeue() with a DSQ lock held](https://agentprime.io/advisories/CVE-2026-98865.md)
  `CVE-2026-98865` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task](https://agentprime.io/advisories/CVE-2026-98864.md)
  `CVE-2026-98864` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails](https://agentprime.io/advisories/CVE-2026-98863.md)
  `CVE-2026-98863` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [audit: fix exe mark UAF in kill_rules()](https://agentprime.io/advisories/CVE-2026-98862.md)
  `CVE-2026-98862` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching()](https://agentprime.io/advisories/CVE-2026-98861.md)
  `CVE-2026-98861` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request](https://agentprime.io/advisories/CVE-2026-98860.md)
  `CVE-2026-98860` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [HID: multitouch: stop the release timer from being rearmed on remove](https://agentprime.io/advisories/CVE-2026-98859.md)
  `CVE-2026-98859` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [io_uring: fix task_work add use-after-free with SQPOLL](https://agentprime.io/advisories/CVE-2026-98858.md)
  `CVE-2026-98858` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [ipvs: bound LBLCR and LBLC cache growth](https://agentprime.io/advisories/CVE-2026-98857.md)
  `CVE-2026-98857` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [kprobes: Skip disarmed probes when checking optkprobe overlap](https://agentprime.io/advisories/CVE-2026-98856.md)
  `CVE-2026-98856` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [of/overlay: put property on deadprops only after changeset add succeeds](https://agentprime.io/advisories/CVE-2026-98855.md)
  `CVE-2026-98855` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [of/overlay: only treat a positive changeset id as registered](https://agentprime.io/advisories/CVE-2026-98854.md)
  `CVE-2026-98854` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: gso: limit recursive IP-in-IP segmentation](https://agentprime.io/advisories/CVE-2026-98853.md)
  `CVE-2026-98853` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net: extend IPv6 exthdr detection of tunneled packets](https://agentprime.io/advisories/CVE-2026-98852.md)
  `CVE-2026-98852` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [netfilter: nft_flow_offload: drop flowtable reference on init error path](https://agentprime.io/advisories/CVE-2026-98851.md)
  `CVE-2026-98851` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [net/packet: prevent TX_RING byte count overflow](https://agentprime.io/advisories/CVE-2026-98850.md)
  `CVE-2026-98850` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [pfcp: fix socket lifetime on netdevice registration failure](https://agentprime.io/advisories/CVE-2026-98849.md)
  `CVE-2026-98849` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [rtc: ac100: Assign .num before accessing .hws](https://agentprime.io/advisories/CVE-2026-98848.md)
  `CVE-2026-98848` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [rtc: spear: initialize IRQ state before requesting alarm IRQ](https://agentprime.io/advisories/CVE-2026-98847.md)
  `CVE-2026-98847` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [sctp: check RCV_SHUTDOWN after the sendmsg connect wait](https://agentprime.io/advisories/CVE-2026-98846.md)
  `CVE-2026-98846` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [tpm: Disable TPM on null key name mismatch](https://agentprime.io/advisories/CVE-2026-98845.md)
  `CVE-2026-98845` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [netfs: clear post-EOF pagecache when extending a file via write](https://agentprime.io/advisories/CVE-2026-98844.md)
  `CVE-2026-98844` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [netfs: zero gaps in read-gaps folio to avoid writing back stale data](https://agentprime.io/advisories/CVE-2026-98843.md)
  `CVE-2026-98843` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [module: fix lost error code from codetag_load_module()](https://agentprime.io/advisories/CVE-2026-98842.md)
  `CVE-2026-98842` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026
- [virt: vmgenid: set driver_data before registering notification handlers](https://agentprime.io/advisories/CVE-2026-98841.md)
  `CVE-2026-98841` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 18 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTE4VDE1OjUwOjE1LjIyNDAwMFoiLCJDVkUtMjAyNi05ODg0MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTIzVDExOjU0OjEwLjU2NjAwMFoiLCJDVkUtMjAyNi05ODkwMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTIzVDExOjU0OjEwLjU2NjAwMFoiLCJDVkUtMjAyNi05ODkwMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.