# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [btrfs: don't stash io_uring encoded data across -EAGAIN](https://agentprime.io/advisories/CVE-2026-98960.md)
  `CVE-2026-98960` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [btrfs: fix xattr replace when multiple xattrs are packed in the same item](https://agentprime.io/advisories/CVE-2026-98959.md)
  `CVE-2026-98959` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Oct 2026
- [wifi: mt76: account non-AQL frames per peer rather than per link](https://agentprime.io/advisories/CVE-2026-98958.md)
  `CVE-2026-98958` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [wifi: mt76: mt7915: disable rx napi when removing device](https://agentprime.io/advisories/CVE-2026-98957.md)
  `CVE-2026-98957` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ASoC: adau1372: allow sleepy powerdown GPIOs](https://agentprime.io/advisories/CVE-2026-98956.md)
  `CVE-2026-98956` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [flow_dissector: avoid u16 truncation of skb->len when computing thoff](https://agentprime.io/advisories/CVE-2026-98955.md)
  `CVE-2026-98955` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [net: always dissect GSO packets in \_\_virtio_net_hdr_to_skb()](https://agentprime.io/advisories/CVE-2026-98954.md)
  `CVE-2026-98954` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [devlink: fix devlink_rel reference leak when notify work is pending](https://agentprime.io/advisories/CVE-2026-98953.md)
  `CVE-2026-98953` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [pfcp: make sure the SEID is linear before reading it](https://agentprime.io/advisories/CVE-2026-98952.md)
  `CVE-2026-98952` · CVE record: Linux Linux · CVSS 7.3 High · Not analysed yet · Published 23 Oct 2026
- [riscv: ptrace: Zero-initialize regset buffers before copyin](https://agentprime.io/advisories/CVE-2026-98951.md)
  `CVE-2026-98951` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()](https://agentprime.io/advisories/CVE-2026-98950.md)
  `CVE-2026-98950` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [drm/imagination: Fix reference and vm_bo handling in remap()](https://agentprime.io/advisories/CVE-2026-98949.md)
  `CVE-2026-98949` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [mlxsw: spectrum_flower: Fix port range register leak in tmplt_create()](https://agentprime.io/advisories/CVE-2026-98948.md)
  `CVE-2026-98948` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [vsock: Fix memory leak in vmci_transport_recv_dgram_cb()](https://agentprime.io/advisories/CVE-2026-98947.md)
  `CVE-2026-98947` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [drm/vc4: Disable the V3D interrupt across runtime suspend](https://agentprime.io/advisories/CVE-2026-98946.md)
  `CVE-2026-98946` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [HID: steam: Rearrange teardown sequence](https://agentprime.io/advisories/CVE-2026-98945.md)
  `CVE-2026-98945` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [HID: steam: Refactor registration](https://agentprime.io/advisories/CVE-2026-98944.md)
  `CVE-2026-98944` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [sched_ext: Build the cid tables privately and publish them with RCU](https://agentprime.io/advisories/CVE-2026-98942.md)
  `CVE-2026-98942` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ext4: don't enable large folios on encrypted inodes](https://agentprime.io/advisories/CVE-2026-98941.md)
  `CVE-2026-98941` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 23 Oct 2026
- [ASoC: qcom: lpass-cpu: use DAI table index for playback constraints](https://agentprime.io/advisories/CVE-2026-98940.md)
  `CVE-2026-98940` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [x86/mm: Drop unnecessary PMD page copy when freeing](https://agentprime.io/advisories/CVE-2026-98939.md)
  `CVE-2026-98939` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [rust: irq: pass RegistrationInner as cookie to request_irq](https://agentprime.io/advisories/CVE-2026-98938.md)
  `CVE-2026-98938` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [perf/core: Check kernel access when kernel callchains are requested](https://agentprime.io/advisories/CVE-2026-98937.md)
  `CVE-2026-98937` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [wifi: ath11k: reset ar->num_stations on hardware start](https://agentprime.io/advisories/CVE-2026-98936.md)
  `CVE-2026-98936` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak](https://agentprime.io/advisories/CVE-2026-98935.md)
  `CVE-2026-98935` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()](https://agentprime.io/advisories/CVE-2026-98934.md)
  `CVE-2026-98934` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [usb: hub: use shorter 120ms post resume hold for SS root hubs](https://agentprime.io/advisories/CVE-2026-98933.md)
  `CVE-2026-98933` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [EDAC/altera: Fix use-after-free in error paths](https://agentprime.io/advisories/CVE-2026-98932.md)
  `CVE-2026-98932` · CVE record: Linux Linux · CVSS 7.4 High · Not analysed yet · Published 23 Oct 2026
- [mtd: spinand: fix NULL pointer dereference with no ECC engine](https://agentprime.io/advisories/CVE-2026-98931.md)
  `CVE-2026-98931` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [KVM: s390: Fix IRQ injection with SIGP Stop and Store Status](https://agentprime.io/advisories/CVE-2026-98930.md)
  `CVE-2026-98930` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [macsec: initialize SecY before registering the netdevice](https://agentprime.io/advisories/CVE-2026-98929.md)
  `CVE-2026-98929` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2](https://agentprime.io/advisories/CVE-2026-98928.md)
  `CVE-2026-98928` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [KVM: arm64: nv: Fix life cycle of the nested_mmus array](https://agentprime.io/advisories/CVE-2026-98927.md)
  `CVE-2026-98927` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 23 Oct 2026
- [drm/amd/display: Remove sink usage from DPMS](https://agentprime.io/advisories/CVE-2026-98926.md)
  `CVE-2026-98926` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [bpf, sockmap: Fix self-redirect copied_seq double-counting](https://agentprime.io/advisories/CVE-2026-98925.md)
  `CVE-2026-98925` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [fs: avoid repeated scans in evict_inodes()](https://agentprime.io/advisories/CVE-2026-98924.md)
  `CVE-2026-98924` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [arm64: io: Reject non-user protection in ioremap_prot()](https://agentprime.io/advisories/CVE-2026-98923.md)
  `CVE-2026-98923` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [net: emac: move setting of netops to fix crash](https://agentprime.io/advisories/CVE-2026-98922.md)
  `CVE-2026-98922` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ovl: fix UAF in ovl_do_mkdir() debug print](https://agentprime.io/advisories/CVE-2026-98921.md)
  `CVE-2026-98921` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [netfs: Fix missing alloc tagging of direct mempool allocations](https://agentprime.io/advisories/CVE-2026-98920.md)
  `CVE-2026-98920` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [drm/xe: harden adjust_idledly() against divide-by-zero and overflow](https://agentprime.io/advisories/CVE-2026-98919.md)
  `CVE-2026-98919` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()](https://agentprime.io/advisories/CVE-2026-98918.md)
  `CVE-2026-98918` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [parisc: Increase kernel stack size to 32kb](https://agentprime.io/advisories/CVE-2026-98917.md)
  `CVE-2026-98917` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [wifi: nl80211: check link is beaconing for color change](https://agentprime.io/advisories/CVE-2026-98916.md)
  `CVE-2026-98916` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [media: video-i2c: use vb2_video_unregister_device on driver removal](https://agentprime.io/advisories/CVE-2026-98915.md)
  `CVE-2026-98915` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [drm/amdgpu: cap ATOM command table nesting depth](https://agentprime.io/advisories/CVE-2026-98914.md)
  `CVE-2026-98914` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [net: thunderx: fix PTP device ref leak in nicvf_probe()](https://agentprime.io/advisories/CVE-2026-98913.md)
  `CVE-2026-98913` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ALSA: seq: oss: Reject reads that cannot fit the next event](https://agentprime.io/advisories/CVE-2026-98912.md)
  `CVE-2026-98912` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [dpaa2-switch: fix the error path in dpaa2_switch_rx()](https://agentprime.io/advisories/CVE-2026-98911.md)
  `CVE-2026-98911` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 23 Oct 2026
- [drm/amdkfd: Unwind debug trap enable on copy_to_user failure](https://agentprime.io/advisories/CVE-2026-98910.md)
  `CVE-2026-98910` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [net: cpsw_new: unregister devlink on port registration failure](https://agentprime.io/advisories/CVE-2026-98909.md)
  `CVE-2026-98909` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [net: microchip: sparx5: clean up PSFP resources on flower setup failure](https://agentprime.io/advisories/CVE-2026-98908.md)
  `CVE-2026-98908` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [btrfs: protect sb_write_pointer() with invalidate lock](https://agentprime.io/advisories/CVE-2026-98907.md)
  `CVE-2026-98907` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [net: lan966x: restore RX state on reload failure](https://agentprime.io/advisories/CVE-2026-98906.md)
  `CVE-2026-98906` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [drm/amdkfd: Properly acquire queue buffers in CRIU restore](https://agentprime.io/advisories/CVE-2026-98905.md)
  `CVE-2026-98905` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [mailbox: imx: Use devm_pm_runtime_enable()](https://agentprime.io/advisories/CVE-2026-98904.md)
  `CVE-2026-98904` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [mailbox: imx: Add a channel shutdown field](https://agentprime.io/advisories/CVE-2026-98903.md)
  `CVE-2026-98903` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [md/raid5: let stripe batch bm_seq comparison wrap-safe](https://agentprime.io/advisories/CVE-2026-98902.md)
  `CVE-2026-98902` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ksmbd: fix lease break and ack state handling](https://agentprime.io/advisories/CVE-2026-98901.md)
  `CVE-2026-98901` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [xen/gntalloc: validate grant count before allocation](https://agentprime.io/advisories/CVE-2026-98900.md)
  `CVE-2026-98900` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTIzVDExOjU0OjEwLjU2NjAwMFoiLCJDVkUtMjAyNi05ODkwMCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTIzVDEyOjE5OjI5LjYxNjAwMFoiLCJDVkUtMjAyNi05ODk2MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTIzVDEyOjE5OjI5LjYxNjAwMFoiLCJDVkUtMjAyNi05ODk2MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.