# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4](https://agentprime.io/advisories/CVE-2026-99020.md)
  `CVE-2026-99020` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [scsi: ch: Do not keep references to data transfer element devices](https://agentprime.io/advisories/CVE-2026-99019.md)
  `CVE-2026-99019` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp](https://agentprime.io/advisories/CVE-2026-99018.md)
  `CVE-2026-99018` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE](https://agentprime.io/advisories/CVE-2026-99017.md)
  `CVE-2026-99017` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 23 Oct 2026
- [riscv: futex: untag the user pointer before the atomic access](https://agentprime.io/advisories/CVE-2026-99016.md)
  `CVE-2026-99016` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [Bluetooth: hci_sock: Serialize dead-device detachment](https://agentprime.io/advisories/CVE-2026-99015.md)
  `CVE-2026-99015` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [Bluetooth: hci_sync: Fix command skb lifetime during scan setup](https://agentprime.io/advisories/CVE-2026-99014.md)
  `CVE-2026-99014` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [Bluetooth: ISO: Reject concurrent BIS listener setup](https://agentprime.io/advisories/CVE-2026-99013.md)
  `CVE-2026-99013` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [Bluetooth: ISO: Serialize concurrent connect calls](https://agentprime.io/advisories/CVE-2026-99012.md)
  `CVE-2026-99012` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata()](https://agentprime.io/advisories/CVE-2026-99011.md)
  `CVE-2026-99011` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 23 Oct 2026
- [Bluetooth: RFCOMM: free the skb when the DLC has no owner](https://agentprime.io/advisories/CVE-2026-99010.md)
  `CVE-2026-99010` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex](https://agentprime.io/advisories/CVE-2026-99009.md)
  `CVE-2026-99009` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown](https://agentprime.io/advisories/CVE-2026-99008.md)
  `CVE-2026-99008` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN](https://agentprime.io/advisories/CVE-2026-99007.md)
  `CVE-2026-99007` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [drm/i915/gem: Prevent overstepping exec array boundary](https://agentprime.io/advisories/CVE-2026-99006.md)
  `CVE-2026-99006` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [drm/i915/gt: Unmask interrupts only when ACTIVE is true](https://agentprime.io/advisories/CVE-2026-99005.md)
  `CVE-2026-99005` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [drm/imagination: Size page table preallocation by device address](https://agentprime.io/advisories/CVE-2026-99004.md)
  `CVE-2026-99004` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [drm/panthor: validate userspace queue count against initialized firmware slot count](https://agentprime.io/advisories/CVE-2026-99003.md)
  `CVE-2026-99003` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [drm/vmwgfx: validate pitch coming from userspace](https://agentprime.io/advisories/CVE-2026-99002.md)
  `CVE-2026-99002` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [drm/xe/i2c: cancel the client work on remove](https://agentprime.io/advisories/CVE-2026-99001.md)
  `CVE-2026-99001` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [drm/xe: Fix shrinker accounting double-subtraction on nested external pins](https://agentprime.io/advisories/CVE-2026-99000.md)
  `CVE-2026-99000` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin](https://agentprime.io/advisories/CVE-2026-98999.md)
  `CVE-2026-98999` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [drm/bridge: th1520-dw-hdmi: Fix remove() callback](https://agentprime.io/advisories/CVE-2026-98998.md)
  `CVE-2026-98998` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [drm/amdgpu/userq: only accept doorbell BOs as queue doorbell](https://agentprime.io/advisories/CVE-2026-98997.md)
  `CVE-2026-98997` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [fs: don't silently unmount busy mounts](https://agentprime.io/advisories/CVE-2026-98996.md)
  `CVE-2026-98996` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [namespace: reset the old parent's ->overmount in mnt_change_mountpoint()](https://agentprime.io/advisories/CVE-2026-98995.md)
  `CVE-2026-98995` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [statmount: read the parent of an unmounted mount under mount_lock](https://agentprime.io/advisories/CVE-2026-98994.md)
  `CVE-2026-98994` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [namespace: don't inherit MNT_UMOUNT in clone_mnt()](https://agentprime.io/advisories/CVE-2026-98993.md)
  `CVE-2026-98993` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [namespace: don't copy an unmounted mount tree](https://agentprime.io/advisories/CVE-2026-98992.md)
  `CVE-2026-98992` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [namespace: queue a mount only once for mount notifications](https://agentprime.io/advisories/CVE-2026-98991.md)
  `CVE-2026-98991` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [namespace: check a submount for references right before unmounting it](https://agentprime.io/advisories/CVE-2026-98990.md)
  `CVE-2026-98990` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [namespace: check a recursive bind mount for mount namespace loops](https://agentprime.io/advisories/CVE-2026-98989.md)
  `CVE-2026-98989` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE](https://agentprime.io/advisories/CVE-2026-98988.md)
  `CVE-2026-98988` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 23 Oct 2026
- [namespace: look at the topmost mount for a mount namespace file](https://agentprime.io/advisories/CVE-2026-98987.md)
  `CVE-2026-98987` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [namespace: remove the fsnotify marks of a mount namespace in process context](https://agentprime.io/advisories/CVE-2026-98986.md)
  `CVE-2026-98986` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [namespace: check the mounts before reading their parents in pivot_root()](https://agentprime.io/advisories/CVE-2026-98985.md)
  `CVE-2026-98985` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [dcache: don't put a mountpoint on a dentry that's being removed](https://agentprime.io/advisories/CVE-2026-98984.md)
  `CVE-2026-98984` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [unshare: don't drop active namespace references that were never taken](https://agentprime.io/advisories/CVE-2026-98983.md)
  `CVE-2026-98983` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [namespace: don't let a pseudo dentry become the root of a mount](https://agentprime.io/advisories/CVE-2026-98982.md)
  `CVE-2026-98982` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [namespace: unhash a dentry before detaching the mounts on it](https://agentprime.io/advisories/CVE-2026-98981.md)
  `CVE-2026-98981` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 23 Oct 2026
- [namei: don't reveal overmounted entries in refwalk](https://agentprime.io/advisories/CVE-2026-98980.md)
  `CVE-2026-98980` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 23 Oct 2026
- [namespace: refuse an automount below a mount that is in no namespace](https://agentprime.io/advisories/CVE-2026-98979.md)
  `CVE-2026-98979` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [namespace: never expire a locked mount](https://agentprime.io/advisories/CVE-2026-98978.md)
  `CVE-2026-98978` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 23 Oct 2026
- [namespace: handle mount locking for automounts correctly](https://agentprime.io/advisories/CVE-2026-98977.md)
  `CVE-2026-98977` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [namespace: keep the lock on a mount that a propagated copy is moved beneath](https://agentprime.io/advisories/CVE-2026-98976.md)
  `CVE-2026-98976` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [xfs: stop exchanging reflink flags when exchanging mappings](https://agentprime.io/advisories/CVE-2026-98975.md)
  `CVE-2026-98975` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [xfs: fix exchange-range-to-eof file size exchange](https://agentprime.io/advisories/CVE-2026-98974.md)
  `CVE-2026-98974` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [drm/bridge: Fix unlocked list_del in drm_bridge_add()](https://agentprime.io/advisories/CVE-2026-98973.md)
  `CVE-2026-98973` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode()](https://agentprime.io/advisories/CVE-2026-98972.md)
  `CVE-2026-98972` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [gpio: exar: initialize the ID before registering its cleanup](https://agentprime.io/advisories/CVE-2026-98971.md)
  `CVE-2026-98971` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [drm/vc4: Free the BO cache size list on teardown](https://agentprime.io/advisories/CVE-2026-98970.md)
  `CVE-2026-98970` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [net/sched: em_text: reject unterminated algo before autoload](https://agentprime.io/advisories/CVE-2026-98969.md)
  `CVE-2026-98969` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [amt: send the relay's General Query directly from the receive path](https://agentprime.io/advisories/CVE-2026-98968.md)
  `CVE-2026-98968` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 23 Oct 2026
- [cxgb4/ch_ktls: disable softirqs around tid_list erases](https://agentprime.io/advisories/CVE-2026-98967.md)
  `CVE-2026-98967` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [bonding: fix the program leak when XDP is replaced](https://agentprime.io/advisories/CVE-2026-98966.md)
  `CVE-2026-98966` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ice: Restore Ordered MMIO Writes for Tx Doorbells](https://agentprime.io/advisories/CVE-2026-98965.md)
  `CVE-2026-98965` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 23 Oct 2026
- [nvmet: use the local P2P device on metadata allocation failure](https://agentprime.io/advisories/CVE-2026-98964.md)
  `CVE-2026-98964` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 23 Oct 2026
- [btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio](https://agentprime.io/advisories/CVE-2026-98963.md)
  `CVE-2026-98963` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [btrfs: free iov when btrfs_uring_read_extent() fails](https://agentprime.io/advisories/CVE-2026-98962.md)
  `CVE-2026-98962` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [btrfs: unlock inode and extent in caller when io_uring read extent fails](https://agentprime.io/advisories/CVE-2026-98961.md)
  `CVE-2026-98961` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTIzVDEyOjE5OjI5LjYxNjAwMFoiLCJDVkUtMjAyNi05ODk2MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTIzVDEyOjIxOjAwLjk1MTAwMFoiLCJDVkUtMjAyNi05OTAyMSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTIzVDEyOjIxOjAwLjk1MTAwMFoiLCJDVkUtMjAyNi05OTAyMSJd>. Everything for agents: <https://agentprime.io/llms.txt>.