# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [fs: Free any excess xarray nodes in clear_inode()](https://agentprime.io/advisories/CVE-2026-99080.md)
  `CVE-2026-99080` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [net/mlx5e: Prevent stale XSK buffer release on refill retry](https://agentprime.io/advisories/CVE-2026-99079.md)
  `CVE-2026-99079` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Oct 2026
- [net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry](https://agentprime.io/advisories/CVE-2026-99078.md)
  `CVE-2026-99078` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Oct 2026
- [ipv4: udp: Create exceptions before socket matching](https://agentprime.io/advisories/CVE-2026-99077.md)
  `CVE-2026-99077` · CVE record: Linux Linux · CVSS 7.4 High · Not analysed yet · Published 23 Oct 2026
- [ipv6: udp: Create exceptions before socket matching](https://agentprime.io/advisories/CVE-2026-99076.md)
  `CVE-2026-99076` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [rust_binder: reschedule node refcount update on thread exit](https://agentprime.io/advisories/CVE-2026-99075.md)
  `CVE-2026-99075` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ipv4: stop PMTU walk when nexthop group shrinks](https://agentprime.io/advisories/CVE-2026-99074.md)
  `CVE-2026-99074` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ipv4: stop exception dump when nexthop group shrinks](https://agentprime.io/advisories/CVE-2026-99073.md)
  `CVE-2026-99073` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ipv4: stop route notification sizing when nexthop group shrinks](https://agentprime.io/advisories/CVE-2026-99072.md)
  `CVE-2026-99072` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ipv4: do not warn on route notification size race](https://agentprime.io/advisories/CVE-2026-99071.md)
  `CVE-2026-99071` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ipv6: do not warn on route notification size race](https://agentprime.io/advisories/CVE-2026-99070.md)
  `CVE-2026-99070` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [Input: ati_remote2 - fix type confusion in device attribute handlers](https://agentprime.io/advisories/CVE-2026-99069.md)
  `CVE-2026-99069` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers](https://agentprime.io/advisories/CVE-2026-99068.md)
  `CVE-2026-99068` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()](https://agentprime.io/advisories/CVE-2026-99067.md)
  `CVE-2026-99067` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [can: dev: init_can_skb(): restore skb header initialization](https://agentprime.io/advisories/CVE-2026-99066.md)
  `CVE-2026-99066` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus()](https://agentprime.io/advisories/CVE-2026-99065.md)
  `CVE-2026-99065` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [cipso: adjust cached option offsets when removing CIPSO](https://agentprime.io/advisories/CVE-2026-99064.md)
  `CVE-2026-99064` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 23 Oct 2026
- [dm ioctl: don't let data_start run past the buffer](https://agentprime.io/advisories/CVE-2026-99063.md)
  `CVE-2026-99063` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [vsock/virtio: account only unread bytes in read_skb()](https://agentprime.io/advisories/CVE-2026-99062.md)
  `CVE-2026-99062` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [wifi: brcmfmac: fix P2P device removal race in brcmf_detach()](https://agentprime.io/advisories/CVE-2026-99061.md)
  `CVE-2026-99061` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [wifi: mt76: mt7603: initialize global station WCID](https://agentprime.io/advisories/CVE-2026-99060.md)
  `CVE-2026-99060` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [wireguard: noise: reject response consumption after intermediate initiation](https://agentprime.io/advisories/CVE-2026-99059.md)
  `CVE-2026-99059` · CVE record: Linux Linux · CVSS 7.7 High · Not analysed yet · Published 23 Oct 2026
- [workqueue: Fix NULL current_pwq deref in chained work check](https://agentprime.io/advisories/CVE-2026-99058.md)
  `CVE-2026-99058` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [xen/netfront: don't leak the skb when xennet_fill_frags() fails](https://agentprime.io/advisories/CVE-2026-99057.md)
  `CVE-2026-99057` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [strparser: make sure \_\_strp_recv isn't running before tearing down the parser](https://agentprime.io/advisories/CVE-2026-99056.md)
  `CVE-2026-99056` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [tcp: reject net_iov in zerocopy receive mapping hints](https://agentprime.io/advisories/CVE-2026-99055.md)
  `CVE-2026-99055` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [tipc: destroy topsrv workqueues before closing connections](https://agentprime.io/advisories/CVE-2026-99054.md)
  `CVE-2026-99054` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [tipc: hold a reference to nodes found by link name](https://agentprime.io/advisories/CVE-2026-99053.md)
  `CVE-2026-99053` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts](https://agentprime.io/advisories/CVE-2026-99052.md)
  `CVE-2026-99052` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [fsverity: RCU-delay the freeing of struct fsverity_info](https://agentprime.io/advisories/CVE-2026-99051.md)
  `CVE-2026-99051` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [gpio: mpsse: fix race when arming the IRQ poll worker](https://agentprime.io/advisories/CVE-2026-99050.md)
  `CVE-2026-99050` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [gpio: xilinx: fix runtime PM leak on request error path](https://agentprime.io/advisories/CVE-2026-99049.md)
  `CVE-2026-99049` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [gve: fix napi_disable deadlock when attempting to disable XSK pools](https://agentprime.io/advisories/CVE-2026-99048.md)
  `CVE-2026-99048` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [gve: fix XSK buffer leak when rings are stopped](https://agentprime.io/advisories/CVE-2026-99047.md)
  `CVE-2026-99047` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [gve: fix XSK buffer leak on error descriptor](https://agentprime.io/advisories/CVE-2026-99046.md)
  `CVE-2026-99046` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 23 Oct 2026
- [ibmveth: h_free logical LAN on open-fail after register](https://agentprime.io/advisories/CVE-2026-99045.md)
  `CVE-2026-99045` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ice: fix use-after-free in dynamic port cleanup](https://agentprime.io/advisories/CVE-2026-99044.md)
  `CVE-2026-99044` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ice: fix metadata_dst refcount handling on representor teardown](https://agentprime.io/advisories/CVE-2026-99043.md)
  `CVE-2026-99043` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [io_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6](https://agentprime.io/advisories/CVE-2026-99042.md)
  `CVE-2026-99042` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 23 Oct 2026
- [ip6_gre: remove obsolete ERSPAN PMTU update](https://agentprime.io/advisories/CVE-2026-99041.md)
  `CVE-2026-99041` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [KEYS: Fix add_key() race with keyring restriction](https://agentprime.io/advisories/CVE-2026-99040.md)
  `CVE-2026-99040` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [memstick: core: wait for request completion before freeing card](https://agentprime.io/advisories/CVE-2026-99039.md)
  `CVE-2026-99039` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [memstick: rtsx_usb_ms: complete requests after eject instead of dropping them](https://agentprime.io/advisories/CVE-2026-99038.md)
  `CVE-2026-99038` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [dm-crypt: reject the lmk IV mode with AEAD ciphers](https://agentprime.io/advisories/CVE-2026-99037.md)
  `CVE-2026-99037` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [dm: fix reading free memory in do_resume](https://agentprime.io/advisories/CVE-2026-99036.md)
  `CVE-2026-99036` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [mmc: mtk-sd: Cancel request timeout work on remove](https://agentprime.io/advisories/CVE-2026-99035.md)
  `CVE-2026-99035` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [mmc: sdhci-sprd: disable runtime PM on remove](https://agentprime.io/advisories/CVE-2026-99034.md)
  `CVE-2026-99034` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [net/packet: guard the ll header push in packet_rcv_spkt()](https://agentprime.io/advisories/CVE-2026-99033.md)
  `CVE-2026-99033` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [net/smc: protect clcsock lifetime in smc_getname](https://agentprime.io/advisories/CVE-2026-99032.md)
  `CVE-2026-99032` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026
- [net: bridge: avoid recursive multicast port cleanup](https://agentprime.io/advisories/CVE-2026-99031.md)
  `CVE-2026-99031` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits()](https://agentprime.io/advisories/CVE-2026-99030.md)
  `CVE-2026-99030` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 23 Oct 2026
- [net: sparx5: free the matchall entry on destroy](https://agentprime.io/advisories/CVE-2026-99029.md)
  `CVE-2026-99029` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop](https://agentprime.io/advisories/CVE-2026-99028.md)
  `CVE-2026-99028` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [net: team: stop reusing skb after queue override](https://agentprime.io/advisories/CVE-2026-99027.md)
  `CVE-2026-99027` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [net: team: free skb when broadcast has no txable port](https://agentprime.io/advisories/CVE-2026-99026.md)
  `CVE-2026-99026` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [openvswitch: fix soft lockup in the netlink flow dump](https://agentprime.io/advisories/CVE-2026-99025.md)
  `CVE-2026-99025` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [optee: register TEE devices only once fully initialized](https://agentprime.io/advisories/CVE-2026-99024.md)
  `CVE-2026-99024` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()](https://agentprime.io/advisories/CVE-2026-99023.md)
  `CVE-2026-99023` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [regulator: ltc3676: don't read the write-only HRST and CLIRQ registers](https://agentprime.io/advisories/CVE-2026-99022.md)
  `CVE-2026-99022` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [regulator: of: fill in supply names in of_regulator_bulk_get_all()](https://agentprime.io/advisories/CVE-2026-99021.md)
  `CVE-2026-99021` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 23 Oct 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTEwLTIzVDEyOjIxOjAwLjk1MTAwMFoiLCJDVkUtMjAyNi05OTAyMSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTEwLTIzVDEyOjIzOjI4LjM0NzAwMFoiLCJDVkUtMjAyNi05OTA4MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTEwLTIzVDEyOjIzOjI4LjM0NzAwMFoiLCJDVkUtMjAyNi05OTA4MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.