# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [ntfs: bound the attribute-list entry in ntfs_read_inode_mount()](https://agentprime.io/advisories/CVE-2026-80869.md)
  `CVE-2026-80869` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [ntfs3: Allocate iomap inline_data using alloc_page](https://agentprime.io/advisories/CVE-2026-80868.md)
  `CVE-2026-80868` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [alpha/PCI: Add security_locked_down() check to pci_mmap_resource()](https://agentprime.io/advisories/CVE-2026-80867.md)
  `CVE-2026-80867` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [tipc: avoid busy looping in tipc_exit_net()](https://agentprime.io/advisories/CVE-2026-80866.md)
  `CVE-2026-80866` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [bpf: Add missing access_ok call to copy_user_syms](https://agentprime.io/advisories/CVE-2026-80865.md)
  `CVE-2026-80865` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp](https://agentprime.io/advisories/CVE-2026-80864.md)
  `CVE-2026-80864` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [RDMA/rxe: Fix OOB in free_rd_atomic_resources()](https://agentprime.io/advisories/CVE-2026-80863.md)
  `CVE-2026-80863` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [nvme-tcp: fix usage of page_frag_cache](https://agentprime.io/advisories/CVE-2026-80862.md)
  `CVE-2026-80862` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [usb: xhci: bail out of setup if the controller is inaccessible](https://agentprime.io/advisories/CVE-2026-80861.md)
  `CVE-2026-80861` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [fuse: fix race between interrupt and resend](https://agentprime.io/advisories/CVE-2026-80860.md)
  `CVE-2026-80860` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [fuse: fix missing barrier when checking io-uring readiness](https://agentprime.io/advisories/CVE-2026-80859.md)
  `CVE-2026-80859` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [fuse: publish io-uring queues with release semantics](https://agentprime.io/advisories/CVE-2026-80858.md)
  `CVE-2026-80858` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [fuse: wait for FR_FINISHED on abort_on_kill to prevent use-after-free](https://agentprime.io/advisories/CVE-2026-80857.md)
  `CVE-2026-80857` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [fuse: fix invalidate lock leak on setattr writeback failure](https://agentprime.io/advisories/CVE-2026-80856.md)
  `CVE-2026-80856` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [fuse: fix invalidate lock leak on open O_TRUNC DAX failure](https://agentprime.io/advisories/CVE-2026-80855.md)
  `CVE-2026-80855` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [usb: gadget: f_tcm: keep port count until LUN teardown completes](https://agentprime.io/advisories/CVE-2026-80854.md)
  `CVE-2026-80854` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [KVM: SEV: Allocate full pages for {DE,EN}CRYPT ops on SNP-enabled hosts](https://agentprime.io/advisories/CVE-2026-80853.md)
  `CVE-2026-80853` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [tls: device: fix out-of-bounds write in tls_append_frag()](https://agentprime.io/advisories/CVE-2026-80852.md)
  `CVE-2026-80852` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [gtp: serialize PDP context updates](https://agentprime.io/advisories/CVE-2026-80851.md)
  `CVE-2026-80851` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [tcp: fix AO info use-after-free in tcp_ao_connect_init()](https://agentprime.io/advisories/CVE-2026-80850.md)
  `CVE-2026-80850` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [net/tcp-ao: fix use-after-free of current_key on reconnect to another peer](https://agentprime.io/advisories/CVE-2026-80849.md)
  `CVE-2026-80849` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [xfrm: espintcp: fix UAF during close](https://agentprime.io/advisories/CVE-2026-80848.md)
  `CVE-2026-80848` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [tcp: clamp route advmss to TCP_MIN_MSS](https://agentprime.io/advisories/CVE-2026-80847.md)
  `CVE-2026-80847` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [xfrm: drop ESP-in-TCP packets with no ingress device](https://agentprime.io/advisories/CVE-2026-80846.md)
  `CVE-2026-80846` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [xfrm: avoid lock inversion in nat keepalive work](https://agentprime.io/advisories/CVE-2026-80845.md)
  `CVE-2026-80845` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [xfrm: ah6: validate routing header segments_left](https://agentprime.io/advisories/CVE-2026-80844.md)
  `CVE-2026-80844` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [xfrm: fix xfrm_state_construct() auth-trunc leak](https://agentprime.io/advisories/CVE-2026-80843.md)
  `CVE-2026-80843` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [net: bridge: mcast: fix use-after-free of a master VLAN's multicast context](https://agentprime.io/advisories/CVE-2026-80842.md)
  `CVE-2026-80842` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [net/packet: defer vmalloc TX_RING free until skbs finish](https://agentprime.io/advisories/CVE-2026-80841.md)
  `CVE-2026-80841` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [ipv6: seg6: clear IPv4 control block on IPIP decapsulation](https://agentprime.io/advisories/CVE-2026-80840.md)
  `CVE-2026-80840` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [batman-adv: reject unrepresentable multicast TVLV offsets](https://agentprime.io/advisories/CVE-2026-80839.md)
  `CVE-2026-80839` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [vxlan: keep the last remote linked during FDB flush](https://agentprime.io/advisories/CVE-2026-80838.md)
  `CVE-2026-80838` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [netfilter: nf_tables: don't queue packet path object notifications](https://agentprime.io/advisories/CVE-2026-80837.md)
  `CVE-2026-80837` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [crypto: virtio - bound the akcipher result length](https://agentprime.io/advisories/CVE-2026-80836.md)
  `CVE-2026-80836` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [crypto: qcom-rng - Remove crypto_rng interface](https://agentprime.io/advisories/CVE-2026-80835.md)
  `CVE-2026-80835` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [crypto: sun8i-ce - Remove crypto_rng interface](https://agentprime.io/advisories/CVE-2026-80834.md)
  `CVE-2026-80834` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [crypto: sun8i-ss - Remove crypto_rng interface](https://agentprime.io/advisories/CVE-2026-80833.md)
  `CVE-2026-80833` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [crypto: qce - fix CCM AAD buffer underallocation](https://agentprime.io/advisories/CVE-2026-80832.md)
  `CVE-2026-80832` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [crypto: mxs-dcp - fix source scatterlist length access](https://agentprime.io/advisories/CVE-2026-80831.md)
  `CVE-2026-80831` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [usb: core: Add lock to usb_wakeup_notification()](https://agentprime.io/advisories/CVE-2026-80830.md)
  `CVE-2026-80830` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()](https://agentprime.io/advisories/CVE-2026-80829.md)
  `CVE-2026-80829` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [ALSA: usb-audio: Complete cleanup after system-resume errors](https://agentprime.io/advisories/CVE-2026-80828.md)
  `CVE-2026-80828` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [USB: serial: option: fix slab OOB read in interrupt URB callback](https://agentprime.io/advisories/CVE-2026-80827.md)
  `CVE-2026-80827` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [USB: c67x00: fix use-after-free in c67x00_add_iso_urb()](https://agentprime.io/advisories/CVE-2026-80826.md)
  `CVE-2026-80826` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb](https://agentprime.io/advisories/CVE-2026-80825.md)
  `CVE-2026-80825` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [usb: usbfs: fix use-after-free of usb_device in usbdev_release()](https://agentprime.io/advisories/CVE-2026-80824.md)
  `CVE-2026-80824` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [nfc: st21nfca: validate ATR_REQ length against the received frame](https://agentprime.io/advisories/CVE-2026-80823.md)
  `CVE-2026-80823` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()](https://agentprime.io/advisories/CVE-2026-80822.md)
  `CVE-2026-80822` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [nvmet: pci-epf: put CQ ref on create_cq mapping failure](https://agentprime.io/advisories/CVE-2026-80821.md)
  `CVE-2026-80821` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [xfs: don't livelock in scrub on a circular unlinked list](https://agentprime.io/advisories/CVE-2026-80820.md)
  `CVE-2026-80820` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept](https://agentprime.io/advisories/CVE-2026-80819.md)
  `CVE-2026-80819` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [iommu/tegra241-cmdqv: Fix CMD_SYNC use-after-free on teardown](https://agentprime.io/advisories/CVE-2026-80818.md)
  `CVE-2026-80818` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [iommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt_map_file_pages](https://agentprime.io/advisories/CVE-2026-80817.md)
  `CVE-2026-80817` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [ALSA: FCP: Use a private URB for the notification endpoint](https://agentprime.io/advisories/CVE-2026-80816.md)
  `CVE-2026-80816` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [ALSA: scarlett2: Use a private URB for the notification endpoint](https://agentprime.io/advisories/CVE-2026-80815.md)
  `CVE-2026-80815` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [rndis_host: add overflow check in rndis_rx_fixup()](https://agentprime.io/advisories/CVE-2026-80814.md)
  `CVE-2026-80814` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [nvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist()](https://agentprime.io/advisories/CVE-2026-80813.md)
  `CVE-2026-80813` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [ALSA: dummy: Check card index validity at probe](https://agentprime.io/advisories/CVE-2026-80812.md)
  `CVE-2026-80812` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [io_uring/rsrc: fix folio size overflow in io_vec_fill_bvec()](https://agentprime.io/advisories/CVE-2026-80810.md)
  `CVE-2026-80810` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026
- [ocfs2: fix missing metadata reservation for large xattrs](https://agentprime.io/advisories/CVE-2026-80809.md)
  `CVE-2026-80809` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 4 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTA0VDE1OjEzOjI5Ljc2OTAwMFoiLCJDVkUtMjAyNi04MDgwOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTA0VDE2OjQ4OjMxLjkwMjAwMFoiLCJDVkUtMjAyNi04MDg3MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTA0VDE2OjQ4OjMxLjkwMjAwMFoiLCJDVkUtMjAyNi04MDg3MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.