# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer()](https://agentprime.io/advisories/CVE-2026-89829.md)
  `CVE-2026-89829` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init()](https://agentprime.io/advisories/CVE-2026-89828.md)
  `CVE-2026-89828` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [drm/amdgpu: avoid force-completing uninitialized UVD rings](https://agentprime.io/advisories/CVE-2026-89827.md)
  `CVE-2026-89827` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [drm/panthor: harden firmware build-info bounds checks](https://agentprime.io/advisories/CVE-2026-89826.md)
  `CVE-2026-89826` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026
- [drm/panthor: fix firmware control interface bounds checks](https://agentprime.io/advisories/CVE-2026-89825.md)
  `CVE-2026-89825` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [drm/panel-edp: fix i2c adapter leak on probe failure](https://agentprime.io/advisories/CVE-2026-89824.md)
  `CVE-2026-89824` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [drm: fix race between partial drm_dev_register() failure and ioctl](https://agentprime.io/advisories/CVE-2026-89823.md)
  `CVE-2026-89823` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [drm/i915: Guard against NULL driver_data in i915_pci_probe()](https://agentprime.io/advisories/CVE-2026-89822.md)
  `CVE-2026-89822` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [drm/amd/display: avoid divide-by-zero in \_\_is_lut_linear()](https://agentprime.io/advisories/CVE-2026-89821.md)
  `CVE-2026-89821` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [drm/amd/display: fix dc_lock leak on GPU reset error paths](https://agentprime.io/advisories/CVE-2026-89820.md)
  `CVE-2026-89820` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [drm/amd/display: validate plane degamma LUT size for private color prop](https://agentprime.io/advisories/CVE-2026-89819.md)
  `CVE-2026-89819` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check](https://agentprime.io/advisories/CVE-2026-89818.md)
  `CVE-2026-89818` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026
- [drm/gud: NUL-terminate TV mode names read from the device](https://agentprime.io/advisories/CVE-2026-89817.md)
  `CVE-2026-89817` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used](https://agentprime.io/advisories/CVE-2026-89816.md)
  `CVE-2026-89816` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [drm/ttm: Drop tt->restore after successful restore](https://agentprime.io/advisories/CVE-2026-89815.md)
  `CVE-2026-89815` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [drm/amdgpu: clamp the isolation index for rings outside a partition](https://agentprime.io/advisories/CVE-2026-89814.md)
  `CVE-2026-89814` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [drm/amdgpu: force complete the KIQ ring fences on reset](https://agentprime.io/advisories/CVE-2026-89813.md)
  `CVE-2026-89813` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [drm/amdgpu: force complete the MES ring fences on reset](https://agentprime.io/advisories/CVE-2026-89812.md)
  `CVE-2026-89812` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [drm/amdkfd: Add TLB flush after MES queue eviction/suspension](https://agentprime.io/advisories/CVE-2026-89811.md)
  `CVE-2026-89811` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026
- [drm/amdkfd: Fix error path at svm_migrate_copy_to_ram](https://agentprime.io/advisories/CVE-2026-89810.md)
  `CVE-2026-89810` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqds](https://agentprime.io/advisories/CVE-2026-89809.md)
  `CVE-2026-89809` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram](https://agentprime.io/advisories/CVE-2026-89808.md)
  `CVE-2026-89808` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [drm/amdkfd: guard against NULL restore_mqd in CRIU queue restore](https://agentprime.io/advisories/CVE-2026-89807.md)
  `CVE-2026-89807` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation](https://agentprime.io/advisories/CVE-2026-89806.md)
  `CVE-2026-89806` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 16 Sept 2026
- [drm/pagemap: Fix folio allocation fallback and use-after-put](https://agentprime.io/advisories/CVE-2026-89805.md)
  `CVE-2026-89805` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [drm/nouveau/dmem: fix mismatched DMA unmap size for large folios](https://agentprime.io/advisories/CVE-2026-89804.md)
  `CVE-2026-89804` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026
- [drm/nouveau: unsubscribe the channel-kill event before the fence context](https://agentprime.io/advisories/CVE-2026-89803.md)
  `CVE-2026-89803` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op](https://agentprime.io/advisories/CVE-2026-89802.md)
  `CVE-2026-89802` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE](https://agentprime.io/advisories/CVE-2026-89801.md)
  `CVE-2026-89801` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE](https://agentprime.io/advisories/CVE-2026-89800.md)
  `CVE-2026-89800` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [bpf: Disable preemption in bpf_get_stackid](https://agentprime.io/advisories/CVE-2026-89799.md)
  `CVE-2026-89799` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [rpcrdma: arm rn_done before publishing the notification](https://agentprime.io/advisories/CVE-2026-89798.md)
  `CVE-2026-89798` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [power: supply: ab8500_fg: fix use-after-free on remove](https://agentprime.io/advisories/CVE-2026-89797.md)
  `CVE-2026-89797` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [mm/damon/core: avoid infinite kdamond_merge_regions() internal loop](https://agentprime.io/advisories/CVE-2026-89796.md)
  `CVE-2026-89796` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [PCI: Allow per function PCI slots to fix slot reset on s390](https://agentprime.io/advisories/CVE-2026-89795.md)
  `CVE-2026-89795` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 16 Sept 2026
- [ksmbd: zero pipe read compound padding](https://agentprime.io/advisories/CVE-2026-89794.md)
  `CVE-2026-89794` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [ublk: clear VM_MAYWRITE on read-only ublk char device mmap](https://agentprime.io/advisories/CVE-2026-89793.md)
  `CVE-2026-89793` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [ksmbd: prevent out-of-bounds reads in share config responses](https://agentprime.io/advisories/CVE-2026-89792.md)
  `CVE-2026-89792` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026
- [perf: Fix use-after-free when perf mmap() revival races with the last munmap()](https://agentprime.io/advisories/CVE-2026-89791.md)
  `CVE-2026-89791` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [ipv6: avoid divide by zero in rt6_multipath_rebalance](https://agentprime.io/advisories/CVE-2026-89790.md)
  `CVE-2026-89790` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free](https://agentprime.io/advisories/CVE-2026-89789.md)
  `CVE-2026-89789` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [ksmbd: fix tree connection use-after-free in smb2_tree_connect()](https://agentprime.io/advisories/CVE-2026-89788.md)
  `CVE-2026-89788` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [ext4: check dir entry fits before reading the hash trailer in ext4_search_dir()](https://agentprime.io/advisories/CVE-2026-89787.md)
  `CVE-2026-89787` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [ext4: fix out-of-bounds read in ext4_read_inline_dir()](https://agentprime.io/advisories/CVE-2026-89786.md)
  `CVE-2026-89786` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init](https://agentprime.io/advisories/CVE-2026-89785.md)
  `CVE-2026-89785` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6](https://agentprime.io/advisories/CVE-2026-89784.md)
  `CVE-2026-89784` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full](https://agentprime.io/advisories/CVE-2026-89783.md)
  `CVE-2026-89783` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [fs/ntfs3: reject restart table growth beyond U16_MAX entries](https://agentprime.io/advisories/CVE-2026-89782.md)
  `CVE-2026-89782` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 16 Sept 2026
- [fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()](https://agentprime.io/advisories/CVE-2026-89781.md)
  `CVE-2026-89781` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 16 Sept 2026
- [net: qualcomm: rmnet: restore skb->dev on deaggregated frames](https://agentprime.io/advisories/CVE-2026-89780.md)
  `CVE-2026-89780` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [fs/ntfs3: validate ef->size covers the record's name and value](https://agentprime.io/advisories/CVE-2026-89779.md)
  `CVE-2026-89779` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [isofs: fix out-of-bounds page array access on empty zisofs block](https://agentprime.io/advisories/CVE-2026-89778.md)
  `CVE-2026-89778` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [vfio/pci: clear vdev->msi_perm after freeing it on init failure](https://agentprime.io/advisories/CVE-2026-89777.md)
  `CVE-2026-89777` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026
- [vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes](https://agentprime.io/advisories/CVE-2026-89776.md)
  `CVE-2026-89776` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation](https://agentprime.io/advisories/CVE-2026-89775.md)
  `CVE-2026-89775` · CVE record: Linux Linux · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [Bluetooth: SCO: hold sk properly in sco_conn_ready](https://agentprime.io/advisories/CVE-2026-89774.md)
  `CVE-2026-89774` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026
- [drm/amd/display: Skip Update HDCP Config In Transition State](https://agentprime.io/advisories/CVE-2026-89773.md)
  `CVE-2026-89773` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [btrfs: write-protect folios during data writeback](https://agentprime.io/advisories/CVE-2026-89772.md)
  `CVE-2026-89772` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ring-buffer: Fix subbuf resize race with ring buffer readers](https://agentprime.io/advisories/CVE-2026-89771.md)
  `CVE-2026-89771` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [iomap: don't free integrity payload that doesn't exist](https://agentprime.io/advisories/CVE-2026-89770.md)
  `CVE-2026-89770` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTExVDE5OjQ3OjA5LjYzMDAwMFoiLCJDVkUtMjAyNi04OTc3MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTE2VDEwOjMxOjAyLjY4ODAwMFoiLCJDVkUtMjAyNi04OTgzMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTE2VDEwOjMxOjAyLjY4ODAwMFoiLCJDVkUtMjAyNi04OTgzMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.
