# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [media: i2c: imx415: Release runtime PM reference on VBLANK error](https://agentprime.io/advisories/CVE-2026-89889.md)
  `CVE-2026-89889` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: i2c: ov02a10: fix endpoint parsing use-after-free](https://agentprime.io/advisories/CVE-2026-89888.md)
  `CVE-2026-89888` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [media: i2c: ov7740: fix use-after-destroy in remove](https://agentprime.io/advisories/CVE-2026-89887.md)
  `CVE-2026-89887` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [media: intel/ipu6: fix async notifier cleanup leak on parse error](https://agentprime.io/advisories/CVE-2026-89886.md)
  `CVE-2026-89886` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: platform: mtk-mdp3: Fix SCP device refcounting](https://agentprime.io/advisories/CVE-2026-89885.md)
  `CVE-2026-89885` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 16 Sept 2026
- [media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup](https://agentprime.io/advisories/CVE-2026-89884.md)
  `CVE-2026-89884` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: rc: sunxi-cir: Unregister rc device on probe failure](https://agentprime.io/advisories/CVE-2026-89883.md)
  `CVE-2026-89883` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflow](https://agentprime.io/advisories/CVE-2026-89882.md)
  `CVE-2026-89882` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak](https://agentprime.io/advisories/CVE-2026-89881.md)
  `CVE-2026-89881` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure](https://agentprime.io/advisories/CVE-2026-89880.md)
  `CVE-2026-89880` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [media: s2255: bound JPEG frame size before copying into the buffer](https://agentprime.io/advisories/CVE-2026-89879.md)
  `CVE-2026-89879` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: s2255: check firmware size before reading trailing marker](https://agentprime.io/advisories/CVE-2026-89878.md)
  `CVE-2026-89878` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: saa7164: fix cleanup on resource allocation failure](https://agentprime.io/advisories/CVE-2026-89877.md)
  `CVE-2026-89877` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 16 Sept 2026
- [media: tda18250: fix possible integer overflow](https://agentprime.io/advisories/CVE-2026-89876.md)
  `CVE-2026-89876` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: ti: vpe: quiesce overflow recovery before freeing streams](https://agentprime.io/advisories/CVE-2026-89875.md)
  `CVE-2026-89875` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [media: v4l2-async: avoid deleting unlinked ASC entry on link error](https://agentprime.io/advisories/CVE-2026-89874.md)
  `CVE-2026-89874` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: v4l2-ctrls: validate HEVC EXT SPS RPS counts](https://agentprime.io/advisories/CVE-2026-89873.md)
  `CVE-2026-89873` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link](https://agentprime.io/advisories/CVE-2026-89872.md)
  `CVE-2026-89872` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure](https://agentprime.io/advisories/CVE-2026-89871.md)
  `CVE-2026-89871` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: zoran: Avoid freeing a registered video_device twice](https://agentprime.io/advisories/CVE-2026-89870.md)
  `CVE-2026-89870` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [media: qcom: iris: use disable_irq() during power-off](https://agentprime.io/advisories/CVE-2026-89869.md)
  `CVE-2026-89869` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: chips-media: wave5: Add timeout while stop_streaming](https://agentprime.io/advisories/CVE-2026-89868.md)
  `CVE-2026-89868` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued](https://agentprime.io/advisories/CVE-2026-89867.md)
  `CVE-2026-89867` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: chips-media: wave5: Resume device before setting EOS flag](https://agentprime.io/advisories/CVE-2026-89866.md)
  `CVE-2026-89866` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers](https://agentprime.io/advisories/CVE-2026-89865.md)
  `CVE-2026-89865` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Bound i2c->length in I2C bsg handlers](https://agentprime.io/advisories/CVE-2026-89864.md)
  `CVE-2026-89864` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check](https://agentprime.io/advisories/CVE-2026-89863.md)
  `CVE-2026-89863` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Fix BSG job leak on validate flash image error path](https://agentprime.io/advisories/CVE-2026-89862.md)
  `CVE-2026-89862` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()](https://agentprime.io/advisories/CVE-2026-89861.md)
  `CVE-2026-89861` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Initialize NVMe abort_work once at submission](https://agentprime.io/advisories/CVE-2026-89860.md)
  `CVE-2026-89860` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak](https://agentprime.io/advisories/CVE-2026-89859.md)
  `CVE-2026-89859` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()](https://agentprime.io/advisories/CVE-2026-89858.md)
  `CVE-2026-89858` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject](https://agentprime.io/advisories/CVE-2026-89857.md)
  `CVE-2026-89857` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation](https://agentprime.io/advisories/CVE-2026-89856.md)
  `CVE-2026-89856` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Serialize flash version read in reset handler](https://agentprime.io/advisories/CVE-2026-89855.md)
  `CVE-2026-89855` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Fix cs84xx use-after-free on host teardown](https://agentprime.io/advisories/CVE-2026-89854.md)
  `CVE-2026-89854` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump](https://agentprime.io/advisories/CVE-2026-89853.md)
  `CVE-2026-89853` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()](https://agentprime.io/advisories/CVE-2026-89852.md)
  `CVE-2026-89852` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Fix FCE trace enable parsing in debugfs](https://agentprime.io/advisories/CVE-2026-89851.md)
  `CVE-2026-89851` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Don't query firmware state while chip is down](https://agentprime.io/advisories/CVE-2026-89850.md)
  `CVE-2026-89850` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path](https://agentprime.io/advisories/CVE-2026-89849.md)
  `CVE-2026-89849` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Quiesce response IRQ before freeing request queue](https://agentprime.io/advisories/CVE-2026-89848.md)
  `CVE-2026-89848` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Avoid double completion in async IOCB timeout](https://agentprime.io/advisories/CVE-2026-89847.md)
  `CVE-2026-89847` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read](https://agentprime.io/advisories/CVE-2026-89846.md)
  `CVE-2026-89846` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()](https://agentprime.io/advisories/CVE-2026-89845.md)
  `CVE-2026-89845` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition](https://agentprime.io/advisories/CVE-2026-89844.md)
  `CVE-2026-89844` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak](https://agentprime.io/advisories/CVE-2026-89843.md)
  `CVE-2026-89843` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started](https://agentprime.io/advisories/CVE-2026-89842.md)
  `CVE-2026-89842` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [f2fs: only redirty pinned folios in redirty_blocks](https://agentprime.io/advisories/CVE-2026-89841.md)
  `CVE-2026-89841` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [f2fs: validate MOVE_RANGE destination size](https://agentprime.io/advisories/CVE-2026-89840.md)
  `CVE-2026-89840` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026
- [f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set()](https://agentprime.io/advisories/CVE-2026-89839.md)
  `CVE-2026-89839` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [f2fs: limit recovery filename logging to stored length](https://agentprime.io/advisories/CVE-2026-89838.md)
  `CVE-2026-89838` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026
- [f2fs: fix dentry folio leak in find_in_level](https://agentprime.io/advisories/CVE-2026-89837.md)
  `CVE-2026-89837` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [f2fs: fix folio_nr_pages() race after put in large folio invalidate](https://agentprime.io/advisories/CVE-2026-89836.md)
  `CVE-2026-89836` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [f2fs: avoid NULL checkpoint thread access in sysfs](https://agentprime.io/advisories/CVE-2026-89835.md)
  `CVE-2026-89835` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [f2fs: fix to migrate all curseg types during free_segment_range](https://agentprime.io/advisories/CVE-2026-89834.md)
  `CVE-2026-89834` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()](https://agentprime.io/advisories/CVE-2026-89833.md)
  `CVE-2026-89833` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [f2fs: fix to clear dirty flag on folio in error path](https://agentprime.io/advisories/CVE-2026-89832.md)
  `CVE-2026-89832` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [f2fs: protect critical_task_priority updates with s_umount](https://agentprime.io/advisories/CVE-2026-89831.md)
  `CVE-2026-89831` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [f2fs: fix valid block count leak on data block allocation failure](https://agentprime.io/advisories/CVE-2026-89830.md)
  `CVE-2026-89830` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTE2VDEwOjMxOjAyLjY4ODAwMFoiLCJDVkUtMjAyNi04OTgzMCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTE2VDEwOjMxOjUzLjI3NjAwMFoiLCJDVkUtMjAyNi04OTg5MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTE2VDEwOjMxOjUzLjI3NjAwMFoiLCJDVkUtMjAyNi04OTg5MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.