# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [batman-adv: dat: avoid unaligned fault in IP extraction](https://agentprime.io/advisories/CVE-2026-89949.md)
  `CVE-2026-89949` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [batman-adv: bla: fix freeing of claims on meshif deletion](https://agentprime.io/advisories/CVE-2026-89948.md)
  `CVE-2026-89948` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [clk: meson: align gxbb_32k_clk_sel number of parents with actual count](https://agentprime.io/advisories/CVE-2026-89947.md)
  `CVE-2026-89947` · CVE record: Linux Linux · CVSS 8.0 High · Not analysed yet · Published 16 Sept 2026
- [ASoC: cs35l33: drain threaded IRQ before runtime suspend](https://agentprime.io/advisories/CVE-2026-89946.md)
  `CVE-2026-89946` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [ASoC: cs35l34: drain threaded IRQ before runtime suspend](https://agentprime.io/advisories/CVE-2026-89945.md)
  `CVE-2026-89945` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [ASoC: hdac_hda: Fix hlink refcount leak on component registration failure](https://agentprime.io/advisories/CVE-2026-89944.md)
  `CVE-2026-89944` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [ASoC: loongson: Fix error handling in ACPI property parsing](https://agentprime.io/advisories/CVE-2026-89943.md)
  `CVE-2026-89943` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 16 Sept 2026
- [iio: buffer: Fix potential use-after-free in anonymous buffer release](https://agentprime.io/advisories/CVE-2026-89942.md)
  `CVE-2026-89942` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [iio: buffer: Make IIO DMA fence release RCU-safe](https://agentprime.io/advisories/CVE-2026-89941.md)
  `CVE-2026-89941` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [iio: buffer: Tie IIO dma fence lock lifetime to the fence](https://agentprime.io/advisories/CVE-2026-89940.md)
  `CVE-2026-89940` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable](https://agentprime.io/advisories/CVE-2026-89939.md)
  `CVE-2026-89939` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF](https://agentprime.io/advisories/CVE-2026-89938.md)
  `CVE-2026-89938` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [iio: chemical: sgp30: Handle IAQ thread creation failure](https://agentprime.io/advisories/CVE-2026-89937.md)
  `CVE-2026-89937` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [iio: dac: m62332: Fix regulator reference count imbalance](https://agentprime.io/advisories/CVE-2026-89936.md)
  `CVE-2026-89936` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [iio: light: apds9306: fix PM reference leak in apds9306_read_data()](https://agentprime.io/advisories/CVE-2026-89935.md)
  `CVE-2026-89935` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [iio: light: ltrf216a: fix runtime PM reference leak in error path](https://agentprime.io/advisories/CVE-2026-89934.md)
  `CVE-2026-89934` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [iio: pressure: dps310: fix NULL pointer dereference on ACPI probe](https://agentprime.io/advisories/CVE-2026-89933.md)
  `CVE-2026-89933` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [KVM: nVMX: Always flush vpid02 on first use](https://agentprime.io/advisories/CVE-2026-89932.md)
  `CVE-2026-89932` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026
- [KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit](https://agentprime.io/advisories/CVE-2026-89931.md)
  `CVE-2026-89931` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [KVM: nVMX: Service local TLB flushes on failed nested VM-Enter](https://agentprime.io/advisories/CVE-2026-89930.md)
  `CVE-2026-89930` · CVE record: Linux Linux · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU](https://agentprime.io/advisories/CVE-2026-89929.md)
  `CVE-2026-89929` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026
- [KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk](https://agentprime.io/advisories/CVE-2026-89928.md)
  `CVE-2026-89928` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026
- [KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock](https://agentprime.io/advisories/CVE-2026-89927.md)
  `CVE-2026-89927` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026
- [KVM: s390: Fix length check \_\_import_wp_info()](https://agentprime.io/advisories/CVE-2026-89926.md)
  `CVE-2026-89926` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [KVM: s390: Fix memory leak in guest debug handling](https://agentprime.io/advisories/CVE-2026-89925.md)
  `CVE-2026-89925` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [KVM: s390: Fix old_data leak in guest debug error path](https://agentprime.io/advisories/CVE-2026-89924.md)
  `CVE-2026-89924` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [KVM: s390: Free guest debug data on vcpu destroy](https://agentprime.io/advisories/CVE-2026-89923.md)
  `CVE-2026-89923` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [KVM: s390: Take srcu when importing watchpoint data](https://agentprime.io/advisories/CVE-2026-89922.md)
  `CVE-2026-89922` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [KVM: s390: Zero initialize data structures for inject_pfault_token](https://agentprime.io/advisories/CVE-2026-89921.md)
  `CVE-2026-89921` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [KVM: s390: Fix memory corruption by not reinjecting CK machine checks](https://agentprime.io/advisories/CVE-2026-89920.md)
  `CVE-2026-89920` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [KVM: s390: keyop: use mmu_lock to read gmap->asce](https://agentprime.io/advisories/CVE-2026-89919.md)
  `CVE-2026-89919` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [KVM: arm64: Correctly handle end of VA space TLBI invalidation](https://agentprime.io/advisories/CVE-2026-89918.md)
  `CVE-2026-89918` · CVE record: Linux Linux · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping](https://agentprime.io/advisories/CVE-2026-89917.md)
  `CVE-2026-89917` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry](https://agentprime.io/advisories/CVE-2026-89916.md)
  `CVE-2026-89916` · CVE record: Linux Linux · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [KVM: arm64: Remove VM-wide VNCR mapping counter](https://agentprime.io/advisories/CVE-2026-89915.md)
  `CVE-2026-89915` · CVE record: Linux Linux · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [KVM: arm64: Sign-extend VA for range-based TLBI invalidation](https://agentprime.io/advisories/CVE-2026-89914.md)
  `CVE-2026-89914` · CVE record: Linux Linux · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables](https://agentprime.io/advisories/CVE-2026-89913.md)
  `CVE-2026-89913` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026
- [KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save](https://agentprime.io/advisories/CVE-2026-89912.md)
  `CVE-2026-89912` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026
- [KVM: arm64: Correctly cap TLBI Range to the architural limit](https://agentprime.io/advisories/CVE-2026-89911.md)
  `CVE-2026-89911` · CVE record: Linux Linux · CVSS 7.9 High · Not analysed yet · Published 16 Sept 2026
- [LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc](https://agentprime.io/advisories/CVE-2026-89910.md)
  `CVE-2026-89910` · CVE record: Linux Linux · CVSS 7.3 High · Not analysed yet · Published 16 Sept 2026
- [LoongArch: KVM: Free init resources if kvm_init() fails](https://agentprime.io/advisories/CVE-2026-89909.md)
  `CVE-2026-89909` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY](https://agentprime.io/advisories/CVE-2026-89908.md)
  `CVE-2026-89908` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026
- [LoongArch: KVM: Validate MSI data before routing it to EIOINTC](https://agentprime.io/advisories/CVE-2026-89907.md)
  `CVE-2026-89907` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026
- [LoongArch: BPF: Refactor jump offset calculation in tail call](https://agentprime.io/advisories/CVE-2026-89906.md)
  `CVE-2026-89906` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [LoongArch: BPF: Move arena register slot below TCC context](https://agentprime.io/advisories/CVE-2026-89905.md)
  `CVE-2026-89905` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [LoongArch: Fix acpi_package_ids\[\] array overflow](https://agentprime.io/advisories/CVE-2026-89904.md)
  `CVE-2026-89904` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 16 Sept 2026
- [LoongArch: Do not save/restore percpu base register in rethook trampoline](https://agentprime.io/advisories/CVE-2026-89903.md)
  `CVE-2026-89903` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [LoongArch: Avoid preempt count underflow without probe](https://agentprime.io/advisories/CVE-2026-89902.md)
  `CVE-2026-89902` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref](https://agentprime.io/advisories/CVE-2026-89901.md)
  `CVE-2026-89901` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: cec: core: Fix kmemleak due to missed rc_free_device() call](https://agentprime.io/advisories/CVE-2026-89900.md)
  `CVE-2026-89900` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: cec: disable delayed work before freeing an interrupted transmit](https://agentprime.io/advisories/CVE-2026-89899.md)
  `CVE-2026-89899` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [media: cec: extron-da-hd-4k-plus: add sanity check](https://agentprime.io/advisories/CVE-2026-89898.md)
  `CVE-2026-89898` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026
- [media: cec: Serialize exclusive follower delivery](https://agentprime.io/advisories/CVE-2026-89897.md)
  `CVE-2026-89897` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 16 Sept 2026
- [media: cedrus: fix memory leak in cedrus_init_ctrls()](https://agentprime.io/advisories/CVE-2026-89896.md)
  `CVE-2026-89896` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: cobalt: Avoid freeing ALSA private data twice](https://agentprime.io/advisories/CVE-2026-89895.md)
  `CVE-2026-89895` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: cx231xx: reject geometry changes while the VBI queue is busy](https://agentprime.io/advisories/CVE-2026-89894.md)
  `CVE-2026-89894` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [media: cx23885: cancel NetUP CI work before teardown](https://agentprime.io/advisories/CVE-2026-89893.md)
  `CVE-2026-89893` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [media: em28xx: defer audio-only extension registration](https://agentprime.io/advisories/CVE-2026-89892.md)
  `CVE-2026-89892` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: em28xx: fix use-after-free of dev_next->devlist on disconnect](https://agentprime.io/advisories/CVE-2026-89891.md)
  `CVE-2026-89891` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: go7007: defer the ALSA v4l2 put until card release](https://agentprime.io/advisories/CVE-2026-89890.md)
  `CVE-2026-89890` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTE2VDEwOjMxOjUzLjI3NjAwMFoiLCJDVkUtMjAyNi04OTg5MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTE2VDEwOjMyOjM1LjQ4NTAwMFoiLCJDVkUtMjAyNi04OTk1MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTE2VDEwOjMyOjM1LjQ4NTAwMFoiLCJDVkUtMjAyNi04OTk1MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.