# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [net/sched: sch_teql: restore skb->dev on the slave failure path](https://agentprime.io/advisories/CVE-2026-90071.md)
  `CVE-2026-90071` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [tpm: st33zp24: Return zero on status read failure](https://agentprime.io/advisories/CVE-2026-90070.md)
  `CVE-2026-90070` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [crypto: acomp - allocate async request context when cloning](https://agentprime.io/advisories/CVE-2026-90069.md)
  `CVE-2026-90069` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [ASoC: dapm: Fix off-by-one check on the second enum channel](https://agentprime.io/advisories/CVE-2026-90068.md)
  `CVE-2026-90068` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [libceph: validate banner payload length](https://agentprime.io/advisories/CVE-2026-90067.md)
  `CVE-2026-90067` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026
- [samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify](https://agentprime.io/advisories/CVE-2026-90066.md)
  `CVE-2026-90066` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure](https://agentprime.io/advisories/CVE-2026-90065.md)
  `CVE-2026-90065` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [drm/xe: Reject page faults from non-fault-mode scratch VMs](https://agentprime.io/advisories/CVE-2026-90064.md)
  `CVE-2026-90064` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [virtio-net: Ensure that TCP packets don't overflow gso_segs](https://agentprime.io/advisories/CVE-2026-90063.md)
  `CVE-2026-90063` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [netfilter: nf_tables: move hardware offload step after building the chain blob](https://agentprime.io/advisories/CVE-2026-90062.md)
  `CVE-2026-90062` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026
- [netfilter: nf_tables: skip double clone set expressions on element insert](https://agentprime.io/advisories/CVE-2026-90061.md)
  `CVE-2026-90061` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ALSA: control: Don't add invalid kcontrols to LED layer](https://agentprime.io/advisories/CVE-2026-90060.md)
  `CVE-2026-90060` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net: stmmac: restore NET_IP_ALIGN in the RX DMA offset](https://agentprime.io/advisories/CVE-2026-90059.md)
  `CVE-2026-90059` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026
- [net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup](https://agentprime.io/advisories/CVE-2026-90058.md)
  `CVE-2026-90058` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [slip: remove slip_hangup() to fix use-after-free in slip_receive_buf()](https://agentprime.io/advisories/CVE-2026-90057.md)
  `CVE-2026-90057` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [net: fec: only stop PTP if it was initialized](https://agentprime.io/advisories/CVE-2026-90056.md)
  `CVE-2026-90056` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [usb: atm: usbatm: fix invalid ci_range initialization](https://agentprime.io/advisories/CVE-2026-90055.md)
  `CVE-2026-90055` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [tcp: fix corruption of urgent data on multi-segment retransmit](https://agentprime.io/advisories/CVE-2026-90054.md)
  `CVE-2026-90054` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net/sched: sch_htb: limit htb_classify inner-class filter hops](https://agentprime.io/advisories/CVE-2026-90053.md)
  `CVE-2026-90053` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [tcp: reject non zerocopy devmem tx](https://agentprime.io/advisories/CVE-2026-90051.md)
  `CVE-2026-90051` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()](https://agentprime.io/advisories/CVE-2026-90049.md)
  `CVE-2026-90049` · CVE record: Linux Linux · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()](https://agentprime.io/advisories/CVE-2026-90048.md)
  `CVE-2026-90048` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [drm/xe: Don't hand out the flat CCS storage as usable VRAM](https://agentprime.io/advisories/CVE-2026-90047.md)
  `CVE-2026-90047` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [mm/page_alloc: don't spin_trylock() in NMI on UP](https://agentprime.io/advisories/CVE-2026-90046.md)
  `CVE-2026-90046` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [USB: gadget: ffs: fix mm lifetime handling](https://agentprime.io/advisories/CVE-2026-90045.md)
  `CVE-2026-90045` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [usb: gadget: f_fs: Fix Use-After-Free in AIO error path](https://agentprime.io/advisories/CVE-2026-90044.md)
  `CVE-2026-90044` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [zram: fix slot lock bit position on big-endian 64-bit](https://agentprime.io/advisories/CVE-2026-90043.md)
  `CVE-2026-90043` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [ceph: properly decrypt filenames in vmalloc() buffers](https://agentprime.io/advisories/CVE-2026-90042.md)
  `CVE-2026-90042` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [HID: sony: clean up device list on probe failure](https://agentprime.io/advisories/CVE-2026-90041.md)
  `CVE-2026-90041` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026
- [KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped](https://agentprime.io/advisories/CVE-2026-90040.md)
  `CVE-2026-90040` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [NFSD: Guard admin state-revocation walks with NFSD_NET_UP](https://agentprime.io/advisories/CVE-2026-90039.md)
  `CVE-2026-90039` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [NFSD: Prevent client use-after-free during export state revocation](https://agentprime.io/advisories/CVE-2026-90038.md)
  `CVE-2026-90038` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [NFSD: Prevent client use-after-free during close_lru reaping](https://agentprime.io/advisories/CVE-2026-90037.md)
  `CVE-2026-90037` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [NFSD: Prevent client use-after-free during blocked-lock reaping](https://agentprime.io/advisories/CVE-2026-90036.md)
  `CVE-2026-90036` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [drm/amd/display: fix division by zero in get_estimated_bw()](https://agentprime.io/advisories/CVE-2026-90035.md)
  `CVE-2026-90035` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [usb: image: mdc800: change kmalloc() to kzalloc()](https://agentprime.io/advisories/CVE-2026-90034.md)
  `CVE-2026-90034` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()](https://agentprime.io/advisories/CVE-2026-90033.md)
  `CVE-2026-90033` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [media: usbtv: keep device alive while ALSA card exists](https://agentprime.io/advisories/CVE-2026-90032.md)
  `CVE-2026-90032` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [usb-storage: ene_ub6250: fix race between scan work and probe](https://agentprime.io/advisories/CVE-2026-90031.md)
  `CVE-2026-90031` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [usb: dwc3: clear forceRM when issuing EndTransfer](https://agentprime.io/advisories/CVE-2026-90030.md)
  `CVE-2026-90030` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [usb: storage: realtek_cr: fix use-after-free on disconnect](https://agentprime.io/advisories/CVE-2026-90029.md)
  `CVE-2026-90029` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [usb: typec: hd3ss3220: track VBUS enable state per consumer](https://agentprime.io/advisories/CVE-2026-90028.md)
  `CVE-2026-90028` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop](https://agentprime.io/advisories/CVE-2026-90027.md)
  `CVE-2026-90027` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [usb: typec: qcom-pmic: cancel reset_work on stop](https://agentprime.io/advisories/CVE-2026-90026.md)
  `CVE-2026-90026` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [usb: typec: ucsi: displayport: Fix OOB altmode array index](https://agentprime.io/advisories/CVE-2026-90025.md)
  `CVE-2026-90025` · CVE record: Linux Linux · CVSS 7.7 High · Not analysed yet · Published 16 Sept 2026
- [usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs](https://agentprime.io/advisories/CVE-2026-90024.md)
  `CVE-2026-90024` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()](https://agentprime.io/advisories/CVE-2026-90023.md)
  `CVE-2026-90023` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [usb: gadget: f_midi2: fix use-after-free in string attribute show path](https://agentprime.io/advisories/CVE-2026-90022.md)
  `CVE-2026-90022` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [usb: gadget: f_midi: initialize work in f_midi_alloc()](https://agentprime.io/advisories/CVE-2026-90021.md)
  `CVE-2026-90021` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()](https://agentprime.io/advisories/CVE-2026-90020.md)
  `CVE-2026-90020` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [usb: gadget: fix null pointer dereference in usb_put_function_instance()](https://agentprime.io/advisories/CVE-2026-90019.md)
  `CVE-2026-90019` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()](https://agentprime.io/advisories/CVE-2026-90018.md)
  `CVE-2026-90018` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026
- [staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()](https://agentprime.io/advisories/CVE-2026-90017.md)
  `CVE-2026-90017` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026
- [staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()](https://agentprime.io/advisories/CVE-2026-90016.md)
  `CVE-2026-90016` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026
- [xhci: fix lost bounce buffers on TDs spanning several ring segments](https://agentprime.io/advisories/CVE-2026-90015.md)
  `CVE-2026-90015` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 16 Sept 2026
- [tracing: Have show_event_filters/triggers files take trace array ref](https://agentprime.io/advisories/CVE-2026-90014.md)
  `CVE-2026-90014` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [tracing: Take trace_array reference when opening options file](https://agentprime.io/advisories/CVE-2026-90013.md)
  `CVE-2026-90013` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026
- [spi: Fix DMA mapping ownership on partial map failure](https://agentprime.io/advisories/CVE-2026-90012.md)
  `CVE-2026-90012` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [scsi: target: iscsi: Reserve a terminator byte for the login payload](https://agentprime.io/advisories/CVE-2026-90011.md)
  `CVE-2026-90011` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026
- [scsi: bsg: Cap io_uring sense copy to max_response_len](https://agentprime.io/advisories/CVE-2026-90010.md)
  `CVE-2026-90010` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTE2VDEwOjMzOjE4LjExODAwMFoiLCJDVkUtMjAyNi05MDAxMCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTE3VDE2OjA1OjUyLjkwNTAwMFoiLCJDVkUtMjAyNi05MDA3MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTE3VDE2OjA1OjUyLjkwNTAwMFoiLCJDVkUtMjAyNi05MDA3MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.