# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [ntfs: serialize resident iomap reads with mrec_lock](https://agentprime.io/advisories/CVE-2026-90131.md)
  `CVE-2026-90131` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026
- [vdpa_sim: fix cleanup after worker creation failure](https://agentprime.io/advisories/CVE-2026-90130.md)
  `CVE-2026-90130` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [virtio_balloon: quiesce balloon work before device shutdown](https://agentprime.io/advisories/CVE-2026-90129.md)
  `CVE-2026-90129` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [vdpa/mlx5: fix wrong list iterated in add_direct_chain error path](https://agentprime.io/advisories/CVE-2026-90128.md)
  `CVE-2026-90128` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [virtio: rtc: time out alarm requests](https://agentprime.io/advisories/CVE-2026-90127.md)
  `CVE-2026-90127` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [rtc: pcf8563: fix clock provider leak on unbind](https://agentprime.io/advisories/CVE-2026-90126.md)
  `CVE-2026-90126` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [smb: client: fix request buffer leak in smb2_new_read_req()](https://agentprime.io/advisories/CVE-2026-90125.md)
  `CVE-2026-90125` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [irqchip/renesas-rzg2l: Fix loss of interrupt](https://agentprime.io/advisories/CVE-2026-90124.md)
  `CVE-2026-90124` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [irqchip/ast2700-intc: Avoid allocating in the irq_domain activate() callback](https://agentprime.io/advisories/CVE-2026-90123.md)
  `CVE-2026-90123` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [clk: visconti: Make sure clk_init_data is fully initialized](https://agentprime.io/advisories/CVE-2026-90122.md)
  `CVE-2026-90122` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [irqchip/gic-v5: Clear per-CPU IRS data on teardown](https://agentprime.io/advisories/CVE-2026-90121.md)
  `CVE-2026-90121` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing](https://agentprime.io/advisories/CVE-2026-90120.md)
  `CVE-2026-90120` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 17 Sept 2026
- [ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup](https://agentprime.io/advisories/CVE-2026-90119.md)
  `CVE-2026-90119` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ntfs: fix off-by-one page overflow in ntfs_decompress()](https://agentprime.io/advisories/CVE-2026-90118.md)
  `CVE-2026-90118` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [ntfs: validate usa_ofs before preserving the update sequence number](https://agentprime.io/advisories/CVE-2026-90117.md)
  `CVE-2026-90117` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ALSA: mtpav: shut down output timer before card teardown](https://agentprime.io/advisories/CVE-2026-90116.md)
  `CVE-2026-90116` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [xsk: fix NULL pointer dereference in \_\_xsk_rcv()](https://agentprime.io/advisories/CVE-2026-90115.md)
  `CVE-2026-90115` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net: bridge: Reject descending VLAN tunnel ranges](https://agentprime.io/advisories/CVE-2026-90114.md)
  `CVE-2026-90114` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [netdevsim: update queue NAPI association on queue reset](https://agentprime.io/advisories/CVE-2026-90113.md)
  `CVE-2026-90113` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net: qlcnic: validate unified ROM sections before loading](https://agentprime.io/advisories/CVE-2026-90112.md)
  `CVE-2026-90112` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ip6mr: do not clone dst in ip6mr_cache_report()](https://agentprime.io/advisories/CVE-2026-90111.md)
  `CVE-2026-90111` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [inetpeer: randomize RB-tree node comparison using SipHash](https://agentprime.io/advisories/CVE-2026-90110.md)
  `CVE-2026-90110` · CVE record: Linux Linux · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue](https://agentprime.io/advisories/CVE-2026-90109.md)
  `CVE-2026-90109` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition](https://agentprime.io/advisories/CVE-2026-90108.md)
  `CVE-2026-90108` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net/smc: free pending qentry in smc_llc_flow_stop() before memset](https://agentprime.io/advisories/CVE-2026-90107.md)
  `CVE-2026-90107` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net: bridge: arp/nd proxy: fix reading neigh ha](https://agentprime.io/advisories/CVE-2026-90106.md)
  `CVE-2026-90106` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [vxlan: fix reading neigh ha](https://agentprime.io/advisories/CVE-2026-90105.md)
  `CVE-2026-90105` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [NFSv4.1: zero referring call lists before decoding](https://agentprime.io/advisories/CVE-2026-90104.md)
  `CVE-2026-90104` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [NFSv4.2: fix LAYOUTSTATS send buffer exhaustion](https://agentprime.io/advisories/CVE-2026-90103.md)
  `CVE-2026-90103` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026
- [NFSv4/pnfs: key the data server cache on the NFS version](https://agentprime.io/advisories/CVE-2026-90102.md)
  `CVE-2026-90102` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026
- [bnxt_en: Fix call to hardware monitoring event handler](https://agentprime.io/advisories/CVE-2026-90101.md)
  `CVE-2026-90101` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ptp: netc: fix period truncation and potential divide-by-zero in PEROUT](https://agentprime.io/advisories/CVE-2026-90100.md)
  `CVE-2026-90100` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net/sched: account classifier filter allocations to memcg](https://agentprime.io/advisories/CVE-2026-90099.md)
  `CVE-2026-90099` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net: sparx5: fix sleep in atomic context in MAC table access](https://agentprime.io/advisories/CVE-2026-90098.md)
  `CVE-2026-90098` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition](https://agentprime.io/advisories/CVE-2026-90097.md)
  `CVE-2026-90097` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [fuse: invalidate the correct range after O_APPEND direct write](https://agentprime.io/advisories/CVE-2026-90096.md)
  `CVE-2026-90096` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [fuse: Fix the condition to enable over-io-uring](https://agentprime.io/advisories/CVE-2026-90095.md)
  `CVE-2026-90095` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [arm64: process: Fix context switching MTE store-only tag check](https://agentprime.io/advisories/CVE-2026-90094.md)
  `CVE-2026-90094` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [Bluetooth: L2CAP: access chan->conn safely in get/setsockopt](https://agentprime.io/advisories/CVE-2026-90093.md)
  `CVE-2026-90093` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN](https://agentprime.io/advisories/CVE-2026-90092.md)
  `CVE-2026-90092` · CVE record: Linux Linux · CVSS 8.0 High · Not analysed yet · Published 17 Sept 2026
- [Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan](https://agentprime.io/advisories/CVE-2026-90091.md)
  `CVE-2026-90091` · CVE record: Linux Linux · CVSS 8.0 High · Not analysed yet · Published 17 Sept 2026
- [Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path](https://agentprime.io/advisories/CVE-2026-90090.md)
  `CVE-2026-90090` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [Bluetooth: btnxpuart: Validate the FW dump header length](https://agentprime.io/advisories/CVE-2026-90089.md)
  `CVE-2026-90089` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026
- [Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop](https://agentprime.io/advisories/CVE-2026-90088.md)
  `CVE-2026-90088` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [Bluetooth: do not leak an hci_conn when a second LE connect is rejected](https://agentprime.io/advisories/CVE-2026-90087.md)
  `CVE-2026-90087` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [xsk: honor XDP_TX_METADATA in zero-copy path](https://agentprime.io/advisories/CVE-2026-90086.md)
  `CVE-2026-90086` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [octeontx2-af: fix NULL deref in NIX TM tree debugfs read path](https://agentprime.io/advisories/CVE-2026-90085.md)
  `CVE-2026-90085` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [octeontx2-vf: fix workqueue and netdev race in probe/remove](https://agentprime.io/advisories/CVE-2026-90084.md)
  `CVE-2026-90084` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net/sched: act_ife: Only operate on Ethernet frames](https://agentprime.io/advisories/CVE-2026-90083.md)
  `CVE-2026-90083` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net: mana: Cap MSI-X vectors to the device MSI-X table size](https://agentprime.io/advisories/CVE-2026-90082.md)
  `CVE-2026-90082` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net/rds: use wq_has_sleeper() in rds_cong_map_updated()](https://agentprime.io/advisories/CVE-2026-90081.md)
  `CVE-2026-90081` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup](https://agentprime.io/advisories/CVE-2026-90080.md)
  `CVE-2026-90080` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init()](https://agentprime.io/advisories/CVE-2026-90079.md)
  `CVE-2026-90079` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net/sched: act_skbmod: fix length calculations and avoid invalid header warnings](https://agentprime.io/advisories/CVE-2026-90078.md)
  `CVE-2026-90078` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net: fix a resource leak in copy_net_ns() error handling path](https://agentprime.io/advisories/CVE-2026-90077.md)
  `CVE-2026-90077` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net/sched: fq: add overflow bounds to quantum and initial quantum](https://agentprime.io/advisories/CVE-2026-90076.md)
  `CVE-2026-90076` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net/sched: fq_codel: clamp default quantum and mtu](https://agentprime.io/advisories/CVE-2026-90075.md)
  `CVE-2026-90075` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net/sched: fq_pie: clamp default quantum to avoid signed overflow](https://agentprime.io/advisories/CVE-2026-90074.md)
  `CVE-2026-90074` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net/sched: hhf: clamp quantum before hhf_change() to avoid overflow](https://agentprime.io/advisories/CVE-2026-90073.md)
  `CVE-2026-90073` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net/sched: sfq: clamp quantum to avoid signed overflow soft lockup](https://agentprime.io/advisories/CVE-2026-90072.md)
  `CVE-2026-90072` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTE3VDE2OjA1OjUyLjkwNTAwMFoiLCJDVkUtMjAyNi05MDA3MiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTE3VDE2OjA2OjMyLjU3NjAwMFoiLCJDVkUtMjAyNi05MDEzMiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTE3VDE2OjA2OjMyLjU3NjAwMFoiLCJDVkUtMjAyNi05MDEzMiJd>. Everything for agents: <https://agentprime.io/llms.txt>.