# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [mailbox: qcom-cpucp: handle NULL data in send_data callback](https://agentprime.io/advisories/CVE-2026-90192.md)
  `CVE-2026-90192` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [mailbox: riscv-sbi-mpxy: validate RPMI notification lengths](https://agentprime.io/advisories/CVE-2026-90191.md)
  `CVE-2026-90191` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 17 Sept 2026
- [null_blk: use DEFINE_MUTEX for the file-scope mutex](https://agentprime.io/advisories/CVE-2026-90190.md)
  `CVE-2026-90190` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [null_blk: register configfs subsystem after creating default devices](https://agentprime.io/advisories/CVE-2026-90189.md)
  `CVE-2026-90189` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [null_blk: free global tag_set on init error path](https://agentprime.io/advisories/CVE-2026-90188.md)
  `CVE-2026-90188` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [null_blk: free zones array on device power-off](https://agentprime.io/advisories/CVE-2026-90187.md)
  `CVE-2026-90187` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [null_blk: reject per-device queue resize for shared tag set](https://agentprime.io/advisories/CVE-2026-90186.md)
  `CVE-2026-90186` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [null_blk: serialize configfs attribute stores with the lock](https://agentprime.io/advisories/CVE-2026-90185.md)
  `CVE-2026-90185` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [null_blk: serialize configfs attribute updates with device setup](https://agentprime.io/advisories/CVE-2026-90184.md)
  `CVE-2026-90184` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [blk-iolatency: clear delay state when freeing policy data](https://agentprime.io/advisories/CVE-2026-90183.md)
  `CVE-2026-90183` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [blk-iocost: clear delay state when freeing policy data](https://agentprime.io/advisories/CVE-2026-90182.md)
  `CVE-2026-90182` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ublk: avoid teardown retry loop on xarray allocation failure](https://agentprime.io/advisories/CVE-2026-90181.md)
  `CVE-2026-90181` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [block: mtip32xx: synchronize ioctls with device removal](https://agentprime.io/advisories/CVE-2026-90180.md)
  `CVE-2026-90180` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [apparmor: fix deadlock in complain-mode change_hat](https://agentprime.io/advisories/CVE-2026-90179.md)
  `CVE-2026-90179` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [hwmon: (coretemp) Fix core_data leak on CPUs without PTS](https://agentprime.io/advisories/CVE-2026-90178.md)
  `CVE-2026-90178` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Check pointer type for all atomic RMW paths](https://agentprime.io/advisories/CVE-2026-90177.md)
  `CVE-2026-90177` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [ksmbd: Do not skip lock checks for single-byte ranges](https://agentprime.io/advisories/CVE-2026-90176.md)
  `CVE-2026-90176` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 17 Sept 2026
- [smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer](https://agentprime.io/advisories/CVE-2026-90175.md)
  `CVE-2026-90175` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()](https://agentprime.io/advisories/CVE-2026-90174.md)
  `CVE-2026-90174` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026
- [smb: smbdirect: free completion queues with ib_free_cq()](https://agentprime.io/advisories/CVE-2026-90173.md)
  `CVE-2026-90173` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [smb: smbdirect: destroy QP before mem pools on accept failure](https://agentprime.io/advisories/CVE-2026-90172.md)
  `CVE-2026-90172` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026
- [smb: smbdirect: release pending child sockets outside the handler lock](https://agentprime.io/advisories/CVE-2026-90171.md)
  `CVE-2026-90171` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ksmbd: validate ipc response length before dereferencing its fields](https://agentprime.io/advisories/CVE-2026-90170.md)
  `CVE-2026-90170` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ksmbd: free preauth sessions on connection teardown](https://agentprime.io/advisories/CVE-2026-90169.md)
  `CVE-2026-90169` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ksmbd: serialize oplock close with pending break ownership](https://agentprime.io/advisories/CVE-2026-90167.md)
  `CVE-2026-90167` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()](https://agentprime.io/advisories/CVE-2026-90166.md)
  `CVE-2026-90166` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()](https://agentprime.io/advisories/CVE-2026-90165.md)
  `CVE-2026-90165` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [smb/server: abort initialization when proc setup fails](https://agentprime.io/advisories/CVE-2026-90164.md)
  `CVE-2026-90164` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [smb/server: call ksmbd_proc_cleanup() on module init failure](https://agentprime.io/advisories/CVE-2026-90163.md)
  `CVE-2026-90163` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ksmbd: defer publishing granted locks to prevent UAF/double-free race](https://agentprime.io/advisories/CVE-2026-90162.md)
  `CVE-2026-90162` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026
- [erofs: fix interlaced ztailpacking pclusters](https://agentprime.io/advisories/CVE-2026-90161.md)
  `CVE-2026-90161` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026
- [lwt_bpf: Restore reserved headroom after xmit program](https://agentprime.io/advisories/CVE-2026-90160.md)
  `CVE-2026-90160` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Disallow bpf\_{g,s}etsockopt() in cgroup UNIX getname hooks](https://agentprime.io/advisories/CVE-2026-90159.md)
  `CVE-2026-90159` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [m68k: nfcon: Do not call console_is_registered() in nfcon_device()](https://agentprime.io/advisories/CVE-2026-90158.md)
  `CVE-2026-90158` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Reject negative optlen in cgroup getsockopt hook](https://agentprime.io/advisories/CVE-2026-90157.md)
  `CVE-2026-90157` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ksmbd: safely discard unregistered deferred locks](https://agentprime.io/advisories/CVE-2026-90156.md)
  `CVE-2026-90156` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ksmbd: detach blocked lock requests before freeing](https://agentprime.io/advisories/CVE-2026-90155.md)
  `CVE-2026-90155` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ksmbd: scope session state changes to bound connections](https://agentprime.io/advisories/CVE-2026-90154.md)
  `CVE-2026-90154` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size](https://agentprime.io/advisories/CVE-2026-90153.md)
  `CVE-2026-90153` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 17 Sept 2026
- [smb/server: fix session leak in ksmbd_session_register()](https://agentprime.io/advisories/CVE-2026-90152.md)
  `CVE-2026-90152` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [NFSv4: remove callback IDR entry on client allocation failure](https://agentprime.io/advisories/CVE-2026-90151.md)
  `CVE-2026-90151` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [pnfs/blocklayout: Fix device leaks on parse failure](https://agentprime.io/advisories/CVE-2026-90150.md)
  `CVE-2026-90150` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers](https://agentprime.io/advisories/CVE-2026-90149.md)
  `CVE-2026-90149` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026
- [NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()](https://agentprime.io/advisories/CVE-2026-90148.md)
  `CVE-2026-90148` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()](https://agentprime.io/advisories/CVE-2026-90147.md)
  `CVE-2026-90147` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf, xdp: move offload check into dev_xdp_install()](https://agentprime.io/advisories/CVE-2026-90146.md)
  `CVE-2026-90146` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed](https://agentprime.io/advisories/CVE-2026-90145.md)
  `CVE-2026-90145` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026
- [dpll: fix NULL deref in dpll_device_ops() during teardown race](https://agentprime.io/advisories/CVE-2026-90144.md)
  `CVE-2026-90144` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net: kcm: Hold RCU read lock while running BPF parser](https://agentprime.io/advisories/CVE-2026-90143.md)
  `CVE-2026-90143` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [virtio_net: Fix resize of the RX ring](https://agentprime.io/advisories/CVE-2026-90142.md)
  `CVE-2026-90142` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [ipvs: fix integer overflow in ftp helper port/address parsing](https://agentprime.io/advisories/CVE-2026-90141.md)
  `CVE-2026-90141` · CVE record: Linux Linux · CVSS 7.3 High · Not analysed yet · Published 17 Sept 2026
- [cuse: wait for pending RCU callbacks on module exit](https://agentprime.io/advisories/CVE-2026-90140.md)
  `CVE-2026-90140` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [fuse: check for NULL root inode in fuse_fill_super_submount](https://agentprime.io/advisories/CVE-2026-90139.md)
  `CVE-2026-90139` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [vsock: don't check the listener's sk_err in vsock_accept()](https://agentprime.io/advisories/CVE-2026-90138.md)
  `CVE-2026-90138` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [platform/x86: hp-bioscfg: fix password encoding bounds check](https://agentprime.io/advisories/CVE-2026-90137.md)
  `CVE-2026-90137` · CVE record: Linux Linux · CVSS 7.7 High · Not analysed yet · Published 17 Sept 2026
- [platform/x86/amd/hsmp: Reject negative power cap writes in hwmon](https://agentprime.io/advisories/CVE-2026-90136.md)
  `CVE-2026-90136` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()](https://agentprime.io/advisories/CVE-2026-90135.md)
  `CVE-2026-90135` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ntfs: fix kmap_local_page() usage in compress](https://agentprime.io/advisories/CVE-2026-90134.md)
  `CVE-2026-90134` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib()](https://agentprime.io/advisories/CVE-2026-90133.md)
  `CVE-2026-90133` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [ntfs: reject unprivileged writes to reserved $LX\* xattrs](https://agentprime.io/advisories/CVE-2026-90132.md)
  `CVE-2026-90132` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTE3VDE2OjA2OjMyLjU3NjAwMFoiLCJDVkUtMjAyNi05MDEzMiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTE3VDE2OjA3OjEzLjY3MjAwMFoiLCJDVkUtMjAyNi05MDE5MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTE3VDE2OjA3OjEzLjY3MjAwMFoiLCJDVkUtMjAyNi05MDE5MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.