# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Bluetooth: MGMT: free the HCI command when it is cancelled](https://agentprime.io/advisories/CVE-2026-90252.md)
  `CVE-2026-90252` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [Bluetooth: MSFT: validate evt_prefix_len against the response length](https://agentprime.io/advisories/CVE-2026-90251.md)
  `CVE-2026-90251` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf, cgroup: Fix storage null-ptr-deref after replacing prog](https://agentprime.io/advisories/CVE-2026-90250.md)
  `CVE-2026-90250` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes](https://agentprime.io/advisories/CVE-2026-90249.md)
  `CVE-2026-90249` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net/sched: cls_api: fix teardown of an adopted proto on insert-race loss](https://agentprime.io/advisories/CVE-2026-90248.md)
  `CVE-2026-90248` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Fix mmap_lock leak in irq_work path](https://agentprime.io/advisories/CVE-2026-90247.md)
  `CVE-2026-90247` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [apparmor: fix integer overflow in verify_tags() bounds check](https://agentprime.io/advisories/CVE-2026-90246.md)
  `CVE-2026-90246` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026
- [fbdev: kyro: Validate overlay viewport coordinates](https://agentprime.io/advisories/CVE-2026-90245.md)
  `CVE-2026-90245` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [iommu/dma: Restore locking around msi_page_list](https://agentprime.io/advisories/CVE-2026-90244.md)
  `CVE-2026-90244` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [iommu/vt-d: Clear Present bit before tearing down copied context entry](https://agentprime.io/advisories/CVE-2026-90243.md)
  `CVE-2026-90243` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 17 Sept 2026
- [iommu/vt-d: Fix iopf_refcount leak on RID domain replacement](https://agentprime.io/advisories/CVE-2026-90242.md)
  `CVE-2026-90242` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [iommu/vt-d: Tear down scalable-mode context on probe failure](https://agentprime.io/advisories/CVE-2026-90241.md)
  `CVE-2026-90241` · CVE record: Linux Linux · CVSS 8.2 High · Not analysed yet · Published 17 Sept 2026
- [iommu/vt-d: Flush context cache with correct SID when tearing down aliases](https://agentprime.io/advisories/CVE-2026-90240.md)
  `CVE-2026-90240` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026
- [media: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem()](https://agentprime.io/advisories/CVE-2026-90239.md)
  `CVE-2026-90239` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [media: amd: isp4: fix self-deadlock in isp4sd_pwron_and_init() error path](https://agentprime.io/advisories/CVE-2026-90238.md)
  `CVE-2026-90238` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [netfilter: nft_ct: move custom expectation support to helper](https://agentprime.io/advisories/CVE-2026-90237.md)
  `CVE-2026-90237` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [NFSD: Release the export reference when reaping open stateids](https://agentprime.io/advisories/CVE-2026-90236.md)
  `CVE-2026-90236` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE](https://agentprime.io/advisories/CVE-2026-90235.md)
  `CVE-2026-90235` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [NFS: Return a delegation the client fails to record](https://agentprime.io/advisories/CVE-2026-90234.md)
  `CVE-2026-90234` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026
- [nvme-pci: release descriptor pools on probe failure](https://agentprime.io/advisories/CVE-2026-90233.md)
  `CVE-2026-90233` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [amt: Don't support cross-netns setup.](https://agentprime.io/advisories/CVE-2026-90232.md)
  `CVE-2026-90232` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [apparmor: fix unconfined user namespace restriction forced stack](https://agentprime.io/advisories/CVE-2026-90231.md)
  `CVE-2026-90231` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 17 Sept 2026
- [nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()](https://agentprime.io/advisories/CVE-2026-90230.md)
  `CVE-2026-90230` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [nvme-apple: Destroy the admin queue on removal](https://agentprime.io/advisories/CVE-2026-90229.md)
  `CVE-2026-90229` · CVE record: Linux Linux · CVSS 7.4 High · Not analysed yet · Published 17 Sept 2026
- [nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()](https://agentprime.io/advisories/CVE-2026-90228.md)
  `CVE-2026-90228` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026
- [nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()](https://agentprime.io/advisories/CVE-2026-90227.md)
  `CVE-2026-90227` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [nfc: llcp: avoid userspace overflow on invalid optlen](https://agentprime.io/advisories/CVE-2026-90226.md)
  `CVE-2026-90226` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [nfc: llcp: read llcp_sock->local under the socket lock in getsockopt](https://agentprime.io/advisories/CVE-2026-90225.md)
  `CVE-2026-90225` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [nfc: nci: fix double completion race in nci_data_exchange_complete](https://agentprime.io/advisories/CVE-2026-90224.md)
  `CVE-2026-90224` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026
- [nfc: llcp: bound SNL TLV parsing to the skb and add length checks](https://agentprime.io/advisories/CVE-2026-90223.md)
  `CVE-2026-90223` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026
- [nfc: pn533: hold a reference to the request skb during send_frame](https://agentprime.io/advisories/CVE-2026-90222.md)
  `CVE-2026-90222` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing](https://agentprime.io/advisories/CVE-2026-90221.md)
  `CVE-2026-90221` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ALSA: seq: Don't leak the extension cell pointer in the bounce payload](https://agentprime.io/advisories/CVE-2026-90220.md)
  `CVE-2026-90220` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/cxgb4: Free debugfs on registration failure](https://agentprime.io/advisories/CVE-2026-90219.md)
  `CVE-2026-90219` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/cma: Fix WARNING in res_to_rt](https://agentprime.io/advisories/CVE-2026-90218.md)
  `CVE-2026-90218` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Compare iterator types during state pruning](https://agentprime.io/advisories/CVE-2026-90217.md)
  `CVE-2026-90217` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [ubi: Fix rollback for explicit UBI device numbers](https://agentprime.io/advisories/CVE-2026-90216.md)
  `CVE-2026-90216` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [mtd: ubi: Release device reference on busy detach](https://agentprime.io/advisories/CVE-2026-90215.md)
  `CVE-2026-90215` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ASoC: xilinx: formatter_pcm: fix stream_data leak on open error](https://agentprime.io/advisories/CVE-2026-90214.md)
  `CVE-2026-90214` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firewire: core: fix memory leak in error path of build_tree()](https://agentprime.io/advisories/CVE-2026-90213.md)
  `CVE-2026-90213` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [arm64/efi: Avoid voluntary preemption with efi_mm installed](https://agentprime.io/advisories/CVE-2026-90212.md)
  `CVE-2026-90212` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf, s390: Clear fetch destination on faulting arena atomic](https://agentprime.io/advisories/CVE-2026-90211.md)
  `CVE-2026-90211` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure](https://agentprime.io/advisories/CVE-2026-90210.md)
  `CVE-2026-90210` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [s390/debug: Fix deadlock during unregister](https://agentprime.io/advisories/CVE-2026-90209.md)
  `CVE-2026-90209` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type](https://agentprime.io/advisories/CVE-2026-90208.md)
  `CVE-2026-90208` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ALSA: seq: midi: Serialize input teardown with event_input](https://agentprime.io/advisories/CVE-2026-90207.md)
  `CVE-2026-90207` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [nvmet: fix max_qid race between configfs and controller allocation](https://agentprime.io/advisories/CVE-2026-90206.md)
  `CVE-2026-90206` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ocfs2: validate orphan slot during inode read](https://agentprime.io/advisories/CVE-2026-90205.md)
  `CVE-2026-90205` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [ocfs2: validate DIO orphan slot during inode read](https://agentprime.io/advisories/CVE-2026-90204.md)
  `CVE-2026-90204` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [Squashfs: check block offset is not negative](https://agentprime.io/advisories/CVE-2026-90203.md)
  `CVE-2026-90203` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026
- [scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers](https://agentprime.io/advisories/CVE-2026-90202.md)
  `CVE-2026-90202` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [net: page_pool: fix UAF in \_\_page_pool_release_netmem_dma on xa_cmpxchg race](https://agentprime.io/advisories/CVE-2026-90201.md)
  `CVE-2026-90201` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [fs/ntfs3: fix integer overflow in MFT cluster validation](https://agentprime.io/advisories/CVE-2026-90200.md)
  `CVE-2026-90200` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [fs/ntfs3: reject out-of-range evcn in mi_enum_attr()](https://agentprime.io/advisories/CVE-2026-90199.md)
  `CVE-2026-90199` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [ALSA: core: Fix use-after-free in snd_card_do_free()](https://agentprime.io/advisories/CVE-2026-90198.md)
  `CVE-2026-90198` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [HID: haptic: don't write an uninitialized value to unhandled usages](https://agentprime.io/advisories/CVE-2026-90197.md)
  `CVE-2026-90197` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ASoC: SOF: validate topology volume range before allocation](https://agentprime.io/advisories/CVE-2026-90196.md)
  `CVE-2026-90196` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args](https://agentprime.io/advisories/CVE-2026-90195.md)
  `CVE-2026-90195` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ACPI: scan: fix bus ID cleanup on device_add() failures](https://agentprime.io/advisories/CVE-2026-90194.md)
  `CVE-2026-90194` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [mailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handler](https://agentprime.io/advisories/CVE-2026-90193.md)
  `CVE-2026-90193` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTE3VDE2OjA3OjEzLjY3MjAwMFoiLCJDVkUtMjAyNi05MDE5MyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTE3VDE2OjA3OjUzLjQzNTAwMFoiLCJDVkUtMjAyNi05MDI1MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTE3VDE2OjA3OjUzLjQzNTAwMFoiLCJDVkUtMjAyNi05MDI1MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.