# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [bpf, cgroup: Fix invalid storage access after \_\_cgroup_bpf_attach failed](https://agentprime.io/advisories/CVE-2026-90313.md)
  `CVE-2026-90313` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Check load-acquire src ptr type before the load](https://agentprime.io/advisories/CVE-2026-90312.md)
  `CVE-2026-90312` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [thermal: hwmon: Remove hwmon class device along with its parent](https://agentprime.io/advisories/CVE-2026-90311.md)
  `CVE-2026-90311` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/erdma: Hold CQ references when processing EQ events](https://agentprime.io/advisories/CVE-2026-90309.md)
  `CVE-2026-90309` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [RDMA/erdma: Hold QP references for AE and CM processing](https://agentprime.io/advisories/CVE-2026-90308.md)
  `CVE-2026-90308` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ](https://agentprime.io/advisories/CVE-2026-90307.md)
  `CVE-2026-90307` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ARM: 9481/2: breakpoint: CFI breakpoints only on demand](https://agentprime.io/advisories/CVE-2026-90306.md)
  `CVE-2026-90306` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ARM: 9483/1: select HAVE_POSIX_CPU_TIMERS_TASK_WORK](https://agentprime.io/advisories/CVE-2026-90305.md)
  `CVE-2026-90305` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ARM: 9484/1: enable interrupts when unhandled user faults are triggered](https://agentprime.io/advisories/CVE-2026-90304.md)
  `CVE-2026-90304` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults](https://agentprime.io/advisories/CVE-2026-90303.md)
  `CVE-2026-90303` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ocfs2: synchronize heartbeat callbacks with o2net teardown](https://agentprime.io/advisories/CVE-2026-90302.md)
  `CVE-2026-90302` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ocfs2: o2hb: quiesce negotiate handlers and timeout work](https://agentprime.io/advisories/CVE-2026-90301.md)
  `CVE-2026-90301` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 17 Sept 2026
- [bpf: Clear buf on error in \_\_bpf_get_task_stack](https://agentprime.io/advisories/CVE-2026-90300.md)
  `CVE-2026-90300` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Fix sleepable check for tracing/lsm prog](https://agentprime.io/advisories/CVE-2026-90299.md)
  `CVE-2026-90299` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [drm/sun4i: tcon: Drop TCON TOP device reference](https://agentprime.io/advisories/CVE-2026-90298.md)
  `CVE-2026-90298` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [drm/sun4i: crtc: Propagate layer initialization error](https://agentprime.io/advisories/CVE-2026-90297.md)
  `CVE-2026-90297` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [cpufreq: imx6q: fix devres accumulation across driver rebind](https://agentprime.io/advisories/CVE-2026-90296.md)
  `CVE-2026-90296` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [cpufreq: imx6q: fix out-of-bounds write when probed more than once](https://agentprime.io/advisories/CVE-2026-90295.md)
  `CVE-2026-90295` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [IB/isert: delay the final Login Response until the session is registered](https://agentprime.io/advisories/CVE-2026-90294.md)
  `CVE-2026-90294` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026
- [IB/isert: post the full-feature receive buffers after session registration](https://agentprime.io/advisories/CVE-2026-90293.md)
  `CVE-2026-90293` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026
- [RDMA/siw: Fix use-after-free in siw_accept()](https://agentprime.io/advisories/CVE-2026-90292.md)
  `CVE-2026-90292` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [module/dups: Fix use-after-free in kmod_dup_req lifetime handling](https://agentprime.io/advisories/CVE-2026-90291.md)
  `CVE-2026-90291` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [arm64: hibernate: Restore DAIF state on error](https://agentprime.io/advisories/CVE-2026-90290.md)
  `CVE-2026-90290` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [drm/amd/display: Resize MST HDCP per-connector arrays to 32](https://agentprime.io/advisories/CVE-2026-90289.md)
  `CVE-2026-90289` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure](https://agentprime.io/advisories/CVE-2026-90288.md)
  `CVE-2026-90288` · CVE record: Linux Linux · CVSS 7.4 High · Not analysed yet · Published 17 Sept 2026
- [phy: sunplus: fix error handling in sp_uphy_init()](https://agentprime.io/advisories/CVE-2026-90287.md)
  `CVE-2026-90287` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [drm/amdgpu/gfx6: Use PFP on the compute queues too](https://agentprime.io/advisories/CVE-2026-90286.md)
  `CVE-2026-90286` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026
- [scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path](https://agentprime.io/advisories/CVE-2026-90285.md)
  `CVE-2026-90285` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firmware_loader: do not queue completed sysfs fallback requests](https://agentprime.io/advisories/CVE-2026-90284.md)
  `CVE-2026-90284` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [hugetlbfs: release subpool on fill_super failure](https://agentprime.io/advisories/CVE-2026-90283.md)
  `CVE-2026-90283` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend](https://agentprime.io/advisories/CVE-2026-90282.md)
  `CVE-2026-90282` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend](https://agentprime.io/advisories/CVE-2026-90281.md)
  `CVE-2026-90281` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend](https://agentprime.io/advisories/CVE-2026-90280.md)
  `CVE-2026-90280` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [md/raid5: round bitmap stripes with sector division](https://agentprime.io/advisories/CVE-2026-90279.md)
  `CVE-2026-90279` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [md: wait for behind writes before destroying bitmap](https://agentprime.io/advisories/CVE-2026-90278.md)
  `CVE-2026-90278` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [md/md-llbitmap: prevent create failure bitmap UAF](https://agentprime.io/advisories/CVE-2026-90277.md)
  `CVE-2026-90277` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [md/md-llbitmap: stop daemon timer rearm on destroy](https://agentprime.io/advisories/CVE-2026-90276.md)
  `CVE-2026-90276` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [md/raid1: don't set array_frozen in raid1_takeover()](https://agentprime.io/advisories/CVE-2026-90275.md)
  `CVE-2026-90275` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [coresight: etm4x: fix underflow for usage of (nrseqstate - 1)](https://agentprime.io/advisories/CVE-2026-90274.md)
  `CVE-2026-90274` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable](https://agentprime.io/advisories/CVE-2026-90273.md)
  `CVE-2026-90273` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [perf: arm_pmuv3: Zero initialize hw_id branch stack field](https://agentprime.io/advisories/CVE-2026-90272.md)
  `CVE-2026-90272` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt](https://agentprime.io/advisories/CVE-2026-90271.md)
  `CVE-2026-90271` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [arm_mpam: Disable driver unbind to avoid UAF](https://agentprime.io/advisories/CVE-2026-90270.md)
  `CVE-2026-90270` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Reject load-acquire from pointers requiring fault protection](https://agentprime.io/advisories/CVE-2026-90269.md)
  `CVE-2026-90269` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [scsi: sd: Fix error handling in sd_probe() after large pool creation failure](https://agentprime.io/advisories/CVE-2026-90268.md)
  `CVE-2026-90268` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 17 Sept 2026
- [scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails](https://agentprime.io/advisories/CVE-2026-90267.md)
  `CVE-2026-90267` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge](https://agentprime.io/advisories/CVE-2026-90266.md)
  `CVE-2026-90266` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [btrfs: defrag: fix deadlock between defrag and delalloc space reservation](https://agentprime.io/advisories/CVE-2026-90265.md)
  `CVE-2026-90265` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [btrfs: always wait for ordered extents to avoid OE races](https://agentprime.io/advisories/CVE-2026-90264.md)
  `CVE-2026-90264` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [btrfs: check if root is readonly when setting posix acl](https://agentprime.io/advisories/CVE-2026-90263.md)
  `CVE-2026-90263` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [btrfs: retry verity reads for not-uptodate Merkle folios](https://agentprime.io/advisories/CVE-2026-90262.md)
  `CVE-2026-90262` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [btrfs: zoned: flush active metadata block group at btree_writepages() start](https://agentprime.io/advisories/CVE-2026-90261.md)
  `CVE-2026-90261` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [btrfs: zoned: don't clobber the extent buffer when zeroing it out](https://agentprime.io/advisories/CVE-2026-90260.md)
  `CVE-2026-90260` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026
- [btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()](https://agentprime.io/advisories/CVE-2026-90259.md)
  `CVE-2026-90259` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [pinctrl: airoha: add missed IRQ resource helpers](https://agentprime.io/advisories/CVE-2026-90258.md)
  `CVE-2026-90258` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [Bluetooth: virtio_bt: avoid OOB read of build info string](https://agentprime.io/advisories/CVE-2026-90257.md)
  `CVE-2026-90257` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind](https://agentprime.io/advisories/CVE-2026-90256.md)
  `CVE-2026-90256` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026
- [Bluetooth: hci_conn: fix the SCO setup context lifetime](https://agentprime.io/advisories/CVE-2026-90255.md)
  `CVE-2026-90255` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026
- [Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths](https://agentprime.io/advisories/CVE-2026-90254.md)
  `CVE-2026-90254` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [Bluetooth: MGMT: free the mesh send cancel command when it is cancelled](https://agentprime.io/advisories/CVE-2026-90253.md)
  `CVE-2026-90253` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTE3VDE2OjA3OjUzLjQzNTAwMFoiLCJDVkUtMjAyNi05MDI1MyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTE3VDE2OjA4OjMzLjU2ODAwMFoiLCJDVkUtMjAyNi05MDMxNCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTE3VDE2OjA4OjMzLjU2ODAwMFoiLCJDVkUtMjAyNi05MDMxNCJd>. Everything for agents: <https://agentprime.io/llms.txt>.