# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear](https://agentprime.io/advisories/CVE-2026-90373.md)
  `CVE-2026-90373` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss](https://agentprime.io/advisories/CVE-2026-90372.md)
  `CVE-2026-90372` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: fix RXDMAD_C buffer recycling race](https://agentprime.io/advisories/CVE-2026-90371.md)
  `CVE-2026-90371` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config](https://agentprime.io/advisories/CVE-2026-90370.md)
  `CVE-2026-90370` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: fix out-of-bounds access in mmio copy helpers](https://agentprime.io/advisories/CVE-2026-90369.md)
  `CVE-2026-90369` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt7915: unwind state on add_interface failure](https://agentprime.io/advisories/CVE-2026-90368.md)
  `CVE-2026-90368` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER](https://agentprime.io/advisories/CVE-2026-90367.md)
  `CVE-2026-90367` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV](https://agentprime.io/advisories/CVE-2026-90366.md)
  `CVE-2026-90366` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: cancel reset and rc work on device unregister](https://agentprime.io/advisories/CVE-2026-90365.md)
  `CVE-2026-90365` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ACPI: processor: Unregister cpufreq notifier on init failure](https://agentprime.io/advisories/CVE-2026-90364.md)
  `CVE-2026-90364` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [drm/msm: don't tear down KMS twice when KMS init fails](https://agentprime.io/advisories/CVE-2026-90363.md)
  `CVE-2026-90363` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [drm/msm/dsi: Drop dev_pm_opp_set_rate(0)](https://agentprime.io/advisories/CVE-2026-90362.md)
  `CVE-2026-90362` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: ath11k: fix leak in ath11k_service_ready_ext_event()](https://agentprime.io/advisories/CVE-2026-90361.md)
  `CVE-2026-90361` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [regulator: core: use system_freezable_wq for init complete work](https://agentprime.io/advisories/CVE-2026-90360.md)
  `CVE-2026-90360` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Reject >8 byte return values on return-reading trampoline paths](https://agentprime.io/advisories/CVE-2026-90359.md)
  `CVE-2026-90359` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf, x86: Fix trampoline stack size for 128-bit arguments](https://agentprime.io/advisories/CVE-2026-90358.md)
  `CVE-2026-90358` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement](https://agentprime.io/advisories/CVE-2026-90357.md)
  `CVE-2026-90357` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt7996: free vif links after clearing wcid entries on full reset](https://agentprime.io/advisories/CVE-2026-90356.md)
  `CVE-2026-90356` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt7996: clear stale link state on full reset](https://agentprime.io/advisories/CVE-2026-90355.md)
  `CVE-2026-90355` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt7915: fix double hif2 init on the non-WED path](https://agentprime.io/advisories/CVE-2026-90354.md)
  `CVE-2026-90354` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt7915: fix ext PHY use-after-free on register error path](https://agentprime.io/advisories/CVE-2026-90353.md)
  `CVE-2026-90353` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt7915: release hif2 reference on probe IRQ failure](https://agentprime.io/advisories/CVE-2026-90352.md)
  `CVE-2026-90352` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed](https://agentprime.io/advisories/CVE-2026-90351.md)
  `CVE-2026-90351` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: reject out-of-range link ids in mt76_vif_link()](https://agentprime.io/advisories/CVE-2026-90350.md)
  `CVE-2026-90350` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt7996: fix out-of-bounds link array access in mt7996_tx()](https://agentprime.io/advisories/CVE-2026-90349.md)
  `CVE-2026-90349` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump](https://agentprime.io/advisories/CVE-2026-90348.md)
  `CVE-2026-90348` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry](https://agentprime.io/advisories/CVE-2026-90347.md)
  `CVE-2026-90347` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 17 Sept 2026
- [wifi: nl80211: clean up color-change beacon data on errors](https://agentprime.io/advisories/CVE-2026-90346.md)
  `CVE-2026-90346` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: brcmfmac: fix P2P action frame handling without device vif](https://agentprime.io/advisories/CVE-2026-90345.md)
  `CVE-2026-90345` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mac80211: disconnect on CSA to channel 0](https://agentprime.io/advisories/CVE-2026-90344.md)
  `CVE-2026-90344` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: cfg80211: stop PMSR before P2P and NAN teardown](https://agentprime.io/advisories/CVE-2026-90343.md)
  `CVE-2026-90343` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [bpf: Fix mmap_lock deadlock on arena lock failure](https://agentprime.io/advisories/CVE-2026-90342.md)
  `CVE-2026-90342` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firmware: coreboot: Validate table bounds](https://agentprime.io/advisories/CVE-2026-90341.md)
  `CVE-2026-90341` · CVE record: Linux Linux · CVSS 7.7 High · Not analysed yet · Published 17 Sept 2026
- [pinctrl: generic: free maps on pinctrl_generic_to_map() failure](https://agentprime.io/advisories/CVE-2026-90340.md)
  `CVE-2026-90340` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [powerpc/syscall: Fix syscall skip handling for seccomp and ptrace](https://agentprime.io/advisories/CVE-2026-90339.md)
  `CVE-2026-90339` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [serial: amba-pl011: keep console clock enabled for atomic writes](https://agentprime.io/advisories/CVE-2026-90338.md)
  `CVE-2026-90338` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [serial: core: do fallible allocations before the console can be registered](https://agentprime.io/advisories/CVE-2026-90337.md)
  `CVE-2026-90337` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [serial: core: clear freed pointers on uart_register_driver() failure](https://agentprime.io/advisories/CVE-2026-90336.md)
  `CVE-2026-90336` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [tty: skip cdev_del() when no cdev is registered](https://agentprime.io/advisories/CVE-2026-90335.md)
  `CVE-2026-90335` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [tty: clear cdev pointer after cdev_add() failure](https://agentprime.io/advisories/CVE-2026-90334.md)
  `CVE-2026-90334` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [dm-integrity: replace forgeable discard filler with a keyed sector marker](https://agentprime.io/advisories/CVE-2026-90333.md)
  `CVE-2026-90333` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [PCI: dwc: ep: Flush cached MSI write before unmapping the iATU](https://agentprime.io/advisories/CVE-2026-90332.md)
  `CVE-2026-90332` · CVE record: Linux Linux · CVSS 8.2 High · Not analysed yet · Published 17 Sept 2026
- [HID: asus: refactor the two workqueues and init sequence](https://agentprime.io/advisories/CVE-2026-90331.md)
  `CVE-2026-90331` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [HID: logitech-hidpp: Fix FF device cleanup on init failure](https://agentprime.io/advisories/CVE-2026-90330.md)
  `CVE-2026-90330` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [HID: synchronize input before cleaning up a failed probe](https://agentprime.io/advisories/CVE-2026-90329.md)
  `CVE-2026-90329` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026
- [HID: steam: Reject short reads](https://agentprime.io/advisories/CVE-2026-90328.md)
  `CVE-2026-90328` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [phonet: pep: do not write beyond optlen in getsockopt](https://agentprime.io/advisories/CVE-2026-90327.md)
  `CVE-2026-90327` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [blk-cgroup: fix race between policy activation and blkg destruction](https://agentprime.io/advisories/CVE-2026-90326.md)
  `CVE-2026-90326` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [blk-cgroup: skip dying blkg in blkcg_activate_policy()](https://agentprime.io/advisories/CVE-2026-90325.md)
  `CVE-2026-90325` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [ublk: check import_ubuf() return value](https://agentprime.io/advisories/CVE-2026-90324.md)
  `CVE-2026-90324` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [ublk: validate auto buf reg before taking uring_cmd](https://agentprime.io/advisories/CVE-2026-90323.md)
  `CVE-2026-90323` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ocfs2/cluster: keep heartbeat local node stable](https://agentprime.io/advisories/CVE-2026-90322.md)
  `CVE-2026-90322` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ocfs2: validate inline xattrs during inode block validation](https://agentprime.io/advisories/CVE-2026-90321.md)
  `CVE-2026-90321` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [ocfs2: validate external xattr entries when reading metadata](https://agentprime.io/advisories/CVE-2026-90320.md)
  `CVE-2026-90320` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [rapidio: clear mport->net when rio_add_net() fails](https://agentprime.io/advisories/CVE-2026-90319.md)
  `CVE-2026-90319` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [fat: release buffer head after rebuilding parent](https://agentprime.io/advisories/CVE-2026-90318.md)
  `CVE-2026-90318` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Invalidate RCU pointers after final spin unlock](https://agentprime.io/advisories/CVE-2026-90317.md)
  `CVE-2026-90317` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [drm/omap: dsi: Do not copy isr table](https://agentprime.io/advisories/CVE-2026-90316.md)
  `CVE-2026-90316` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers](https://agentprime.io/advisories/CVE-2026-90315.md)
  `CVE-2026-90315` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry()](https://agentprime.io/advisories/CVE-2026-90314.md)
  `CVE-2026-90314` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTE3VDE2OjA4OjMzLjU2ODAwMFoiLCJDVkUtMjAyNi05MDMxNCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTE3VDE2OjA5OjE0LjA2NzAwMFoiLCJDVkUtMjAyNi05MDM3NCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTE3VDE2OjA5OjE0LjA2NzAwMFoiLCJDVkUtMjAyNi05MDM3NCJd>. Everything for agents: <https://agentprime.io/llms.txt>.