# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [spi: oc-tiny: switch to managed controller allocation](https://agentprime.io/advisories/CVE-2026-90433.md)
  `CVE-2026-90433` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [sched_ext: Abort directly from the hardlockup handler](https://agentprime.io/advisories/CVE-2026-90432.md)
  `CVE-2026-90432` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [remoteproc: Prevent crash handling to race with rproc_del()](https://agentprime.io/advisories/CVE-2026-90431.md)
  `CVE-2026-90431` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized](https://agentprime.io/advisories/CVE-2026-90430.md)
  `CVE-2026-90430` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init](https://agentprime.io/advisories/CVE-2026-90429.md)
  `CVE-2026-90429` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs](https://agentprime.io/advisories/CVE-2026-90428.md)
  `CVE-2026-90428` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc()](https://agentprime.io/advisories/CVE-2026-90427.md)
  `CVE-2026-90427` · CVE record: Linux Linux · CVSS 7.4 High · Not analysed yet · Published 17 Sept 2026
- [iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs](https://agentprime.io/advisories/CVE-2026-90426.md)
  `CVE-2026-90426` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID](https://agentprime.io/advisories/CVE-2026-90425.md)
  `CVE-2026-90425` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026
- [iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path](https://agentprime.io/advisories/CVE-2026-90424.md)
  `CVE-2026-90424` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/rxe: Fix UAF in ODP init error-handling path](https://agentprime.io/advisories/CVE-2026-90423.md)
  `CVE-2026-90423` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path](https://agentprime.io/advisories/CVE-2026-90422.md)
  `CVE-2026-90422` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [PCI: Fix UAF when probe runs concurrent to dyn ID removal](https://agentprime.io/advisories/CVE-2026-90421.md)
  `CVE-2026-90421` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [nilfs2: fix infinite loop in nilfs_clean_segments()](https://agentprime.io/advisories/CVE-2026-90420.md)
  `CVE-2026-90420` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [nilfs2: prevent out-of-bounds read in super root block parsing](https://agentprime.io/advisories/CVE-2026-90419.md)
  `CVE-2026-90419` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026
- [nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch](https://agentprime.io/advisories/CVE-2026-90418.md)
  `CVE-2026-90418` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()](https://agentprime.io/advisories/CVE-2026-90417.md)
  `CVE-2026-90417` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs](https://agentprime.io/advisories/CVE-2026-90416.md)
  `CVE-2026-90416` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/cxgb4: free STAG index when TPT entry write fails](https://agentprime.io/advisories/CVE-2026-90415.md)
  `CVE-2026-90415` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [IB/isert: reject PDUs declaring more data than was received](https://agentprime.io/advisories/CVE-2026-90414.md)
  `CVE-2026-90414` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [IB/isert: reject login PDUs declaring more data than was received](https://agentprime.io/advisories/CVE-2026-90413.md)
  `CVE-2026-90413` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [nvmet: fix return status of RMI log page on allocation failure](https://agentprime.io/advisories/CVE-2026-90412.md)
  `CVE-2026-90412` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request](https://agentprime.io/advisories/CVE-2026-90411.md)
  `CVE-2026-90411` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [spi: davinci: switch to managed controller allocation](https://agentprime.io/advisories/CVE-2026-90410.md)
  `CVE-2026-90410` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [drm/panthor: Add vm_bind region with kbo range overlap check](https://agentprime.io/advisories/CVE-2026-90409.md)
  `CVE-2026-90409` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event()](https://agentprime.io/advisories/CVE-2026-90408.md)
  `CVE-2026-90408` · CVE record: Linux Linux · CVSS 7.7 High · Not analysed yet · Published 17 Sept 2026
- [wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event()](https://agentprime.io/advisories/CVE-2026-90407.md)
  `CVE-2026-90407` · CVE record: Linux Linux · CVSS 7.7 High · Not analysed yet · Published 17 Sept 2026
- [media: qcom: iris: handle runtime PM resume failure in core deinit](https://agentprime.io/advisories/CVE-2026-90406.md)
  `CVE-2026-90406` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [media: stm32: dcmi: fix some error handling bugs in probe()](https://agentprime.io/advisories/CVE-2026-90405.md)
  `CVE-2026-90405` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [platform/chrome: cros_ec_debugfs: Unregister panic notifier](https://agentprime.io/advisories/CVE-2026-90404.md)
  `CVE-2026-90404` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: rtlwifi: pci: fix error path in rtl_pci_probe()](https://agentprime.io/advisories/CVE-2026-90403.md)
  `CVE-2026-90403` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 17 Sept 2026
- [bus: mhi: host: Fix controller cleanup on EDL sysfs failure](https://agentprime.io/advisories/CVE-2026-90402.md)
  `CVE-2026-90402` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 17 Sept 2026
- [md: remove REQ_NOWAIT support from raid1/10/456](https://agentprime.io/advisories/CVE-2026-90401.md)
  `CVE-2026-90401` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026
- [md: recheck spare changes before starting sync](https://agentprime.io/advisories/CVE-2026-90400.md)
  `CVE-2026-90400` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: ath12k: fix stride mismatch in mac_phy_caps_parse()](https://agentprime.io/advisories/CVE-2026-90399.md)
  `CVE-2026-90399` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 17 Sept 2026
- [wifi: ath11k: fix stride mismatch in mac_phy_caps_parse()](https://agentprime.io/advisories/CVE-2026-90398.md)
  `CVE-2026-90398` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 17 Sept 2026
- [firmware: qcom: scm: Fix NULL dereference in IRQ handler before \_\_scm is published](https://agentprime.io/advisories/CVE-2026-90397.md)
  `CVE-2026-90397` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [block: fix dio leak on metadata mapping error](https://agentprime.io/advisories/CVE-2026-90396.md)
  `CVE-2026-90396` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [power: supply: isp1704_charger: cancel work on remove](https://agentprime.io/advisories/CVE-2026-90395.md)
  `CVE-2026-90395` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [power: supply: sc2731_charger: cancel work on remove](https://agentprime.io/advisories/CVE-2026-90394.md)
  `CVE-2026-90394` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Fix potential UAF in bpf_netns_link_update_prog](https://agentprime.io/advisories/CVE-2026-90393.md)
  `CVE-2026-90393` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Fix potential UAF when reading bpf link info](https://agentprime.io/advisories/CVE-2026-90392.md)
  `CVE-2026-90392` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone](https://agentprime.io/advisories/CVE-2026-90391.md)
  `CVE-2026-90391` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [md/bitmap: resume array on backlog_store() error path](https://agentprime.io/advisories/CVE-2026-90390.md)
  `CVE-2026-90390` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [md: scope memalloc_noio to allocation critical sections](https://agentprime.io/advisories/CVE-2026-90389.md)
  `CVE-2026-90389` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [iommu/dma: Check atomic pool allocation result directly](https://agentprime.io/advisories/CVE-2026-90388.md)
  `CVE-2026-90388` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [swiotlb: Preserve allocation virtual address for dynamic pools](https://agentprime.io/advisories/CVE-2026-90387.md)
  `CVE-2026-90387` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices](https://agentprime.io/advisories/CVE-2026-90386.md)
  `CVE-2026-90386` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [md/raid1: create serial pool adding rdev to array with serialize_policy=1](https://agentprime.io/advisories/CVE-2026-90385.md)
  `CVE-2026-90385` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [iomap: release the folio batch on iomap callback failures](https://agentprime.io/advisories/CVE-2026-90384.md)
  `CVE-2026-90384` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [misc: sgi-gru: remove interrupt-context page-table walks](https://agentprime.io/advisories/CVE-2026-90383.md)
  `CVE-2026-90383` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length](https://agentprime.io/advisories/CVE-2026-90382.md)
  `CVE-2026-90382` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()](https://agentprime.io/advisories/CVE-2026-90381.md)
  `CVE-2026-90381` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete](https://agentprime.io/advisories/CVE-2026-90380.md)
  `CVE-2026-90380` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash](https://agentprime.io/advisories/CVE-2026-90379.md)
  `CVE-2026-90379` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt792x: Fix memory leak in SDIO TX path](https://agentprime.io/advisories/CVE-2026-90378.md)
  `CVE-2026-90378` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: fix RX data queuing of RRO 3.0](https://agentprime.io/advisories/CVE-2026-90377.md)
  `CVE-2026-90377` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP](https://agentprime.io/advisories/CVE-2026-90376.md)
  `CVE-2026-90376` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: fix non-AQL packet accounting for MLO stations](https://agentprime.io/advisories/CVE-2026-90375.md)
  `CVE-2026-90375` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: mt76: mt7996: validate RX band_idx before dereferencing phys\[\]](https://agentprime.io/advisories/CVE-2026-90374.md)
  `CVE-2026-90374` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTE3VDE2OjA5OjE0LjA2NzAwMFoiLCJDVkUtMjAyNi05MDM3NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTE3VDE2OjA5OjUzLjcxNjAwMFoiLCJDVkUtMjAyNi05MDQzNCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTE3VDE2OjA5OjUzLjcxNjAwMFoiLCJDVkUtMjAyNi05MDQzNCJd>. Everything for agents: <https://agentprime.io/llms.txt>.