# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [bpf: Disallow interpreter fallback for arena-related insns](https://agentprime.io/advisories/CVE-2026-93044.md)
  `CVE-2026-93044` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Disallow interpreter fallback for gotox insn](https://agentprime.io/advisories/CVE-2026-93043.md)
  `CVE-2026-93043` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [dmaengine: dw-edma: Terminate all descriptors without callbacks](https://agentprime.io/advisories/CVE-2026-93042.md)
  `CVE-2026-93042` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026
- [dmaengine: dw-edma: Serialize abort state updates](https://agentprime.io/advisories/CVE-2026-93041.md)
  `CVE-2026-93041` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [dmaengine: dw-edma: Serialize channel state checks](https://agentprime.io/advisories/CVE-2026-93040.md)
  `CVE-2026-93040` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ASoC: meson: Keep link pointers valid on realloc failure](https://agentprime.io/advisories/CVE-2026-93039.md)
  `CVE-2026-93039` · CVE record: Linux Linux · CVSS 7.4 High · Not analysed yet · Published 17 Sept 2026
- [iio: dac: ad5686: missing NULL check on match data](https://agentprime.io/advisories/CVE-2026-93038.md)
  `CVE-2026-93038` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/hfi1: Propagate sdma_txinit_ahg() errors](https://agentprime.io/advisories/CVE-2026-93037.md)
  `CVE-2026-93037` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge\[\]](https://agentprime.io/advisories/CVE-2026-92525.md)
  `CVE-2026-92525` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026
- [irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()](https://agentprime.io/advisories/CVE-2026-92524.md)
  `CVE-2026-92524` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/nldev: validate dynamic counter attribute length](https://agentprime.io/advisories/CVE-2026-92523.md)
  `CVE-2026-92523` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ACPI: processor: validate MADT IOAPIC entry bounds](https://agentprime.io/advisories/CVE-2026-92522.md)
  `CVE-2026-92522` · CVE record: Linux Linux · CVSS 7.3 High · Not analysed yet · Published 17 Sept 2026
- [ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root](https://agentprime.io/advisories/CVE-2026-92521.md)
  `CVE-2026-92521` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Zero queue and stack outputs on lock failure](https://agentprime.io/advisories/CVE-2026-92520.md)
  `CVE-2026-92520` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [riscv, bpf: Fix memory leak in bpf_jit_free](https://agentprime.io/advisories/CVE-2026-92519.md)
  `CVE-2026-92519` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [riscv, bpf: Fix kernel stack corruption in tailcall with CFI](https://agentprime.io/advisories/CVE-2026-92518.md)
  `CVE-2026-92518` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [bpf, riscv: Fix extable handling for arena load_acquire](https://agentprime.io/advisories/CVE-2026-92517.md)
  `CVE-2026-92517` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Fix offset warn check for bpf_res_spin_lock](https://agentprime.io/advisories/CVE-2026-92516.md)
  `CVE-2026-92516` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Preserve unique-field state across nested structs](https://agentprime.io/advisories/CVE-2026-92515.md)
  `CVE-2026-92515` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/erdma: Fix CEQ tasklet use-after-free on removal](https://agentprime.io/advisories/CVE-2026-92514.md)
  `CVE-2026-92514` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/mana_ib: drain QP references after partial table insertion](https://agentprime.io/advisories/CVE-2026-92513.md)
  `CVE-2026-92513` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/core: Fix use after free in ib_query_qp()](https://agentprime.io/advisories/CVE-2026-92512.md)
  `CVE-2026-92512` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/core: Fix potential use after free in ib_destroy_cq_user()](https://agentprime.io/advisories/CVE-2026-92511.md)
  `CVE-2026-92511` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [RDMA/core: Fix potential use after free in ib_destroy_srq_user()](https://agentprime.io/advisories/CVE-2026-92510.md)
  `CVE-2026-92510` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [RDMA/core: Fix potential use after free in counter_release()](https://agentprime.io/advisories/CVE-2026-92509.md)
  `CVE-2026-92509` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/core: Fix potential use after free in ib_free_cq()](https://agentprime.io/advisories/CVE-2026-92508.md)
  `CVE-2026-92508` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [RDMA/core: Fix potential use after free in ib_dealloc_pd_user()](https://agentprime.io/advisories/CVE-2026-92507.md)
  `CVE-2026-92507` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [firmware: arm_scmi: Fix requested device removal race](https://agentprime.io/advisories/CVE-2026-92506.md)
  `CVE-2026-92506` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [iommu/amd: Fix undefined behavior in devid_write debugfs function](https://agentprime.io/advisories/CVE-2026-92505.md)
  `CVE-2026-92505` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [thermal: intel: int3400: clean up ODVP on probe failures](https://agentprime.io/advisories/CVE-2026-92504.md)
  `CVE-2026-92504` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 17 Sept 2026
- [ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find()](https://agentprime.io/advisories/CVE-2026-92503.md)
  `CVE-2026-92503` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ext4: clear stale xarray tags on folios skipped during writeback](https://agentprime.io/advisories/CVE-2026-92502.md)
  `CVE-2026-92502` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ext4: drain in-flight DIO before buffered write fallback](https://agentprime.io/advisories/CVE-2026-92501.md)
  `CVE-2026-92501` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ext4: use fsdata to track inline data write state and fix race](https://agentprime.io/advisories/CVE-2026-92500.md)
  `CVE-2026-92500` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ext4: validate readdir offset before accessing dirent](https://agentprime.io/advisories/CVE-2026-92499.md)
  `CVE-2026-92499` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: ath6kl: avoid buffer overreads in WMI event handlers](https://agentprime.io/advisories/CVE-2026-92498.md)
  `CVE-2026-92498` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx()](https://agentprime.io/advisories/CVE-2026-92497.md)
  `CVE-2026-92497` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx()](https://agentprime.io/advisories/CVE-2026-92496.md)
  `CVE-2026-92496` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap](https://agentprime.io/advisories/CVE-2026-92495.md)
  `CVE-2026-92495` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ext4: fix buffer_head leak in ext4_init_orphan_info](https://agentprime.io/advisories/CVE-2026-92494.md)
  `CVE-2026-92494` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active](https://agentprime.io/advisories/CVE-2026-92493.md)
  `CVE-2026-92493` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [cpufreq/amd-pstate: handle missing policy in dynamic EPP callbacks](https://agentprime.io/advisories/CVE-2026-92492.md)
  `CVE-2026-92492` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firmware: arm_scmi: Roll back partial protocol table registration](https://agentprime.io/advisories/CVE-2026-92491.md)
  `CVE-2026-92491` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firmware: arm_scmi: Unrequest devices if driver registration fails](https://agentprime.io/advisories/CVE-2026-92490.md)
  `CVE-2026-92490` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [xfrm: Fix skb double-free in xfrm_dev_direct_output()](https://agentprime.io/advisories/CVE-2026-92489.md)
  `CVE-2026-92489` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [RDMA/erdma: complete object teardown when the destroy command fails](https://agentprime.io/advisories/CVE-2026-92488.md)
  `CVE-2026-92488` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 17 Sept 2026
- [exfat: fix valid_size extension over a shared writable mapping](https://agentprime.io/advisories/CVE-2026-92487.md)
  `CVE-2026-92487` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Fix CFI mismatch in task work callback](https://agentprime.io/advisories/CVE-2026-92486.md)
  `CVE-2026-92486` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [bpf: Fix WARNING in bpf_tracing_link_release](https://agentprime.io/advisories/CVE-2026-92485.md)
  `CVE-2026-92485` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [cxl/region: Fix use-after-free in find_pos_and_ways() error path](https://agentprime.io/advisories/CVE-2026-92484.md)
  `CVE-2026-92484` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [liveupdate: Remember FLB retrieve() status](https://agentprime.io/advisories/CVE-2026-92483.md)
  `CVE-2026-92483` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip](https://agentprime.io/advisories/CVE-2026-92482.md)
  `CVE-2026-92482` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [pinctrl: mediatek: free EINT resources on unbind](https://agentprime.io/advisories/CVE-2026-92481.md)
  `CVE-2026-92481` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [scsi: ufs: core: Validate string descriptors](https://agentprime.io/advisories/CVE-2026-92480.md)
  `CVE-2026-92480` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [scsi: ufs: Avoid NULL CQE dereference when reporting invalid tags](https://agentprime.io/advisories/CVE-2026-92479.md)
  `CVE-2026-92479` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [scsi: ufs: core: Validate connected lane counts](https://agentprime.io/advisories/CVE-2026-92478.md)
  `CVE-2026-92478` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [scsi: ufs: debugfs: Reserve space for a string terminator](https://agentprime.io/advisories/CVE-2026-92477.md)
  `CVE-2026-92477` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [crypto: keembay - Initialize completion before requesting IRQ](https://agentprime.io/advisories/CVE-2026-92476.md)
  `CVE-2026-92476` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/mlx5: Fix integer overflow of user QP buffer size](https://agentprime.io/advisories/CVE-2026-90435.md)
  `CVE-2026-90435` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [isofs: release zisofs block pointer buffer head](https://agentprime.io/advisories/CVE-2026-90434.md)
  `CVE-2026-90434` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTE3VDE2OjA5OjUzLjcxNjAwMFoiLCJDVkUtMjAyNi05MDQzNCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTE3VDE2OjEwOjM2Ljk4ODAwMFoiLCJDVkUtMjAyNi05MzA0NSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTE3VDE2OjEwOjM2Ljk4ODAwMFoiLCJDVkUtMjAyNi05MzA0NSJd>. Everything for agents: <https://agentprime.io/llms.txt>.