# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [crash_dump: release keyring reference at the correct time](https://agentprime.io/advisories/CVE-2026-93106.md)
  `CVE-2026-93106` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [esp: do not unref managed frag pages in esp_ssg_unref()](https://agentprime.io/advisories/CVE-2026-93105.md)
  `CVE-2026-93105` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [RDMA/rvt: Return NULL after port allocation failure](https://agentprime.io/advisories/CVE-2026-93104.md)
  `CVE-2026-93104` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/hfi1: Preserve unit 0 on allocation failure](https://agentprime.io/advisories/CVE-2026-93103.md)
  `CVE-2026-93103` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [RDMA/hfi1: Free RX data on late probe failure](https://agentprime.io/advisories/CVE-2026-93102.md)
  `CVE-2026-93102` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [media: v4l2-async: Unregister sub-device if asc_list is empty](https://agentprime.io/advisories/CVE-2026-93101.md)
  `CVE-2026-93101` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [fs/resctrl: Prevent use-after-free in rdtgroup_kn_put()](https://agentprime.io/advisories/CVE-2026-93100.md)
  `CVE-2026-93100` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [fs/resctrl: Fix UAF from worker threads when domains are removed](https://agentprime.io/advisories/CVE-2026-93099.md)
  `CVE-2026-93099` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [rpmsg: glink: fix deadlock in endpoint destroy during driver detach](https://agentprime.io/advisories/CVE-2026-93098.md)
  `CVE-2026-93098` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [cxl/mbox: Break poison list loop on an empty payload](https://agentprime.io/advisories/CVE-2026-93097.md)
  `CVE-2026-93097` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [cxl/features: Serialize multi-part Get/Set Feature transfers](https://agentprime.io/advisories/CVE-2026-93096.md)
  `CVE-2026-93096` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [hfsplus: validate thread record before delete key rebuild](https://agentprime.io/advisories/CVE-2026-93095.md)
  `CVE-2026-93095` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [wifi: ath12k: fix dp_link_peer dangling references on AP vdev rollback](https://agentprime.io/advisories/CVE-2026-93094.md)
  `CVE-2026-93094` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firmware: arm_scmi: Publish channel state before callbacks](https://agentprime.io/advisories/CVE-2026-93093.md)
  `CVE-2026-93093` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firmware: arm_scmi: Unregister device notifier before IDR teardown](https://agentprime.io/advisories/CVE-2026-93092.md)
  `CVE-2026-93092` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firmware: arm_scmi: Quiesce notifications before teardown](https://agentprime.io/advisories/CVE-2026-93091.md)
  `CVE-2026-93091` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firmware: arm_scmi: Clean up channels on setup failure](https://agentprime.io/advisories/CVE-2026-93090.md)
  `CVE-2026-93090` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firmware: arm_scmi: Free transport channel on IDR failure](https://agentprime.io/advisories/CVE-2026-93089.md)
  `CVE-2026-93089` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firmware: arm_scmi: Avoid IDR updates while cleaning channels](https://agentprime.io/advisories/CVE-2026-93086.md)
  `CVE-2026-93086` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firmware: arm_scmi: Reject out of range DT protocol IDs](https://agentprime.io/advisories/CVE-2026-93085.md)
  `CVE-2026-93085` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firmware: arm_scmi: Drop handle on protocol bind failures](https://agentprime.io/advisories/CVE-2026-93084.md)
  `CVE-2026-93084` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firmware: arm_scmi: Unwind TX receiver mailbox setup failure](https://agentprime.io/advisories/CVE-2026-93083.md)
  `CVE-2026-93083` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firmware: arm_scmi: Unwind P2A receiver mailbox setup failure](https://agentprime.io/advisories/CVE-2026-93082.md)
  `CVE-2026-93082` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firmware: arm_scmi: Fix SCMI device destroy lifetimes](https://agentprime.io/advisories/CVE-2026-93081.md)
  `CVE-2026-93081` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [firmware: arm_scmi: Fix transport device teardown lookup](https://agentprime.io/advisories/CVE-2026-93080.md)
  `CVE-2026-93080` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [cxl/features: Reject Get Feature count larger than the output buffer](https://agentprime.io/advisories/CVE-2026-93079.md)
  `CVE-2026-93079` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [cxl/features: Reject Set Features output buffer smaller than the header](https://agentprime.io/advisories/CVE-2026-93078.md)
  `CVE-2026-93078` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [cxl/features: Clamp Get Feature output size to the remaining buffer](https://agentprime.io/advisories/CVE-2026-93077.md)
  `CVE-2026-93077` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [dax/fsdev: clear vmemmap_shift when binding static pgmap](https://agentprime.io/advisories/CVE-2026-93076.md)
  `CVE-2026-93076` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [dax/fsdev: clear pgmap ops and owner on unbind](https://agentprime.io/advisories/CVE-2026-93075.md)
  `CVE-2026-93075` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [dax/fsdev: use \_\_va(phys) for kaddr in direct_access](https://agentprime.io/advisories/CVE-2026-93074.md)
  `CVE-2026-93074` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [dax: read holder_ops once in dax_holder_notify_failure()](https://agentprime.io/advisories/CVE-2026-93073.md)
  `CVE-2026-93073` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [irqchip/renesas-irqc: Fix generic interrupt chip leak on remove](https://agentprime.io/advisories/CVE-2026-93072.md)
  `CVE-2026-93072` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [media: bcm2835-unicam: Fix asc leaked in error/remove path](https://agentprime.io/advisories/CVE-2026-93071.md)
  `CVE-2026-93071` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [media: ipu6: Do not free aux device pdata after init](https://agentprime.io/advisories/CVE-2026-93070.md)
  `CVE-2026-93070` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026
- [OPP: Fix cleanup ordering](https://agentprime.io/advisories/CVE-2026-93069.md)
  `CVE-2026-93069` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [drm/amd/display: Fix DM I2C teardown race](https://agentprime.io/advisories/CVE-2026-93068.md)
  `CVE-2026-93068` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [drm/bridge: tc358767: clamp the reported AUX read size to the request](https://agentprime.io/advisories/CVE-2026-93067.md)
  `CVE-2026-93067` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [x86/mm/pat: Take cpa_lock around large-page collapse](https://agentprime.io/advisories/CVE-2026-93066.md)
  `CVE-2026-93066` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs](https://agentprime.io/advisories/CVE-2026-93065.md)
  `CVE-2026-93065` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser](https://agentprime.io/advisories/CVE-2026-93064.md)
  `CVE-2026-93064` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [wifi: iwlwifi: mei: check SAP message length before reading it](https://agentprime.io/advisories/CVE-2026-93063.md)
  `CVE-2026-93063` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 17 Sept 2026
- [wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments](https://agentprime.io/advisories/CVE-2026-93062.md)
  `CVE-2026-93062` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [gpu: host1x: Avoid stack over-read in debug output helpers](https://agentprime.io/advisories/CVE-2026-93061.md)
  `CVE-2026-93061` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [drm/msm/adreno: fix use after free on error path in a6xx_gpu_init()](https://agentprime.io/advisories/CVE-2026-93060.md)
  `CVE-2026-93060` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [drm/msm: Fix task_struct reference leak in recover_worker](https://agentprime.io/advisories/CVE-2026-93059.md)
  `CVE-2026-93059` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [drm/msm: Only fini scheduler after successful init](https://agentprime.io/advisories/CVE-2026-93058.md)
  `CVE-2026-93058` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [scsi: ufs: core: Avoid possible memory reclaim deadlock in TX EQTR context](https://agentprime.io/advisories/CVE-2026-93057.md)
  `CVE-2026-93057` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [usb: gadget: f_uac1_legacy: remove broken string configfs attributes](https://agentprime.io/advisories/CVE-2026-93056.md)
  `CVE-2026-93056` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [UDF symlink pathComponent header OOB read](https://agentprime.io/advisories/CVE-2026-93055.md)
  `CVE-2026-93055` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [uio: Fix stale info pointer in failed registration path](https://agentprime.io/advisories/CVE-2026-93054.md)
  `CVE-2026-93054` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 17 Sept 2026
- [speakup: keyhelp: guard letter_offsets possible out-of-range indexing](https://agentprime.io/advisories/CVE-2026-93053.md)
  `CVE-2026-93053` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [misc: bcm-vk: Use acquire/release for msgq_inited](https://agentprime.io/advisories/CVE-2026-93052.md)
  `CVE-2026-93052` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [misc: ad525x_dpot: use driver core groups for sysfs files](https://agentprime.io/advisories/CVE-2026-93051.md)
  `CVE-2026-93051` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove](https://agentprime.io/advisories/CVE-2026-93050.md)
  `CVE-2026-93050` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [mtd: mtdswap: Avoid freeing registered blktrans device twice](https://agentprime.io/advisories/CVE-2026-93049.md)
  `CVE-2026-93049` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition()](https://agentprime.io/advisories/CVE-2026-93048.md)
  `CVE-2026-93048` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [drm/v3d: Associate BOs with every job that accesses them](https://agentprime.io/advisories/CVE-2026-93047.md)
  `CVE-2026-93047` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 17 Sept 2026
- [software node: Fix software_node_get_reference_args() with index -1](https://agentprime.io/advisories/CVE-2026-93046.md)
  `CVE-2026-93046` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 17 Sept 2026
- [bpf: Reject arena frees below the arena base](https://agentprime.io/advisories/CVE-2026-93045.md)
  `CVE-2026-93045` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTE3VDE2OjEwOjM2Ljk4ODAwMFoiLCJDVkUtMjAyNi05MzA0NSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTE3VDE2OjExOjE3Ljc5MTAwMFoiLCJDVkUtMjAyNi05MzEwNyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTE3VDE2OjExOjE3Ljc5MTAwMFoiLCJDVkUtMjAyNi05MzEwNyJd>. Everything for agents: <https://agentprime.io/llms.txt>.