# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [svcrdma: Reject Read lists that exceed the page budget](https://agentprime.io/advisories/CVE-2026-89528.md)
  `CVE-2026-89528` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [svcrdma: Use svc_xprt_put to free listener on create failure](https://agentprime.io/advisories/CVE-2026-89527.md)
  `CVE-2026-89527` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [svcrdma: Validate Read chunk positions before reconstruction](https://agentprime.io/advisories/CVE-2026-89526.md)
  `CVE-2026-89526` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [udf: reject VAT indexes equal to the entry count](https://agentprime.io/advisories/CVE-2026-89525.md)
  `CVE-2026-89525` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets](https://agentprime.io/advisories/CVE-2026-89524.md)
  `CVE-2026-89524` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 11 Sept 2026
- [wifi: mt76: mt7925: cancel pending mlo_pm_work](https://agentprime.io/advisories/CVE-2026-89523.md)
  `CVE-2026-89523` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [media: staging/ipu7: fix async notifier UAF on probe error path](https://agentprime.io/advisories/CVE-2026-89522.md)
  `CVE-2026-89522` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [sched/core: Handle pick_task() releasing the rq lock](https://agentprime.io/advisories/CVE-2026-89521.md)
  `CVE-2026-89521` · CVE record: Linux Linux · CVSS 7.3 High · Not analysed yet · Published 11 Sept 2026
- [sched/core: Make core-sched flips wait for in-flight selections](https://agentprime.io/advisories/CVE-2026-89520.md)
  `CVE-2026-89520` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return](https://agentprime.io/advisories/CVE-2026-89519.md)
  `CVE-2026-89519` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [sched_ext: Fix this_rq() assumptions in dispatch kfuncs](https://agentprime.io/advisories/CVE-2026-89518.md)
  `CVE-2026-89518` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [sched_ext: Fix rq->core_pick corruption under core scheduling](https://agentprime.io/advisories/CVE-2026-89517.md)
  `CVE-2026-89517` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [sched_ext: Don't BUG_ON a destroyed DSQ in process_deferred_reenq_users](https://agentprime.io/advisories/CVE-2026-89516.md)
  `CVE-2026-89516` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables()](https://agentprime.io/advisories/CVE-2026-89515.md)
  `CVE-2026-89515` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock](https://agentprime.io/advisories/CVE-2026-89514.md)
  `CVE-2026-89514` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [RISC-V: KVM: Fix PMU event info array size overflow](https://agentprime.io/advisories/CVE-2026-89513.md)
  `CVE-2026-89513` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026
- [remoteproc: scp: Fix device reference leak on failed lookup](https://agentprime.io/advisories/CVE-2026-89512.md)
  `CVE-2026-89512` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [qede: Fix NULL pointer dereference in TPA fragment processing](https://agentprime.io/advisories/CVE-2026-89511.md)
  `CVE-2026-89511` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [RDMA/cxgb4: Cancel reg_work before freeing device on remove](https://agentprime.io/advisories/CVE-2026-89510.md)
  `CVE-2026-89510` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [RDMA/ionic: Embed counter driver data in rdma_counter allocation](https://agentprime.io/advisories/CVE-2026-89509.md)
  `CVE-2026-89509` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [RDMA/ucma: Lock the handler in ucma_set_ib_path()](https://agentprime.io/advisories/CVE-2026-89508.md)
  `CVE-2026-89508` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [RDMA/ucma: Lock the handler in ucma_write_cm_event()](https://agentprime.io/advisories/CVE-2026-89507.md)
  `CVE-2026-89507` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR](https://agentprime.io/advisories/CVE-2026-89506.md)
  `CVE-2026-89506` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [RDMA/uverbs: Guard legacy bundles without method_elm](https://agentprime.io/advisories/CVE-2026-89505.md)
  `CVE-2026-89505` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer](https://agentprime.io/advisories/CVE-2026-89504.md)
  `CVE-2026-89504` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026
- [ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page()](https://agentprime.io/advisories/CVE-2026-89503.md)
  `CVE-2026-89503` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [ring-buffer: Free cpu_buffer::free_page with subbuf_order](https://agentprime.io/advisories/CVE-2026-89502.md)
  `CVE-2026-89502` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ring-buffer: Hold cpu_buffer::lock when resizing a subbuf](https://agentprime.io/advisories/CVE-2026-89501.md)
  `CVE-2026-89501` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page](https://agentprime.io/advisories/CVE-2026-89500.md)
  `CVE-2026-89500` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [ring-buffer: Stop remote reader update when page swap fails](https://agentprime.io/advisories/CVE-2026-89499.md)
  `CVE-2026-89499` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [orangefs: fix double-free of trailer_buf on readdir copy failure](https://agentprime.io/advisories/CVE-2026-89498.md)
  `CVE-2026-89498` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [orangefs: skip leading spaces before parsing client debug masks](https://agentprime.io/advisories/CVE-2026-89497.md)
  `CVE-2026-89497` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [ocfs2: always run deallocs on copy-on-write completion](https://agentprime.io/advisories/CVE-2026-89496.md)
  `CVE-2026-89496` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ocfs2: bound namelen in dlm_migrate_request_handler](https://agentprime.io/advisories/CVE-2026-89495.md)
  `CVE-2026-89495` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [ocfs2: validate lengths in dlm_mig_lockres_handler](https://agentprime.io/advisories/CVE-2026-89494.md)
  `CVE-2026-89494` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [ocfs2: validate rl_used against rl_count in refcount block validator](https://agentprime.io/advisories/CVE-2026-89493.md)
  `CVE-2026-89493` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026
- [ocfs2: validate directory-index entry counts when reading metadata](https://agentprime.io/advisories/CVE-2026-89492.md)
  `CVE-2026-89492` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin()](https://agentprime.io/advisories/CVE-2026-89491.md)
  `CVE-2026-89491` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ocfs2: fix readdir position truncation on 32-bit kernels](https://agentprime.io/advisories/CVE-2026-89490.md)
  `CVE-2026-89490` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [openrisc: fix arbitrary kernel memory access via or1k_atomic syscall](https://agentprime.io/advisories/CVE-2026-89489.md)
  `CVE-2026-89489` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [openvswitch: Fix CT limit teardown use-after-free](https://agentprime.io/advisories/CVE-2026-89488.md)
  `CVE-2026-89488` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [openvswitch: only skb_tx_error() a packet we are about to drop](https://agentprime.io/advisories/CVE-2026-89487.md)
  `CVE-2026-89487` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [ipmi: Fix use-after-free of cmd_rcvr in \_ipmi_destroy_user()](https://agentprime.io/advisories/CVE-2026-89486.md)
  `CVE-2026-89486` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [lockd: pin next file across nlm_inspect_file lock-drop](https://agentprime.io/advisories/CVE-2026-89485.md)
  `CVE-2026-89485` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [lockd: fix NULL dereference on lockowner allocation failure](https://agentprime.io/advisories/CVE-2026-89484.md)
  `CVE-2026-89484` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [nvme: zero the discard fallback page](https://agentprime.io/advisories/CVE-2026-89483.md)
  `CVE-2026-89483` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone](https://agentprime.io/advisories/CVE-2026-89482.md)
  `CVE-2026-89482` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [nvme-tcp: fix host memory disclosure on R2T for a read command](https://agentprime.io/advisories/CVE-2026-89481.md)
  `CVE-2026-89481` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [nvme-tcp: reject a read that transferred too few bytes](https://agentprime.io/advisories/CVE-2026-89480.md)
  `CVE-2026-89480` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [sctp: stop processing a packet once its association is deleted](https://agentprime.io/advisories/CVE-2026-89479.md)
  `CVE-2026-89479` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [sctp: drop a chunk if its transport was removed](https://agentprime.io/advisories/CVE-2026-89478.md)
  `CVE-2026-89478` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [sctp: fix NULL deref on untransmitted RECONF completion](https://agentprime.io/advisories/CVE-2026-89477.md)
  `CVE-2026-89477` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [sctp: fix stream->outcnt underflow on duplicate RECONF responses](https://agentprime.io/advisories/CVE-2026-89476.md)
  `CVE-2026-89476` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [power: supply: bq24257: fix use-after-free on remove](https://agentprime.io/advisories/CVE-2026-89475.md)
  `CVE-2026-89475` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [power: supply: bq256xx: drain usb_work before freeing the charger](https://agentprime.io/advisories/CVE-2026-89474.md)
  `CVE-2026-89474` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [power: supply: bq25890: Fix power_supply reference leak](https://agentprime.io/advisories/CVE-2026-89473.md)
  `CVE-2026-89473` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [power: supply: charger-manager: register regulators before exposing sysfs](https://agentprime.io/advisories/CVE-2026-89472.md)
  `CVE-2026-89472` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [power: supply: cros_usbpd-charger: bound the EC-reported port count](https://agentprime.io/advisories/CVE-2026-89471.md)
  `CVE-2026-89471` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026
- [power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS](https://agentprime.io/advisories/CVE-2026-89470.md)
  `CVE-2026-89470` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026
- [power: supply: lp8727: fix use-after-free in lp8727_release_irq()](https://agentprime.io/advisories/CVE-2026-89469.md)
  `CVE-2026-89469` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTExVDE5OjQzOjI4LjU2MDAwMFoiLCJDVkUtMjAyNi04OTQ2OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTExVDE5OjQ0OjA5LjI1OTAwMFoiLCJDVkUtMjAyNi04OTUyOSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTExVDE5OjQ0OjA5LjI1OTAwMFoiLCJDVkUtMjAyNi04OTUyOSJd>. Everything for agents: <https://agentprime.io/llms.txt>.