# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [ACPI: APEI: GHES: fix ARM section length accounting after header](https://agentprime.io/advisories/CVE-2026-89588.md)
  `CVE-2026-89588` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026
- [ACPI: pfr_update: fix stack buffer overflow in query_capability()](https://agentprime.io/advisories/CVE-2026-89587.md)
  `CVE-2026-89587` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes](https://agentprime.io/advisories/CVE-2026-89586.md)
  `CVE-2026-89586` · CVE record: Linux Linux · CVSS 8.2 High · Not analysed yet · Published 11 Sept 2026
- [auxdisplay: charlcd: cancel backlight work on registration failure](https://agentprime.io/advisories/CVE-2026-89585.md)
  `CVE-2026-89585` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [block: validate user space vectors during extraction](https://agentprime.io/advisories/CVE-2026-89584.md)
  `CVE-2026-89584` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [Bluetooth: eir: Fix OOB read in eir_get_service_data()](https://agentprime.io/advisories/CVE-2026-89583.md)
  `CVE-2026-89583` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 11 Sept 2026
- [bnx2x: fix double free in bnx2x_init_firmware() error path](https://agentprime.io/advisories/CVE-2026-89582.md)
  `CVE-2026-89582` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [bpf, x86: Fix per-CPU address resolution into an extended register](https://agentprime.io/advisories/CVE-2026-89581.md)
  `CVE-2026-89581` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [bpf: Disable preemption in \_\_bpf_get_stack](https://agentprime.io/advisories/CVE-2026-89580.md)
  `CVE-2026-89580` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [bpf: Harden bloom filter sizing and indexing on 32-bit kernels](https://agentprime.io/advisories/CVE-2026-89579.md)
  `CVE-2026-89579` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [dm-io: clone the source bio instead of copying its biovec](https://agentprime.io/advisories/CVE-2026-89578.md)
  `CVE-2026-89578` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [dm-io: report non-retryable errors separatedly](https://agentprime.io/advisories/CVE-2026-89577.md)
  `CVE-2026-89577` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [dm-era: fix shadowed superblock leak on take-snap failure](https://agentprime.io/advisories/CVE-2026-89576.md)
  `CVE-2026-89576` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [dm raid1: reserve space for NUL-terminator in build_constructor_string()](https://agentprime.io/advisories/CVE-2026-89575.md)
  `CVE-2026-89575` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [dm array: validate array block headers on read](https://agentprime.io/advisories/CVE-2026-89574.md)
  `CVE-2026-89574` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [dm array: reject an array block whose value size is not the caller's](https://agentprime.io/advisories/CVE-2026-89573.md)
  `CVE-2026-89573` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [cpufreq: apple-soc: Fix OPP table cleanup](https://agentprime.io/advisories/CVE-2026-89572.md)
  `CVE-2026-89572` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [cxl/features: bound fwctl command payload to the input buffer](https://agentprime.io/advisories/CVE-2026-89571.md)
  `CVE-2026-89571` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2026
- [cxl/mce: Make the MCE notifier per-region](https://agentprime.io/advisories/CVE-2026-89570.md)
  `CVE-2026-89570` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [Bluetooth: RFCOMM: serialize security confirmation handling](https://agentprime.io/advisories/CVE-2026-89569.md)
  `CVE-2026-89569` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026
- [kho: fix size calculation in kho_preserved_memory_reserve()](https://agentprime.io/advisories/CVE-2026-89568.md)
  `CVE-2026-89568` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [jbd2: bound shrinker scans by examined checkpoint buffers](https://agentprime.io/advisories/CVE-2026-89567.md)
  `CVE-2026-89567` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [jbd2: check need_resched() when skipping busy checkpoint buffers](https://agentprime.io/advisories/CVE-2026-89566.md)
  `CVE-2026-89566` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ipip: fix skb leak in collect_md mode when metadata_dst allocation fails](https://agentprime.io/advisories/CVE-2026-89565.md)
  `CVE-2026-89565` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ip: orphan prefetched skbs before multicast forwarding](https://agentprime.io/advisories/CVE-2026-89564.md)
  `CVE-2026-89564` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()](https://agentprime.io/advisories/CVE-2026-89563.md)
  `CVE-2026-89563` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [ip6_gre: fix hardware header length for NBMA tunnels](https://agentprime.io/advisories/CVE-2026-89562.md)
  `CVE-2026-89562` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv()](https://agentprime.io/advisories/CVE-2026-89561.md)
  `CVE-2026-89561` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation](https://agentprime.io/advisories/CVE-2026-89560.md)
  `CVE-2026-89560` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026
- [libnvdimm/labels: Prevent integer overflow in \_\_nd_label_validate()](https://agentprime.io/advisories/CVE-2026-89559.md)
  `CVE-2026-89559` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [md/raid10: fix still_degraded being inverted in raid10_sync_request()](https://agentprime.io/advisories/CVE-2026-89558.md)
  `CVE-2026-89558` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [md: do overflow check for sb->bblog_shift in super_1_load()](https://agentprime.io/advisories/CVE-2026-89557.md)
  `CVE-2026-89557` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [module: validate string table section types](https://agentprime.io/advisories/CVE-2026-89556.md)
  `CVE-2026-89556` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [mpls: reload header after pskb_may_pull()](https://agentprime.io/advisories/CVE-2026-89555.md)
  `CVE-2026-89555` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction](https://agentprime.io/advisories/CVE-2026-89554.md)
  `CVE-2026-89554` · CVE record: Linux Linux · CVSS 8.2 High · Not analysed yet · Published 11 Sept 2026
- [nouveau/gem: reserve the bo in the info ioctl around the vma lookup](https://agentprime.io/advisories/CVE-2026-89553.md)
  `CVE-2026-89553` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [params: fix charp corruption on allocation failure](https://agentprime.io/advisories/CVE-2026-89552.md)
  `CVE-2026-89552` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow](https://agentprime.io/advisories/CVE-2026-89551.md)
  `CVE-2026-89551` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [SUNRPC: svcauth_gss: enforce krb5 token minimum length](https://agentprime.io/advisories/CVE-2026-89550.md)
  `CVE-2026-89550` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [sunrpc: route to a populated pool in svc_pool_for_cpu()](https://agentprime.io/advisories/CVE-2026-89549.md)
  `CVE-2026-89549` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [SUNRPC: always drain cache_cleaner before destroying a cache_detail](https://agentprime.io/advisories/CVE-2026-89548.md)
  `CVE-2026-89548` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [SUNRPC: Check svc pool percpu counter allocation](https://agentprime.io/advisories/CVE-2026-89547.md)
  `CVE-2026-89547` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 11 Sept 2026
- [SUNRPC: close backchannel before destroying callback service](https://agentprime.io/advisories/CVE-2026-89546.md)
  `CVE-2026-89546` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [sunrpc: defer rq_argp and rq_resp free until after RCU grace period](https://agentprime.io/advisories/CVE-2026-89545.md)
  `CVE-2026-89545` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [SUNRPC: fix gssx_dec_option_array error path bugs](https://agentprime.io/advisories/CVE-2026-89544.md)
  `CVE-2026-89544` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [sunrpc: fix use-after-free in \_\_rpc_clnt_handle_event and \_\_rpc_clnt_remove_pipedir](https://agentprime.io/advisories/CVE-2026-89543.md)
  `CVE-2026-89543` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [SUNRPC: harden gss_krb5_unwrap_v2 against short tokens](https://agentprime.io/advisories/CVE-2026-89542.md)
  `CVE-2026-89542` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [SUNRPC: harden gss_unwrap_resp_priv length checks](https://agentprime.io/advisories/CVE-2026-89541.md)
  `CVE-2026-89541` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [sunrpc: init gssp_lock before publishing proc entry](https://agentprime.io/advisories/CVE-2026-89540.md)
  `CVE-2026-89540` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [SUNRPC: reject duplicate CREDS_VALUE options](https://agentprime.io/advisories/CVE-2026-89539.md)
  `CVE-2026-89539` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field](https://agentprime.io/advisories/CVE-2026-89538.md)
  `CVE-2026-89538` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2](https://agentprime.io/advisories/CVE-2026-89537.md)
  `CVE-2026-89537` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [SUNRPC: wait for in-flight client TLS handshake callback](https://agentprime.io/advisories/CVE-2026-89536.md)
  `CVE-2026-89536` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id](https://agentprime.io/advisories/CVE-2026-89535.md)
  `CVE-2026-89535` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 11 Sept 2026
- [svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails](https://agentprime.io/advisories/CVE-2026-89534.md)
  `CVE-2026-89534` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026
- [svcrdma: Fix offset arithmetic in read_chunk_range](https://agentprime.io/advisories/CVE-2026-89533.md)
  `CVE-2026-89533` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [svcrdma: Fix pcl_for_each_segment for empty chunks](https://agentprime.io/advisories/CVE-2026-89532.md)
  `CVE-2026-89532` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [svcrdma: Reject connection when transport allocation fails](https://agentprime.io/advisories/CVE-2026-89531.md)
  `CVE-2026-89531` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [svcrdma: Reject inline replies that overflow the pull-up buffer](https://agentprime.io/advisories/CVE-2026-89530.md)
  `CVE-2026-89530` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [svcrdma: Reject oversized Read segments at decode time](https://agentprime.io/advisories/CVE-2026-89529.md)
  `CVE-2026-89529` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTExVDE5OjQ0OjA5LjI1OTAwMFoiLCJDVkUtMjAyNi04OTUyOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTExVDE5OjQ0OjUzLjU3ODAwMFoiLCJDVkUtMjAyNi04OTU4OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTExVDE5OjQ0OjUzLjU3ODAwMFoiLCJDVkUtMjAyNi04OTU4OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.