# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [ceph: bound xattr value length in \_\_build_xattrs()](https://agentprime.io/advisories/CVE-2026-89649.md)
  `CVE-2026-89649` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [ceph: cap delegated inode count in ceph_parse_deleg_inos()](https://agentprime.io/advisories/CVE-2026-89648.md)
  `CVE-2026-89648` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [ceph: do not repeat ceph_trim_dentries() if no progress possible](https://agentprime.io/advisories/CVE-2026-89647.md)
  `CVE-2026-89647` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [ceph: fix leaked inode reference on writeback abort at umount](https://agentprime.io/advisories/CVE-2026-89646.md)
  `CVE-2026-89646` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [btrfs: drop recovered reloc root refs on recovery failure](https://agentprime.io/advisories/CVE-2026-89645.md)
  `CVE-2026-89645` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [btrfs: fix extent map leak in NOCOW direct I/O write](https://agentprime.io/advisories/CVE-2026-89644.md)
  `CVE-2026-89644` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [audit: avoid dropping live tree ref on fsnotify rule autoremove](https://agentprime.io/advisories/CVE-2026-89643.md)
  `CVE-2026-89643` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [cifs: call pagecache_isize_extended() in cifs_setsize() when extending](https://agentprime.io/advisories/CVE-2026-89642.md)
  `CVE-2026-89642` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size()](https://agentprime.io/advisories/CVE-2026-89641.md)
  `CVE-2026-89641` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0](https://agentprime.io/advisories/CVE-2026-89640.md)
  `CVE-2026-89640` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2026
- [cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC](https://agentprime.io/advisories/CVE-2026-89639.md)
  `CVE-2026-89639` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2026
- [smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions](https://agentprime.io/advisories/CVE-2026-89638.md)
  `CVE-2026-89638` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2](https://agentprime.io/advisories/CVE-2026-89637.md)
  `CVE-2026-89637` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [smb: client: clear ce->tgthint in free_tgts()](https://agentprime.io/advisories/CVE-2026-89636.md)
  `CVE-2026-89636` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [ksmbd: only rebind the reopened file's own oplock on durable reconnect](https://agentprime.io/advisories/CVE-2026-89635.md)
  `CVE-2026-89635` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [smb: client: fix ALIGN() overflow in symlink_data() error context loop](https://agentprime.io/advisories/CVE-2026-89634.md)
  `CVE-2026-89634` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()](https://agentprime.io/advisories/CVE-2026-89633.md)
  `CVE-2026-89633` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()](https://agentprime.io/advisories/CVE-2026-89632.md)
  `CVE-2026-89632` · CVE record: Linux Linux · CVSS 8.2 High · Not analysed yet · Published 11 Sept 2026
- [smb: client: reject a tree connect response whose byte count is too small](https://agentprime.io/advisories/CVE-2026-89631.md)
  `CVE-2026-89631` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [smb: client: restore the data_offset bound in is_valid_oplock_break()](https://agentprime.io/advisories/CVE-2026-89630.md)
  `CVE-2026-89630` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [HID: corsair-void: Check size of status and firmware events before reading them](https://agentprime.io/advisories/CVE-2026-89629.md)
  `CVE-2026-89629` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [HID: picolcd: clamp eeprom debugfs read to bytes actually received](https://agentprime.io/advisories/CVE-2026-89628.md)
  `CVE-2026-89628` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [HID: roccat: free buffered reports when destroying device](https://agentprime.io/advisories/CVE-2026-89627.md)
  `CVE-2026-89627` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [HID: sensor: custom: Fix field sysfs group cleanup on failure](https://agentprime.io/advisories/CVE-2026-89626.md)
  `CVE-2026-89626` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026
- [HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind](https://agentprime.io/advisories/CVE-2026-89625.md)
  `CVE-2026-89625` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [HID: universal-pidff: stop the device when force-feedback init fails](https://agentprime.io/advisories/CVE-2026-89624.md)
  `CVE-2026-89624` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [HID: mcp2221: stop device IO before hid_hw_stop](https://agentprime.io/advisories/CVE-2026-89623.md)
  `CVE-2026-89623` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes](https://agentprime.io/advisories/CVE-2026-89622.md)
  `CVE-2026-89622` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [HID: mcp2221: validate report size in mcp2221_raw_event()](https://agentprime.io/advisories/CVE-2026-89621.md)
  `CVE-2026-89621` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [HID: intel-thc-hid: intel-quickspi: validate report size before copy](https://agentprime.io/advisories/CVE-2026-89620.md)
  `CVE-2026-89620` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer](https://agentprime.io/advisories/CVE-2026-89619.md)
  `CVE-2026-89619` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [eventfs: Initialize ei->children and ei->list in init_ei()](https://agentprime.io/advisories/CVE-2026-89618.md)
  `CVE-2026-89618` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [fs/ntfs3: validate dirty page table on log replay](https://agentprime.io/advisories/CVE-2026-89617.md)
  `CVE-2026-89617` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()](https://agentprime.io/advisories/CVE-2026-89616.md)
  `CVE-2026-89616` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [fs/ntfs3: bound page_lcns\[\] index by the log record](https://agentprime.io/advisories/CVE-2026-89615.md)
  `CVE-2026-89615` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026
- [ntfs: bound the free-cluster bitmap scan to the volume](https://agentprime.io/advisories/CVE-2026-89614.md)
  `CVE-2026-89614` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [ntfs: reject invalid empty mapping pairs](https://agentprime.io/advisories/CVE-2026-89613.md)
  `CVE-2026-89613` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [ntfs: reject invalid MFT LCNs from boot sector](https://agentprime.io/advisories/CVE-2026-89612.md)
  `CVE-2026-89612` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [ntfs: validate non-resident attribute offsets](https://agentprime.io/advisories/CVE-2026-89611.md)
  `CVE-2026-89611` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [ntfs: verify run length exceeding volume boundary](https://agentprime.io/advisories/CVE-2026-89610.md)
  `CVE-2026-89610` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [ecryptfs: hold msg ctx list lock when cleaning daemon queue](https://agentprime.io/advisories/CVE-2026-89609.md)
  `CVE-2026-89609` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [ecryptfs: pass packet set buffer size to parser](https://agentprime.io/advisories/CVE-2026-89608.md)
  `CVE-2026-89608` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2026
- [ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet](https://agentprime.io/advisories/CVE-2026-89607.md)
  `CVE-2026-89607` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [ecryptfs: reject too-small tag 70 packets](https://agentprime.io/advisories/CVE-2026-89606.md)
  `CVE-2026-89606` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [ecryptfs: release message context on send failure](https://agentprime.io/advisories/CVE-2026-89605.md)
  `CVE-2026-89605` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [efivarfs: Rate limit statfs() handler](https://agentprime.io/advisories/CVE-2026-89604.md)
  `CVE-2026-89604` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [erofs: skip sufficiently large global buffers when resizing](https://agentprime.io/advisories/CVE-2026-89602.md)
  `CVE-2026-89602` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [ext2: Fix lost inode updates for IS_SYNC inodes](https://agentprime.io/advisories/CVE-2026-89601.md)
  `CVE-2026-89601` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026
- [fanotify: fix use-after-free of file range info](https://agentprime.io/advisories/CVE-2026-89600.md)
  `CVE-2026-89600` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [fbdev: omapfb: panel-dsi-cm: initialize lock before registering display](https://agentprime.io/advisories/CVE-2026-89599.md)
  `CVE-2026-89599` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026
- [fbdev: ssd1307fb: defer I2C transfers from damage callbacks](https://agentprime.io/advisories/CVE-2026-89598.md)
  `CVE-2026-89598` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [fbdev: uvesafb: unregister connector callback on init failure](https://agentprime.io/advisories/CVE-2026-89597.md)
  `CVE-2026-89597` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [forcedeth: fix off-by-one when saving/restoring non-PCI config space](https://agentprime.io/advisories/CVE-2026-89596.md)
  `CVE-2026-89596` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2026
- [fsnotify: Fix stale object mask after concurrent mark updates](https://agentprime.io/advisories/CVE-2026-89595.md)
  `CVE-2026-89595` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device](https://agentprime.io/advisories/CVE-2026-89594.md)
  `CVE-2026-89594` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [hugetlb: only adjust reservation during unmapping if mapcount is 0](https://agentprime.io/advisories/CVE-2026-89593.md)
  `CVE-2026-89593` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2026
- [accel/rocket: fix NULL dereference and integer overflow in rocket_job_push()](https://agentprime.io/advisories/CVE-2026-89592.md)
  `CVE-2026-89592` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [accel/rocket: initialize job domain before cleanup paths](https://agentprime.io/advisories/CVE-2026-89591.md)
  `CVE-2026-89591` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [accel/rocket: Fix error path handling in rocket_job_run()](https://agentprime.io/advisories/CVE-2026-89590.md)
  `CVE-2026-89590` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks](https://agentprime.io/advisories/CVE-2026-89589.md)
  `CVE-2026-89589` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTExVDE5OjQ0OjUzLjU3ODAwMFoiLCJDVkUtMjAyNi04OTU4OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTExVDE5OjQ1OjQwLjg2NzAwMFoiLCJDVkUtMjAyNi04OTY1MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTExVDE5OjQ1OjQwLjg2NzAwMFoiLCJDVkUtMjAyNi04OTY1MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.