# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [lockd, nfsd: RCU-protect nlmsvc_ops dispatch](https://agentprime.io/advisories/CVE-2026-89709.md)
  `CVE-2026-89709` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown](https://agentprime.io/advisories/CVE-2026-89708.md)
  `CVE-2026-89708` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [nfsd: release path refs on follow_down() error](https://agentprime.io/advisories/CVE-2026-89707.md)
  `CVE-2026-89707` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: Reset write verifier when async COPY writeback fails](https://agentprime.io/advisories/CVE-2026-89706.md)
  `CVE-2026-89706` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths](https://agentprime.io/advisories/CVE-2026-89705.md)
  `CVE-2026-89705` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: sample writeback error cursor before async COPY loop](https://agentprime.io/advisories/CVE-2026-89704.md)
  `CVE-2026-89704` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations](https://agentprime.io/advisories/CVE-2026-89703.md)
  `CVE-2026-89703` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [nfsd: size fh_verify server sockaddr slot by xpt_locallen](https://agentprime.io/advisories/CVE-2026-89702.md)
  `CVE-2026-89702` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [nfsd: validate nseconds in TIME_DELEG decode paths](https://agentprime.io/advisories/CVE-2026-89701.md)
  `CVE-2026-89701` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [nfsd: validate sockaddr length per family in listener_set](https://agentprime.io/advisories/CVE-2026-89700.md)
  `CVE-2026-89700` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [nfsd: validate symlink target length in NFSv4 CREATE](https://agentprime.io/advisories/CVE-2026-89699.md)
  `CVE-2026-89699` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage](https://agentprime.io/advisories/CVE-2026-89698.md)
  `CVE-2026-89698` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()](https://agentprime.io/advisories/CVE-2026-89697.md)
  `CVE-2026-89697` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref](https://agentprime.io/advisories/CVE-2026-89696.md)
  `CVE-2026-89696` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: cap decoded POSIX ACL count to bound sort cost](https://agentprime.io/advisories/CVE-2026-89695.md)
  `CVE-2026-89695` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: check client ownership when cancelling a copy-notify stateid](https://agentprime.io/advisories/CVE-2026-89694.md)
  `CVE-2026-89694` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()](https://agentprime.io/advisories/CVE-2026-89693.md)
  `CVE-2026-89693` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [nfsd: clear CALLBACK_RUNNING on failed delegation recall queue](https://agentprime.io/advisories/CVE-2026-89692.md)
  `CVE-2026-89692` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: clear opcnt on compound arg release to prevent OOB read](https://agentprime.io/advisories/CVE-2026-89691.md)
  `CVE-2026-89691` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: defer vfree of compound ops to fix rpc_status UAF](https://agentprime.io/advisories/CVE-2026-89690.md)
  `CVE-2026-89690` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: don't free session slots that are still in use](https://agentprime.io/advisories/CVE-2026-89689.md)
  `CVE-2026-89689` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [nfsd: drop the stateid, not the stateowner, on seqid_op replay retry](https://agentprime.io/advisories/CVE-2026-89688.md)
  `CVE-2026-89688` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file](https://agentprime.io/advisories/CVE-2026-89687.md)
  `CVE-2026-89687` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke](https://agentprime.io/advisories/CVE-2026-89686.md)
  `CVE-2026-89686` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [nfsd: fix clock domain mismatch in clients_still_reclaiming()](https://agentprime.io/advisories/CVE-2026-89685.md)
  `CVE-2026-89685` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: fix cpntf publish race in nfs4_init_cp_state](https://agentprime.io/advisories/CVE-2026-89684.md)
  `CVE-2026-89684` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: fix dentry ref leak on V4ROOT export filehandle lookup](https://agentprime.io/advisories/CVE-2026-89683.md)
  `CVE-2026-89683` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net](https://agentprime.io/advisories/CVE-2026-89682.md)
  `CVE-2026-89682` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: fix layout fence worker double-reference race](https://agentprime.io/advisories/CVE-2026-89681.md)
  `CVE-2026-89681` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [nfsd: fix nfsd_file leak on inter-server COPY setup failure](https://agentprime.io/advisories/CVE-2026-89680.md)
  `CVE-2026-89680` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs](https://agentprime.io/advisories/CVE-2026-89679.md)
  `CVE-2026-89679` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: fix partial-write detection in nfsd_direct_write](https://agentprime.io/advisories/CVE-2026-89678.md)
  `CVE-2026-89678` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()](https://agentprime.io/advisories/CVE-2026-89677.md)
  `CVE-2026-89677` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [nfsd: fix stale s2s_cp_stateids IDR entry for async COPY](https://agentprime.io/advisories/CVE-2026-89676.md)
  `CVE-2026-89676` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [nfsd: fix UAF in async copy cancel and shutdown](https://agentprime.io/advisories/CVE-2026-89675.md)
  `CVE-2026-89675` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget](https://agentprime.io/advisories/CVE-2026-89674.md)
  `CVE-2026-89674` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo](https://agentprime.io/advisories/CVE-2026-89673.md)
  `CVE-2026-89673` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [nfsd: gate nfs2 setacl by argp->mask](https://agentprime.io/advisories/CVE-2026-89672.md)
  `CVE-2026-89672` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [nfsd: gate nfs3 setacl by argp->mask](https://agentprime.io/advisories/CVE-2026-89671.md)
  `CVE-2026-89671` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [nfsd: hold rcu across localio cmpxchg retry](https://agentprime.io/advisories/CVE-2026-89670.md)
  `CVE-2026-89670` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: initialize copy-notify stateid before publishing it](https://agentprime.io/advisories/CVE-2026-89669.md)
  `CVE-2026-89669` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()](https://agentprime.io/advisories/CVE-2026-89668.md)
  `CVE-2026-89668` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache](https://agentprime.io/advisories/CVE-2026-89667.md)
  `CVE-2026-89667` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops](https://agentprime.io/advisories/CVE-2026-89666.md)
  `CVE-2026-89666` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE](https://agentprime.io/advisories/CVE-2026-89665.md)
  `CVE-2026-89665` · CVE record: Linux Linux · CVSS 8.2 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: release OPEN-decoded posix ACLs via op_release](https://agentprime.io/advisories/CVE-2026-89664.md)
  `CVE-2026-89664` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [nfsd: revoke copy-notify stateids before dropping their reference](https://agentprime.io/advisories/CVE-2026-89663.md)
  `CVE-2026-89663` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026
- [NFSD: Prevent lock owner use-after-free during client teardown](https://agentprime.io/advisories/CVE-2026-89662.md)
  `CVE-2026-89662` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [NFSD: Prevent post-shutdown use-after-free in unlock_filesystem](https://agentprime.io/advisories/CVE-2026-89661.md)
  `CVE-2026-89661` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [NFSD: Prevent client use-after-free during admin state revocation](https://agentprime.io/advisories/CVE-2026-89660.md)
  `CVE-2026-89660` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [NFSD: Prevent client use-after-free during delegation revoke](https://agentprime.io/advisories/CVE-2026-89659.md)
  `CVE-2026-89659` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup](https://agentprime.io/advisories/CVE-2026-89658.md)
  `CVE-2026-89658` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [libceph: validate OSD extent maps before cursor advance](https://agentprime.io/advisories/CVE-2026-89657.md)
  `CVE-2026-89657` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [libceph: reject buckets with mismatched CRUSH ids](https://agentprime.io/advisories/CVE-2026-89656.md)
  `CVE-2026-89656` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [ceph: fix UAF in \_\_kick_flushing_caps() on cf entry freed during unlock](https://agentprime.io/advisories/CVE-2026-89655.md)
  `CVE-2026-89655` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [ceph: fix UAF in check_new_map() on session freed during unlock](https://agentprime.io/advisories/CVE-2026-89654.md)
  `CVE-2026-89654` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode](https://agentprime.io/advisories/CVE-2026-89653.md)
  `CVE-2026-89653` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [ceph: bound copied dentry name length in NFS export get_name](https://agentprime.io/advisories/CVE-2026-89652.md)
  `CVE-2026-89652` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [ceph: bound MDSCapAuth path and fs_name decode in handle_session()](https://agentprime.io/advisories/CVE-2026-89651.md)
  `CVE-2026-89651` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [ceph: bound num_export_targets array for mds info v2/v3](https://agentprime.io/advisories/CVE-2026-89650.md)
  `CVE-2026-89650` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTExVDE5OjQ1OjQwLjg2NzAwMFoiLCJDVkUtMjAyNi04OTY1MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTExVDE5OjQ2OjI1LjUzNDAwMFoiLCJDVkUtMjAyNi04OTcxMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTExVDE5OjQ2OjI1LjUzNDAwMFoiLCJDVkUtMjAyNi04OTcxMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.