# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path](https://agentprime.io/advisories/CVE-2026-89769.md)
  `CVE-2026-89769` · CVE record: Linux Linux · CVSS 7.4 High · Not analysed yet · Published 11 Sept 2026
- [fs: fix user path of nested backing files](https://agentprime.io/advisories/CVE-2026-89768.md)
  `CVE-2026-89768` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ovl: fix double end_creating() on the casefold-mismatch path](https://agentprime.io/advisories/CVE-2026-89767.md)
  `CVE-2026-89767` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [pidfd: hold exec_update_lock around namespace ioctl](https://agentprime.io/advisories/CVE-2026-89766.md)
  `CVE-2026-89766` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [timers/itimer: Zero-init old itimerval before copy to userspace](https://agentprime.io/advisories/CVE-2026-89765.md)
  `CVE-2026-89765` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [rust: devres: fix race between concurrent revokers](https://agentprime.io/advisories/CVE-2026-89764.md)
  `CVE-2026-89764` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [KEYS: trusted: Fix TPM teardown ordering](https://agentprime.io/advisories/CVE-2026-89763.md)
  `CVE-2026-89763` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [apparmor: fix cred UAF caused by begin_current_label_crit_section()](https://agentprime.io/advisories/CVE-2026-89762.md)
  `CVE-2026-89762` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [apparmor: fix out-of-bounds write when null terminating a label vec](https://agentprime.io/advisories/CVE-2026-89761.md)
  `CVE-2026-89761` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [mm, swap: don't free a hibernation slot that is in the swap cache](https://agentprime.io/advisories/CVE-2026-89760.md)
  `CVE-2026-89760` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [mm/kmemleak: avoid soft lockup when scanning task stacks](https://agentprime.io/advisories/CVE-2026-89759.md)
  `CVE-2026-89759` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [mm/mempolicy: skip non-present PMDs when queueing folios](https://agentprime.io/advisories/CVE-2026-89758.md)
  `CVE-2026-89758` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [mm/mglru: fix and remove redundant unevictable folio handling](https://agentprime.io/advisories/CVE-2026-89757.md)
  `CVE-2026-89757` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch()](https://agentprime.io/advisories/CVE-2026-89756.md)
  `CVE-2026-89756` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [mm/migrate_device: clear stale mapping after freeing swapcache](https://agentprime.io/advisories/CVE-2026-89755.md)
  `CVE-2026-89755` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [mm/pagewalk: fix stale walk->action escaping walk_pmd_range()](https://agentprime.io/advisories/CVE-2026-89754.md)
  `CVE-2026-89754` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()](https://agentprime.io/advisories/CVE-2026-89753.md)
  `CVE-2026-89753` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [mm: memcg: stop reclaim when a limit update is superseded](https://agentprime.io/advisories/CVE-2026-89752.md)
  `CVE-2026-89752` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [x86/tdx: Fix off-by-one in port I/O handling](https://agentprime.io/advisories/CVE-2026-89751.md)
  `CVE-2026-89751` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [tracing/user_events: Clear copied tracing state before fork duplication](https://agentprime.io/advisories/CVE-2026-89750.md)
  `CVE-2026-89750` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [tracing: Fix crash passing ERR_PTR to kthread_stop()](https://agentprime.io/advisories/CVE-2026-89749.md)
  `CVE-2026-89749` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [tracing: Fix retry exhaustion in simple ring buffer reader swap](https://agentprime.io/advisories/CVE-2026-89748.md)
  `CVE-2026-89748` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [tracing: Fix use-after-free in trace_pipe read on sub-buffer order change](https://agentprime.io/advisories/CVE-2026-89747.md)
  `CVE-2026-89747` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [tracing: Fix use-after-free with same-name named triggers](https://agentprime.io/advisories/CVE-2026-89746.md)
  `CVE-2026-89746` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [debugfs: Fix lockdown check for mmap_prepare](https://agentprime.io/advisories/CVE-2026-89745.md)
  `CVE-2026-89745` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [device property: fix infinite loop in fwnode_for_each_child_node()](https://agentprime.io/advisories/CVE-2026-89744.md)
  `CVE-2026-89744` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026
- [misc: nsm: bound the device-reported response length](https://agentprime.io/advisories/CVE-2026-89743.md)
  `CVE-2026-89743` · CVE record: Linux Linux · CVSS 7.7 High · Not analysed yet · Published 11 Sept 2026
- [rapidio: mport_cdev: fix use-after-free in dma_req_free()](https://agentprime.io/advisories/CVE-2026-89742.md)
  `CVE-2026-89742` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [Revert "media: v4l2-dev: fix error handling in \_\_video_register_device()"](https://agentprime.io/advisories/CVE-2026-89741.md)
  `CVE-2026-89741` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [serial: imx: serialize imx_uart_ports\[\] lifetime](https://agentprime.io/advisories/CVE-2026-89740.md)
  `CVE-2026-89740` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition](https://agentprime.io/advisories/CVE-2026-89739.md)
  `CVE-2026-89739` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed](https://agentprime.io/advisories/CVE-2026-89738.md)
  `CVE-2026-89738` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [usb: typec: thunderbolt: Disable work before freeing tbt on remove](https://agentprime.io/advisories/CVE-2026-89737.md)
  `CVE-2026-89737` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [usb: gadget: u_audio: Fix use-after-free on sound card disconnect](https://agentprime.io/advisories/CVE-2026-89736.md)
  `CVE-2026-89736` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [usb: gadget: midi2: remove default configfs groups on teardown](https://agentprime.io/advisories/CVE-2026-89735.md)
  `CVE-2026-89735` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init()](https://agentprime.io/advisories/CVE-2026-89734.md)
  `CVE-2026-89734` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()](https://agentprime.io/advisories/CVE-2026-89733.md)
  `CVE-2026-89733` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [usb: gadget: f_fs: Prevent deadlock during ep0 read loop](https://agentprime.io/advisories/CVE-2026-89732.md)
  `CVE-2026-89732` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read](https://agentprime.io/advisories/CVE-2026-89731.md)
  `CVE-2026-89731` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2026
- [fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write](https://agentprime.io/advisories/CVE-2026-89730.md)
  `CVE-2026-89730` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature](https://agentprime.io/advisories/CVE-2026-89729.md)
  `CVE-2026-89729` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026
- [i3c: renesas: Fix out-of-bounds access for newdevs mask](https://agentprime.io/advisories/CVE-2026-89728.md)
  `CVE-2026-89728` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID](https://agentprime.io/advisories/CVE-2026-89727.md)
  `CVE-2026-89727` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()](https://agentprime.io/advisories/CVE-2026-89726.md)
  `CVE-2026-89726` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [media: cec: stm32: prevent out-of-bounds write on RX overflow](https://agentprime.io/advisories/CVE-2026-89725.md)
  `CVE-2026-89725` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026
- [media: vicodec: fix out-of-bounds write in FWHT encoder](https://agentprime.io/advisories/CVE-2026-89724.md)
  `CVE-2026-89724` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation](https://agentprime.io/advisories/CVE-2026-89723.md)
  `CVE-2026-89723` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [PCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io()](https://agentprime.io/advisories/CVE-2026-89722.md)
  `CVE-2026-89722` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [phy: rockchip-samsung-dcphy: fix out-of-range max_register](https://agentprime.io/advisories/CVE-2026-89721.md)
  `CVE-2026-89721` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ubifs: fix out-of-bounds read in signature length check](https://agentprime.io/advisories/CVE-2026-89720.md)
  `CVE-2026-89720` · CVE record: Linux Linux · CVSS 7.7 High · Not analysed yet · Published 11 Sept 2026
- [zram: fix out-of-bounds access in read_block_state()](https://agentprime.io/advisories/CVE-2026-89719.md)
  `CVE-2026-89719` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [zram: fix out-of-bounds access in writeback_store()](https://agentprime.io/advisories/CVE-2026-89718.md)
  `CVE-2026-89718` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [zram: set default primary compressor in zram_destroy_comps()](https://agentprime.io/advisories/CVE-2026-89717.md)
  `CVE-2026-89717` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [zram: validate deflate params](https://agentprime.io/advisories/CVE-2026-89716.md)
  `CVE-2026-89716` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [NFS/localio: fix ref leak on nfs_uuid_add_file failure](https://agentprime.io/advisories/CVE-2026-89715.md)
  `CVE-2026-89715` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails](https://agentprime.io/advisories/CVE-2026-89714.md)
  `CVE-2026-89714` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [NFSD: check truncate permission under inode lock](https://agentprime.io/advisories/CVE-2026-89713.md)
  `CVE-2026-89713` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock](https://agentprime.io/advisories/CVE-2026-89712.md)
  `CVE-2026-89712` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check](https://agentprime.io/advisories/CVE-2026-89711.md)
  `CVE-2026-89711` · CVE record: Linux Linux · CVSS 8.2 High · Not analysed yet · Published 11 Sept 2026
- [NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path](https://agentprime.io/advisories/CVE-2026-89710.md)
  `CVE-2026-89710` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTExVDE5OjQ2OjI1LjUzNDAwMFoiLCJDVkUtMjAyNi04OTcxMCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTExVDE5OjQ3OjA5LjYzMDAwMFoiLCJDVkUtMjAyNi04OTc3MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTExVDE5OjQ3OjA5LjYzMDAwMFoiLCJDVkUtMjAyNi04OTc3MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.