# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [net: thunderbolt: Mark the connection down when bringing it up fails](https://agentprime.io/advisories/CVE-2026-80989.md)
  `CVE-2026-80989` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026
- [NTB: ntb_transport: Fail TX enqueue when the QP link is down](https://agentprime.io/advisories/CVE-2026-80988.md)
  `CVE-2026-80988` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [NTB: ntb_transport: Reject oversized TX buffers](https://agentprime.io/advisories/CVE-2026-80987.md)
  `CVE-2026-80987` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages](https://agentprime.io/advisories/CVE-2026-80986.md)
  `CVE-2026-80986` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry](https://agentprime.io/advisories/CVE-2026-80985.md)
  `CVE-2026-80985` · CVE record: Linux Linux · CVSS 8.2 High · Not analysed yet · Published 11 Sept 2026
- [net/smc: do not dereference an unset send buffer on the SMC-D teardown path](https://agentprime.io/advisories/CVE-2026-80984.md)
  `CVE-2026-80984` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [net/smc: fix socket refcount leak in smc_switch_conns()](https://agentprime.io/advisories/CVE-2026-80983.md)
  `CVE-2026-80983` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [net/smc: fix use-after-free in smc_rx_pipe_buf_release()](https://agentprime.io/advisories/CVE-2026-80982.md)
  `CVE-2026-80982` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()](https://agentprime.io/advisories/CVE-2026-80981.md)
  `CVE-2026-80981` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [net/smc: stop killed, freed and out_of_sync sharing a byte](https://agentprime.io/advisories/CVE-2026-80980.md)
  `CVE-2026-80980` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [net/smc: unregister the connection before draining the rx tasklet](https://agentprime.io/advisories/CVE-2026-80979.md)
  `CVE-2026-80979` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [net: cap advertised IP tunnel headroom](https://agentprime.io/advisories/CVE-2026-80978.md)
  `CVE-2026-80978` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [net: skbuff: don't touch shared zerocopy state in skb_tx_error()](https://agentprime.io/advisories/CVE-2026-80977.md)
  `CVE-2026-80977` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [seg6: reset IP6CB after IPv6 decapsulation](https://agentprime.io/advisories/CVE-2026-80976.md)
  `CVE-2026-80976` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [mfd: qnap-mcu: keep the reply buffer alive past a command timeout](https://agentprime.io/advisories/CVE-2026-80975.md)
  `CVE-2026-80975` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [mfd: sm501: Fix potential memory leaks during remove](https://agentprime.io/advisories/CVE-2026-80974.md)
  `CVE-2026-80974` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ALSA: 6fire: bound the MIDI event length from the device](https://agentprime.io/advisories/CVE-2026-80973.md)
  `CVE-2026-80973` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ALSA: aloop: Check card index validity at probe](https://agentprime.io/advisories/CVE-2026-80972.md)
  `CVE-2026-80972` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ALSA: bcd2000: clear the URB pointers on disconnect](https://agentprime.io/advisories/CVE-2026-80971.md)
  `CVE-2026-80971` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [ALSA: FCP: do not copy out an uninitialised init response](https://agentprime.io/advisories/CVE-2026-80970.md)
  `CVE-2026-80970` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ALSA: mpu401: Check card index validity at probe](https://agentprime.io/advisories/CVE-2026-80969.md)
  `CVE-2026-80969` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ALSA: mts64: Check card index validity at probe](https://agentprime.io/advisories/CVE-2026-80968.md)
  `CVE-2026-80968` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ALSA: pcxhr: initialize mutexes before requesting threaded IRQ](https://agentprime.io/advisories/CVE-2026-80967.md)
  `CVE-2026-80967` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026
- [ALSA: portman2x4: Check card index validity at probe](https://agentprime.io/advisories/CVE-2026-80966.md)
  `CVE-2026-80966` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ALSA: serial-u16550: Check card index validity at probe](https://agentprime.io/advisories/CVE-2026-80965.md)
  `CVE-2026-80965` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ALSA: virmidi: Check card index validity at probe](https://agentprime.io/advisories/CVE-2026-80964.md)
  `CVE-2026-80964` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [dm-stats: fix a crash if allocation of per-cpu data fails](https://agentprime.io/advisories/CVE-2026-80963.md)
  `CVE-2026-80963` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [dm-pcache: validate geometry fields from on-disk cache_info](https://agentprime.io/advisories/CVE-2026-80962.md)
  `CVE-2026-80962` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [dm-pcache: validate kset key_num and intra-segment bounds](https://agentprime.io/advisories/CVE-2026-80961.md)
  `CVE-2026-80961` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [dm-pcache: validate on-media seg_num against the cache device size](https://agentprime.io/advisories/CVE-2026-80960.md)
  `CVE-2026-80960` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [dm-pcache: bound the persisted tail-position offset](https://agentprime.io/advisories/CVE-2026-80959.md)
  `CVE-2026-80959` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [dm-pcache: clamp the tail kset read to the segment data region](https://agentprime.io/advisories/CVE-2026-80958.md)
  `CVE-2026-80958` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2026
- [dm-pcache: detect a cycle in the last-kset chain during replay](https://agentprime.io/advisories/CVE-2026-80957.md)
  `CVE-2026-80957` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [dm-pcache: only hand out initialized cache segments](https://agentprime.io/advisories/CVE-2026-80956.md)
  `CVE-2026-80956` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [dm-pcache: fix use-after-free and invalid seg operations in kset_replay()](https://agentprime.io/advisories/CVE-2026-80955.md)
  `CVE-2026-80955` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode()](https://agentprime.io/advisories/CVE-2026-80954.md)
  `CVE-2026-80954` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [i3c: master: adi: initialize the lock before enabling interrupts](https://agentprime.io/advisories/CVE-2026-80953.md)
  `CVE-2026-80953` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026
- [i3c: master: Fix info leak and UAF in device unregister path](https://agentprime.io/advisories/CVE-2026-80952.md)
  `CVE-2026-80952` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [i3c: master: svc: bound IBI payload to the requested max_payload_len](https://agentprime.io/advisories/CVE-2026-80951.md)
  `CVE-2026-80951` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [i3c: renesas: Check that the transfer is valid before accessing it](https://agentprime.io/advisories/CVE-2026-80950.md)
  `CVE-2026-80950` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()](https://agentprime.io/advisories/CVE-2026-80949.md)
  `CVE-2026-80949` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()](https://agentprime.io/advisories/CVE-2026-80948.md)
  `CVE-2026-80948` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop](https://agentprime.io/advisories/CVE-2026-80947.md)
  `CVE-2026-80947` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [fuse: copy request headers via a stack buffer for io-uring](https://agentprime.io/advisories/CVE-2026-80946.md)
  `CVE-2026-80946` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [crypto: iaa - unmap dst before software fallback on decompress](https://agentprime.io/advisories/CVE-2026-80945.md)
  `CVE-2026-80945` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [wifi: mwifiex: Detach sync cmd buffer on interrupted wait](https://agentprime.io/advisories/CVE-2026-80944.md)
  `CVE-2026-80944` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids](https://agentprime.io/advisories/CVE-2026-80943.md)
  `CVE-2026-80943` · CVE record: Linux Linux · CVSS 7.6 High · Not analysed yet · Published 11 Sept 2026
- [wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars()](https://agentprime.io/advisories/CVE-2026-80942.md)
  `CVE-2026-80942` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb()](https://agentprime.io/advisories/CVE-2026-80941.md)
  `CVE-2026-80941` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [wifi: rtw88: pci: fix resource leak on failed NAPI setup](https://agentprime.io/advisories/CVE-2026-80940.md)
  `CVE-2026-80940` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot](https://agentprime.io/advisories/CVE-2026-80939.md)
  `CVE-2026-80939` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex](https://agentprime.io/advisories/CVE-2026-80938.md)
  `CVE-2026-80938` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy](https://agentprime.io/advisories/CVE-2026-80937.md)
  `CVE-2026-80937` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026
- [wifi: mt76: mt7925: cancel mlo_pm_work on stop](https://agentprime.io/advisories/CVE-2026-80936.md)
  `CVE-2026-80936` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy](https://agentprime.io/advisories/CVE-2026-80935.md)
  `CVE-2026-80935` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026
- [wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames](https://agentprime.io/advisories/CVE-2026-80934.md)
  `CVE-2026-80934` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [wifi: mt76: mt7996: validate default EEPROM firmware size](https://agentprime.io/advisories/CVE-2026-80933.md)
  `CVE-2026-80933` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [vsock/virtio: flush works in dependency order](https://agentprime.io/advisories/CVE-2026-80932.md)
  `CVE-2026-80932` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026
- [w1: ds28e17: reject an oversize length on an I2C block read](https://agentprime.io/advisories/CVE-2026-80931.md)
  `CVE-2026-80931` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout](https://agentprime.io/advisories/CVE-2026-80930.md)
  `CVE-2026-80930` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTExVDE5OjQyOjA1LjUyODAwMFoiLCJDVkUtMjAyNi04MDkzMCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTExVDE5OjQyOjQ3LjUzNDAwMFoiLCJDVkUtMjAyNi04MDk5MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTExVDE5OjQyOjQ3LjUzNDAwMFoiLCJDVkUtMjAyNi04MDk5MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.