# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [power: supply: lp8788-charger: fix use-after-free on remove](https://agentprime.io/advisories/CVE-2026-89468.md)
  `CVE-2026-89468` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [power: supply: qcom_battmgr: fix use-after-free](https://agentprime.io/advisories/CVE-2026-89467.md)
  `CVE-2026-89467` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [power: supply: qcom_battmgr: terminate the strings from firmware](https://agentprime.io/advisories/CVE-2026-89466.md)
  `CVE-2026-89466` · CVE record: Linux Linux · CVSS 7.7 High · Not analysed yet · Published 11 Sept 2026
- [power: supply: rt9455: quiesce delayed work before teardown](https://agentprime.io/advisories/CVE-2026-89465.md)
  `CVE-2026-89465` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026
- [power: supply: twl4030_charger: cancel workers via devm](https://agentprime.io/advisories/CVE-2026-89464.md)
  `CVE-2026-89464` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [power: supply: ucs1002: fix use-after-free on remove](https://agentprime.io/advisories/CVE-2026-89463.md)
  `CVE-2026-89463` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [power: supply: max17040: propagate register read errors](https://agentprime.io/advisories/CVE-2026-89462.md)
  `CVE-2026-89462` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [power: supply: max17040: synchronize work cancellation on suspend](https://agentprime.io/advisories/CVE-2026-89461.md)
  `CVE-2026-89461` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks](https://agentprime.io/advisories/CVE-2026-89460.md)
  `CVE-2026-89460` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [s390/percpu: Fix MVIY_PERCPU() with older binutils](https://agentprime.io/advisories/CVE-2026-89459.md)
  `CVE-2026-89459` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 11 Sept 2026
- [s390/dasd: Do not complete a failed ESE read as successful](https://agentprime.io/advisories/CVE-2026-89458.md)
  `CVE-2026-89458` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [s390/dasd: Guard sysfs discipline callbacks against unallocated private data](https://agentprime.io/advisories/CVE-2026-89457.md)
  `CVE-2026-89457` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [s390/dasd: Propagate partial completion length across ERP recovery](https://agentprime.io/advisories/CVE-2026-89456.md)
  `CVE-2026-89456` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 11 Sept 2026
- [PCI: plda: Fix use-after-free of event IRQs during teardown](https://agentprime.io/advisories/CVE-2026-89455.md)
  `CVE-2026-89455` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts()](https://agentprime.io/advisories/CVE-2026-89454.md)
  `CVE-2026-89454` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [iommu/amd: Put PCI device after handling PPR faults](https://agentprime.io/advisories/CVE-2026-89453.md)
  `CVE-2026-89453` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [iommu/msm: Unwind probe state on registration failure](https://agentprime.io/advisories/CVE-2026-89452.md)
  `CVE-2026-89452` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026
- [iommu/sva: Set handle->dev before the SVA handle is visible](https://agentprime.io/advisories/CVE-2026-89451.md)
  `CVE-2026-89451` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field](https://agentprime.io/advisories/CVE-2026-89450.md)
  `CVE-2026-89450` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026
- [iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add](https://agentprime.io/advisories/CVE-2026-89449.md)
  `CVE-2026-89449` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [iommu/vt-d: Force requesting ACS when tboot is enabled](https://agentprime.io/advisories/CVE-2026-89448.md)
  `CVE-2026-89448` · CVE record: Linux Linux · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [iommufd: Avoid locking internal accesses during unmap](https://agentprime.io/advisories/CVE-2026-89447.md)
  `CVE-2026-89447` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [iommufd: Release current IOAS on xa_store() failure](https://agentprime.io/advisories/CVE-2026-89446.md)
  `CVE-2026-89446` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [iommufd: Fix UAF in selftest IOPF reporting](https://agentprime.io/advisories/CVE-2026-89445.md)
  `CVE-2026-89445` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026
- [platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer](https://agentprime.io/advisories/CVE-2026-89444.md)
  `CVE-2026-89444` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [platform/x86: ISST: Validate level in perf mask ioctls](https://agentprime.io/advisories/CVE-2026-89443.md)
  `CVE-2026-89443` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2026
- [platform/x86: ISST: Validate socket ID in clos_assoc ioctl](https://agentprime.io/advisories/CVE-2026-89442.md)
  `CVE-2026-89442` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [mmc: via-sdmmc: cancel card-detect work on remove](https://agentprime.io/advisories/CVE-2026-89441.md)
  `CVE-2026-89441` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [mmc: via-sdmmc: stop card-detect handling on probe failure](https://agentprime.io/advisories/CVE-2026-89440.md)
  `CVE-2026-89440` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [platform/x86: ISST: Add a NULL check for sst_inst\[\]](https://agentprime.io/advisories/CVE-2026-89439.md)
  `CVE-2026-89439` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [platform/x86: ISST: Validate logical CPU id and clos id](https://agentprime.io/advisories/CVE-2026-89438.md)
  `CVE-2026-89438` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [platform/x86: int1092: Fix potential memory leak in sar_probe()](https://agentprime.io/advisories/CVE-2026-89437.md)
  `CVE-2026-89437` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf\[\]](https://agentprime.io/advisories/CVE-2026-89436.md)
  `CVE-2026-89436` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [platform/x86: think-lmi: Free system certificate signatures](https://agentprime.io/advisories/CVE-2026-81018.md)
  `CVE-2026-81018` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [platform/chrome: sensorhub: Bound the EC-reported sensor number](https://agentprime.io/advisories/CVE-2026-81017.md)
  `CVE-2026-81017` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026
- [platform/x86/amd/pmc: Propagate SMU errors and validate S2D address](https://agentprime.io/advisories/CVE-2026-81016.md)
  `CVE-2026-81016` · CVE record: Linux Linux · CVSS 7.7 High · Not analysed yet · Published 11 Sept 2026
- [platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails](https://agentprime.io/advisories/CVE-2026-81015.md)
  `CVE-2026-81015` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store()](https://agentprime.io/advisories/CVE-2026-81014.md)
  `CVE-2026-81014` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [platform/x86: hp-bioscfg: fix heap OOB read on empty password write](https://agentprime.io/advisories/CVE-2026-81013.md)
  `CVE-2026-81013` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer()](https://agentprime.io/advisories/CVE-2026-81012.md)
  `CVE-2026-81012` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026
- [platform/x86: hp-bioscfg: pass validated element count to package parsers](https://agentprime.io/advisories/CVE-2026-81011.md)
  `CVE-2026-81011` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2026
- [interconnect: Fix use after free in icc_get() and of_icc_get_by_index()](https://agentprime.io/advisories/CVE-2026-81008.md)
  `CVE-2026-81008` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [ipmi: ipmb: validate write message length](https://agentprime.io/advisories/CVE-2026-81007.md)
  `CVE-2026-81007` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2026
- [ipmi: Remove all sysfs files on registration failure](https://agentprime.io/advisories/CVE-2026-81006.md)
  `CVE-2026-81006` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [ipmi: si: Fix NULL pointer dereference after failed registration](https://agentprime.io/advisories/CVE-2026-81005.md)
  `CVE-2026-81005` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [ipmi:msghandler: Cancel work cleanly on an error](https://agentprime.io/advisories/CVE-2026-81004.md)
  `CVE-2026-81004` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2026
- [net/iucv: filter frames in afiucv_hs_rcv() by ingress device](https://agentprime.io/advisories/CVE-2026-81003.md)
  `CVE-2026-81003` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 11 Sept 2026
- [xdp: fix zero-copy frame layout](https://agentprime.io/advisories/CVE-2026-81002.md)
  `CVE-2026-81002` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026
- [slip: fix use-after-free in sl_sync()](https://agentprime.io/advisories/CVE-2026-81001.md)
  `CVE-2026-81001` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [net: tun: bound receive headroom](https://agentprime.io/advisories/CVE-2026-81000.md)
  `CVE-2026-81000` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO](https://agentprime.io/advisories/CVE-2026-80999.md)
  `CVE-2026-80999` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [net: bnxt: ring the doorbell when SW USO exits early](https://agentprime.io/advisories/CVE-2026-80998.md)
  `CVE-2026-80998` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [net: ipa: fix stalled modem TX queue after runtime resume](https://agentprime.io/advisories/CVE-2026-80997.md)
  `CVE-2026-80997` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2026
- [net: l2tp: do not propagate multicast notification errors](https://agentprime.io/advisories/CVE-2026-80996.md)
  `CVE-2026-80996` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [net: mctp: hold a reference to the route device in mctp_route_lookup()](https://agentprime.io/advisories/CVE-2026-80995.md)
  `CVE-2026-80995` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [net: openvswitch: fix flow mask use-after-free on flow deletion](https://agentprime.io/advisories/CVE-2026-80994.md)
  `CVE-2026-80994` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [net: phylink: correctly validate returned PCS in phylink_inband_caps](https://agentprime.io/advisories/CVE-2026-80993.md)
  `CVE-2026-80993` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026
- [net: ravb: avoid dereferencing an invalid PTP clock](https://agentprime.io/advisories/CVE-2026-80992.md)
  `CVE-2026-80992` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [net: ravb: serialize PTP clock teardown](https://agentprime.io/advisories/CVE-2026-80991.md)
  `CVE-2026-80991` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026
- [net: thunderbolt: Release the Rx HopID that was handed out on mismatch](https://agentprime.io/advisories/CVE-2026-80990.md)
  `CVE-2026-80990` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 11 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTExVDE5OjQyOjQ3LjUzNDAwMFoiLCJDVkUtMjAyNi04MDk5MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTExVDE5OjQzOjI4LjU2MDAwMFoiLCJDVkUtMjAyNi04OTQ2OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTExVDE5OjQzOjI4LjU2MDAwMFoiLCJDVkUtMjAyNi04OTQ2OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.