# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [bfs: handle set_blocksize failures](https://agentprime.io/advisories/CVE-2026-97489.md)
  `CVE-2026-97489` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [qnx4: handle set_blocksize failures](https://agentprime.io/advisories/CVE-2026-97488.md)
  `CVE-2026-97488` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [jfs: handle set_blocksize failures](https://agentprime.io/advisories/CVE-2026-97487.md)
  `CVE-2026-97487` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [hpfs: handle set_blocksize failures](https://agentprime.io/advisories/CVE-2026-97486.md)
  `CVE-2026-97486` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [omfs: handle set_blocksize failures](https://agentprime.io/advisories/CVE-2026-97485.md)
  `CVE-2026-97485` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [usbip: vhci_hcd: fix NULL deref in status_show_vhci](https://agentprime.io/advisories/CVE-2026-97484.md)
  `CVE-2026-97484` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [usb: core: hcd: fix possible deadlock in rh control transfers](https://agentprime.io/advisories/CVE-2026-97483.md)
  `CVE-2026-97483` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log](https://agentprime.io/advisories/CVE-2026-97482.md)
  `CVE-2026-97482` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [serial: 8250: fix possible ISR soft lockup](https://agentprime.io/advisories/CVE-2026-97481.md)
  `CVE-2026-97481` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [tty: serial: 8250: protect against NULL uart->port.dev in register](https://agentprime.io/advisories/CVE-2026-97480.md)
  `CVE-2026-97480` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [driver core: Avoid warning when removing a device while its supplier is unbinding](https://agentprime.io/advisories/CVE-2026-97479.md)
  `CVE-2026-97479` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [virt: acrn: Fix irqfd use-after-free during eventfd shutdown](https://agentprime.io/advisories/CVE-2026-97478.md)
  `CVE-2026-97478` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026
- [RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind()](https://agentprime.io/advisories/CVE-2026-97477.md)
  `CVE-2026-97477` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [rds: filter RDS_INFO\_\* getsockopt by caller's netns](https://agentprime.io/advisories/CVE-2026-97476.md)
  `CVE-2026-97476` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [thermal/drivers/tegra/soctherma: Switch to devm cooling device registration](https://agentprime.io/advisories/CVE-2026-97475.md)
  `CVE-2026-97475` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: iwlwifi: mld: purge async notifications upon nic error](https://agentprime.io/advisories/CVE-2026-97474.md)
  `CVE-2026-97474` · CVE record: Linux Linux · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2026
- [powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()](https://agentprime.io/advisories/CVE-2026-97473.md)
  `CVE-2026-97473` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [ipv6: addrconf: fix temp address generation after prefix deprecation](https://agentprime.io/advisories/CVE-2026-97472.md)
  `CVE-2026-97472` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [ACPICA: Fix condition check in acpi_ps_parse_loop()](https://agentprime.io/advisories/CVE-2026-97456.md)
  `CVE-2026-97456` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()](https://agentprime.io/advisories/CVE-2026-97455.md)
  `CVE-2026-97455` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 24 Sept 2026
- [ACPICA: add boundary checks in acpi_ps_get_next_field()](https://agentprime.io/advisories/CVE-2026-97454.md)
  `CVE-2026-97454` · CVE record: Linux Linux · CVSS 7.7 High · Not analysed yet · Published 24 Sept 2026
- [ACPICA: validate byte_count in acpi_ps_get_next_package_length()](https://agentprime.io/advisories/CVE-2026-97453.md)
  `CVE-2026-97453` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [ACPICA: Prevent adding invalid references](https://agentprime.io/advisories/CVE-2026-97452.md)
  `CVE-2026-97452` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 24 Sept 2026
- [ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)](https://agentprime.io/advisories/CVE-2026-97451.md)
  `CVE-2026-97451` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 24 Sept 2026
- [ACPICA: validate handler object type in two places](https://agentprime.io/advisories/CVE-2026-97450.md)
  `CVE-2026-97450` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 24 Sept 2026
- [ACPICA: Add package limit checks in parser functions](https://agentprime.io/advisories/CVE-2026-97449.md)
  `CVE-2026-97449` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [ACPICA: Add validation for node in acpi_ns_build_normalized_path()](https://agentprime.io/advisories/CVE-2026-97448.md)
  `CVE-2026-97448` · CVE record: Linux Linux · CVSS 7.7 High · Not analysed yet · Published 24 Sept 2026
- [ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op()](https://agentprime.io/advisories/CVE-2026-97447.md)
  `CVE-2026-97447` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()](https://agentprime.io/advisories/CVE-2026-97446.md)
  `CVE-2026-97446` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources()](https://agentprime.io/advisories/CVE-2026-97445.md)
  `CVE-2026-97445` · CVE record: Linux Linux · CVSS 7.7 High · Not analysed yet · Published 24 Sept 2026
- [ACPICA: add boundary checks in two places](https://agentprime.io/advisories/CVE-2026-97444.md)
  `CVE-2026-97444` · CVE record: Linux Linux · CVSS 7.7 High · Not analysed yet · Published 24 Sept 2026
- [perf/ftrace: Fix WARNING in \_\_unregister_ftrace_function](https://agentprime.io/advisories/CVE-2026-97443.md)
  `CVE-2026-97443` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi](https://agentprime.io/advisories/CVE-2026-97442.md)
  `CVE-2026-97442` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 24 Sept 2026
- [ata: ahci: fail probe if BAR too small for claimed ports](https://agentprime.io/advisories/CVE-2026-97441.md)
  `CVE-2026-97441` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [net: qrtr: fix node refcount leak on ctrl packet alloc failure](https://agentprime.io/advisories/CVE-2026-97440.md)
  `CVE-2026-97440` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib](https://agentprime.io/advisories/CVE-2026-97439.md)
  `CVE-2026-97439` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [fs/ntfs3: validate index entry key bounds](https://agentprime.io/advisories/CVE-2026-97438.md)
  `CVE-2026-97438` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 24 Sept 2026
- [ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e()](https://agentprime.io/advisories/CVE-2026-97437.md)
  `CVE-2026-97437` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 24 Sept 2026
- [dpaa2-switch: rework FDB management on the bridge leave path](https://agentprime.io/advisories/CVE-2026-97436.md)
  `CVE-2026-97436` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [net: dsa: sja1105: flower: reject cross-chip redirect](https://agentprime.io/advisories/CVE-2026-97435.md)
  `CVE-2026-97435` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [dpaa2-switch: fix handling of NAPI on the remove path](https://agentprime.io/advisories/CVE-2026-97434.md)
  `CVE-2026-97434` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [nvme: validate FDP configuration descriptor sizes](https://agentprime.io/advisories/CVE-2026-97433.md)
  `CVE-2026-97433` · CVE record: Linux Linux · CVSS 8.2 High · Not analysed yet · Published 24 Sept 2026
- [wifi: iwlwifi: mvm: fix P2P-Device binding handling](https://agentprime.io/advisories/CVE-2026-97432.md)
  `CVE-2026-97432` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [drm/amd/display: Avoid DPMS-on for phantom stream](https://agentprime.io/advisories/CVE-2026-97431.md)
  `CVE-2026-97431` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [xhci: Prevent queuing new commands if xhci is inaccessible](https://agentprime.io/advisories/CVE-2026-97430.md)
  `CVE-2026-97430` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [drm/amdkfd: fix UAF race in destroy_queue_cpsch](https://agentprime.io/advisories/CVE-2026-97429.md)
  `CVE-2026-97429` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026
- [drm/amdgpu: harden FRU PIA parsing with bounded helpers](https://agentprime.io/advisories/CVE-2026-97428.md)
  `CVE-2026-97428` · CVE record: Linux Linux · CVSS 7.7 High · Not analysed yet · Published 24 Sept 2026
- [drm/amd/pm: bound pp_dpm_set_pp_table() memcpy](https://agentprime.io/advisories/CVE-2026-97427.md)
  `CVE-2026-97427` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error](https://agentprime.io/advisories/CVE-2026-97426.md)
  `CVE-2026-97426` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [drm/amdgpu: fix buffer overflow during vBIOS update](https://agentprime.io/advisories/CVE-2026-97425.md)
  `CVE-2026-97425` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq](https://agentprime.io/advisories/CVE-2026-97424.md)
  `CVE-2026-97424` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [cxl/region: Validate partition index before array access](https://agentprime.io/advisories/CVE-2026-97423.md)
  `CVE-2026-97423` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [drm/amdkfd: fix SMI event cross-process information leak](https://agentprime.io/advisories/CVE-2026-97422.md)
  `CVE-2026-97422` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()](https://agentprime.io/advisories/CVE-2026-97421.md)
  `CVE-2026-97421` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026
- [bpf: NUL-terminate replaced sysctl value](https://agentprime.io/advisories/CVE-2026-97420.md)
  `CVE-2026-97420` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [hsr: broadcast netlink notifications in the device's net namespace](https://agentprime.io/advisories/CVE-2026-97419.md)
  `CVE-2026-97419` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [ALSA: es18xx: check control allocation before private data setup](https://agentprime.io/advisories/CVE-2026-97418.md)
  `CVE-2026-97418` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()](https://agentprime.io/advisories/CVE-2026-97417.md)
  `CVE-2026-97417` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 24 Sept 2026
- [btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()](https://agentprime.io/advisories/CVE-2026-97416.md)
  `CVE-2026-97416` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF](https://agentprime.io/advisories/CVE-2026-97415.md)
  `CVE-2026-97415` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTI0VDE2OjAzOjIyLjc4MDAwMFoiLCJDVkUtMjAyNi05NzQxNSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTI0VDE2OjA0OjM4LjYyMzAwMFoiLCJDVkUtMjAyNi05NzQ5MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTI0VDE2OjA0OjM4LjYyMzAwMFoiLCJDVkUtMjAyNi05NzQ5MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.
