# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend()](https://agentprime.io/advisories/CVE-2026-97414.md)
  `CVE-2026-97414` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [RDMA/rtrs-srv: Fix integer underflow in process_read and process_write](https://agentprime.io/advisories/CVE-2026-97413.md)
  `CVE-2026-97413` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2026
- [pds_core: quiesce DMA before freeing resources](https://agentprime.io/advisories/CVE-2026-97412.md)
  `CVE-2026-97412` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [net: ibm: emac: mal: fix potential system hang in mal_remove()](https://agentprime.io/advisories/CVE-2026-97411.md)
  `CVE-2026-97411` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [netconsole: take target_cleanup_list_lock in drop_netconsole_target()](https://agentprime.io/advisories/CVE-2026-97410.md)
  `CVE-2026-97410` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [nvme-fc: Do not cancel requests in io target before it is initialized](https://agentprime.io/advisories/CVE-2026-97409.md)
  `CVE-2026-97409` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 24 Sept 2026
- [Bluetooth: L2CAP: validate connectionless PSM length](https://agentprime.io/advisories/CVE-2026-97408.md)
  `CVE-2026-97408` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt](https://agentprime.io/advisories/CVE-2026-97407.md)
  `CVE-2026-97407` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [net: stmmac: xgmac2: disable RBUE in default RX interrupt mask](https://agentprime.io/advisories/CVE-2026-93830.md)
  `CVE-2026-93830` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 24 Sept 2026
- [smb: client: fix races in cifsd thread creation](https://agentprime.io/advisories/CVE-2026-93829.md)
  `CVE-2026-93829` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [exfat: fix handling of damaged volume in exfat_create_upcase_table()](https://agentprime.io/advisories/CVE-2026-93828.md)
  `CVE-2026-93828` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [virtio-fs: avoid double-free on failed queue setup](https://agentprime.io/advisories/CVE-2026-93827.md)
  `CVE-2026-93827` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 24 Sept 2026
- [HID: hidpp: fix potential UAF in hidpp_connect_event()](https://agentprime.io/advisories/CVE-2026-93826.md)
  `CVE-2026-93826` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 24 Sept 2026
- [spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()](https://agentprime.io/advisories/CVE-2026-93825.md)
  `CVE-2026-93825` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [tls: reject the combination of TLS and sockmap](https://agentprime.io/advisories/CVE-2026-93824.md)
  `CVE-2026-93824` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl](https://agentprime.io/advisories/CVE-2026-93823.md)
  `CVE-2026-93823` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [PCI: iproc: Protect root bus removal with rescan lock](https://agentprime.io/advisories/CVE-2026-93822.md)
  `CVE-2026-93822` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [PCI: altera: Protect root bus removal with rescan lock](https://agentprime.io/advisories/CVE-2026-93821.md)
  `CVE-2026-93821` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [PCI: rockchip: Protect root bus removal with rescan lock](https://agentprime.io/advisories/CVE-2026-93820.md)
  `CVE-2026-93820` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [PCI: mediatek: Protect root bus removal with rescan lock](https://agentprime.io/advisories/CVE-2026-93819.md)
  `CVE-2026-93819` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [PCI: plda: Protect root bus removal with rescan lock](https://agentprime.io/advisories/CVE-2026-93818.md)
  `CVE-2026-93818` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [perf: Fix addr_filter_ranges lifetime](https://agentprime.io/advisories/CVE-2026-93817.md)
  `CVE-2026-93817` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026
- [f2fs: validate inline dentry name lengths before conversion](https://agentprime.io/advisories/CVE-2026-93816.md)
  `CVE-2026-93816` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 24 Sept 2026
- [net: au1000: move free_irq out of the close-time spinlocked section](https://agentprime.io/advisories/CVE-2026-93815.md)
  `CVE-2026-93815` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [spi: core: Abort active target transfer on controller suspend](https://agentprime.io/advisories/CVE-2026-93814.md)
  `CVE-2026-93814` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [btrfs: tree-checker: validate INODE_REF's namelen](https://agentprime.io/advisories/CVE-2026-93813.md)
  `CVE-2026-93813` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026
- [ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr](https://agentprime.io/advisories/CVE-2026-93812.md)
  `CVE-2026-93812` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling](https://agentprime.io/advisories/CVE-2026-93811.md)
  `CVE-2026-93811` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [cachefiles: Fix double fput](https://agentprime.io/advisories/CVE-2026-93810.md)
  `CVE-2026-93810` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 24 Sept 2026
- [drm/amdgpu: flush pending RCU callbacks on module unload](https://agentprime.io/advisories/CVE-2026-93809.md)
  `CVE-2026-93809` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [ALSA: usb-audio: caiaq: validate EP1 reply lengths](https://agentprime.io/advisories/CVE-2026-93808.md)
  `CVE-2026-93808` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers](https://agentprime.io/advisories/CVE-2026-93807.md)
  `CVE-2026-93807` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: cfg80211: validate assoc response length before status and IE access](https://agentprime.io/advisories/CVE-2026-93806.md)
  `CVE-2026-93806` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 24 Sept 2026
- [wifi: cfg80211: validate rx/tx MLME callback frame lengths before access](https://agentprime.io/advisories/CVE-2026-93805.md)
  `CVE-2026-93805` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: mac80211: ibss: wait for in-flight TX on disconnect](https://agentprime.io/advisories/CVE-2026-93804.md)
  `CVE-2026-93804` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: libipw: fix key index receive bound checks](https://agentprime.io/advisories/CVE-2026-93803.md)
  `CVE-2026-93803` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: rsi: validate beacon length before fixed buffer copy](https://agentprime.io/advisories/CVE-2026-93802.md)
  `CVE-2026-93802` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [smb/client: zero-initialize stack-allocated cifs_open_info_data](https://agentprime.io/advisories/CVE-2026-93801.md)
  `CVE-2026-93801` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 24 Sept 2026
- [btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()](https://agentprime.io/advisories/CVE-2026-93800.md)
  `CVE-2026-93800` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: iwlwifi: mvm: validate sta_id in BA window status notif](https://agentprime.io/advisories/CVE-2026-93799.md)
  `CVE-2026-93799` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 24 Sept 2026
- [btrfs: fix reloc root cleanup in merge_reloc_roots()](https://agentprime.io/advisories/CVE-2026-93798.md)
  `CVE-2026-93798` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026
- [wifi: iwlwifi: mvm: fix an off-by-1 boundary check](https://agentprime.io/advisories/CVE-2026-93797.md)
  `CVE-2026-93797` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: iwlwifi: pcie: null RX pointers after free](https://agentprime.io/advisories/CVE-2026-93796.md)
  `CVE-2026-93796` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 24 Sept 2026
- [blk-cgroup: fix leaks and online flag on radix_tree_insert failure](https://agentprime.io/advisories/CVE-2026-93795.md)
  `CVE-2026-93795` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [smb/client: flush dirty data before punching a hole](https://agentprime.io/advisories/CVE-2026-93794.md)
  `CVE-2026-93794` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: iwlwifi: mvm: validate TX_CMD response layout](https://agentprime.io/advisories/CVE-2026-93793.md)
  `CVE-2026-93793` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 24 Sept 2026
- [wifi: iwlwifi: mvm: fix a possible underflow](https://agentprime.io/advisories/CVE-2026-93792.md)
  `CVE-2026-93792` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: iwlwifi: mvm: add a check on the tid coming from the firmware](https://agentprime.io/advisories/CVE-2026-93791.md)
  `CVE-2026-93791` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif](https://agentprime.io/advisories/CVE-2026-93790.md)
  `CVE-2026-93790` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 24 Sept 2026
- [wifi: iwlwifi: bound aligned TLV advance in FW parser](https://agentprime.io/advisories/CVE-2026-93789.md)
  `CVE-2026-93789` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: iwlwifi: acpi: validate WGDS table revision index](https://agentprime.io/advisories/CVE-2026-93788.md)
  `CVE-2026-93788` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [smb: client: bound dirent name against end of SMB response in cifs_filldir](https://agentprime.io/advisories/CVE-2026-93787.md)
  `CVE-2026-93787` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 24 Sept 2026
- [ksmbd: preserve VFS inherited POSIX ACL mask](https://agentprime.io/advisories/CVE-2026-93786.md)
  `CVE-2026-93786` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 24 Sept 2026
- [cifs: validate idmap key payload length](https://agentprime.io/advisories/CVE-2026-93785.md)
  `CVE-2026-93785` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()](https://agentprime.io/advisories/CVE-2026-93784.md)
  `CVE-2026-93784` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame](https://agentprime.io/advisories/CVE-2026-93783.md)
  `CVE-2026-93783` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [vhost-scsi: flush backend after device ioctls](https://agentprime.io/advisories/CVE-2026-93782.md)
  `CVE-2026-93782` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026
- [scsi: core: Do not block on tag allocation in scsi_eh_lock_door()](https://agentprime.io/advisories/CVE-2026-93781.md)
  `CVE-2026-93781` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state](https://agentprime.io/advisories/CVE-2026-93288.md)
  `CVE-2026-93288` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026
- [i2c: smbus: reject oversized block transfers in the common path](https://agentprime.io/advisories/CVE-2026-93287.md)
  `CVE-2026-93287` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTI0VDE2OjAyOjExLjI5NjAwMFoiLCJDVkUtMjAyNi05MzI4NyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTI0VDE2OjAzOjIyLjc4MDAwMFoiLCJDVkUtMjAyNi05NzQxNSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTI0VDE2OjAzOjIyLjc4MDAwMFoiLCJDVkUtMjAyNi05NzQxNSJd>. Everything for agents: <https://agentprime.io/llms.txt>.