# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [xfs: fix under-reservation of blocks when repairing sf directories](https://agentprime.io/advisories/CVE-2026-97549.md)
  `CVE-2026-97549` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [xfs: fix the rtrmap and rtrefcount \_maxlevels_ondisk functions](https://agentprime.io/advisories/CVE-2026-97548.md)
  `CVE-2026-97548` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN](https://agentprime.io/advisories/CVE-2026-97547.md)
  `CVE-2026-97547` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [xfs: don't spin forever on zero-length dirents when salvaging them](https://agentprime.io/advisories/CVE-2026-97546.md)
  `CVE-2026-97546` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails](https://agentprime.io/advisories/CVE-2026-97545.md)
  `CVE-2026-97545` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [xfs: don't leak dqacct if rhashtable insertion fails](https://agentprime.io/advisories/CVE-2026-97544.md)
  `CVE-2026-97544` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [xfs: destroy seen inode bitmap when we fail to add a dirpath](https://agentprime.io/advisories/CVE-2026-97543.md)
  `CVE-2026-97543` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [xfs: bail out on bitmap errors in xrep_agfl_fill](https://agentprime.io/advisories/CVE-2026-97542.md)
  `CVE-2026-97542` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [wifi: ath9k_htc: don't store usb_device_id](https://agentprime.io/advisories/CVE-2026-97541.md)
  `CVE-2026-97541` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: usb: pegasus: don't rely on id table pointer arithmetic](https://agentprime.io/advisories/CVE-2026-97540.md)
  `CVE-2026-97540` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [usb: xusbatm: don't rely on id table pointer arithmetic](https://agentprime.io/advisories/CVE-2026-97539.md)
  `CVE-2026-97539` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [hwmon: (asus_rog_ryujin) Validate HID report lengths](https://agentprime.io/advisories/CVE-2026-97538.md)
  `CVE-2026-97538` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking](https://agentprime.io/advisories/CVE-2026-97537.md)
  `CVE-2026-97537` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown](https://agentprime.io/advisories/CVE-2026-97536.md)
  `CVE-2026-97536` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2026
- [scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size](https://agentprime.io/advisories/CVE-2026-97535.md)
  `CVE-2026-97535` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [f2fs: accurately adjust free_sections during free_segment_range](https://agentprime.io/advisories/CVE-2026-97534.md)
  `CVE-2026-97534` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF](https://agentprime.io/advisories/CVE-2026-97533.md)
  `CVE-2026-97533` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path](https://agentprime.io/advisories/CVE-2026-97532.md)
  `CVE-2026-97532` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [scsi: qla2xxx: Skip vport under deletion in report ID acquisition](https://agentprime.io/advisories/CVE-2026-97531.md)
  `CVE-2026-97531` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2026
- [scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature](https://agentprime.io/advisories/CVE-2026-97530.md)
  `CVE-2026-97530` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd\[\]](https://agentprime.io/advisories/CVE-2026-97529.md)
  `CVE-2026-97529` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error](https://agentprime.io/advisories/CVE-2026-97528.md)
  `CVE-2026-97528` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 25 Sept 2026
- [scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock](https://agentprime.io/advisories/CVE-2026-97527.md)
  `CVE-2026-97527` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 25 Sept 2026
- [s390/pai: Support CPU hotplug for PMU PAI](https://agentprime.io/advisories/CVE-2026-97526.md)
  `CVE-2026-97526` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [x86/mm/pat: Allocate split page tables as kernel page tables](https://agentprime.io/advisories/CVE-2026-97525.md)
  `CVE-2026-97525` · CVE record: Linux Linux · CVSS 8.2 High · Not analysed yet · Published 25 Sept 2026
- [mptcp: avoid unneeded actions on subflow reset](https://agentprime.io/advisories/CVE-2026-97524.md)
  `CVE-2026-97524` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2026
- [mptcp: close race between scheduler and state change](https://agentprime.io/advisories/CVE-2026-97523.md)
  `CVE-2026-97523` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2026
- [mptcp: fix bad accounting in \_\_mptcp_subflow_push_pending()](https://agentprime.io/advisories/CVE-2026-97522.md)
  `CVE-2026-97522` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [gfs2: fix quota init duplicate scan](https://agentprime.io/advisories/CVE-2026-97521.md)
  `CVE-2026-97521` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [gfs2: move quota_init qc iterator increment](https://agentprime.io/advisories/CVE-2026-97520.md)
  `CVE-2026-97520` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 24 Sept 2026
- [drm/xe: Fix null pointer dereference in devcoredump cleanup](https://agentprime.io/advisories/CVE-2026-97519.md)
  `CVE-2026-97519` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: cfg80211: reject duplicate wiphy cipher suite entries](https://agentprime.io/advisories/CVE-2026-97518.md)
  `CVE-2026-97518` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: nl80211: reject beacons with bad HE operation](https://agentprime.io/advisories/CVE-2026-97517.md)
  `CVE-2026-97517` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result()](https://agentprime.io/advisories/CVE-2026-97516.md)
  `CVE-2026-97516` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845](https://agentprime.io/advisories/CVE-2026-97515.md)
  `CVE-2026-97515` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [media: chips-media: wave5: Fix Reports from Kernel Lock Validator](https://agentprime.io/advisories/CVE-2026-97514.md)
  `CVE-2026-97514` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [media: chips-media: wave5: Release m2m_ctx after Instance Removed from List](https://agentprime.io/advisories/CVE-2026-97513.md)
  `CVE-2026-97513` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026
- [spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM](https://agentprime.io/advisories/CVE-2026-97512.md)
  `CVE-2026-97512` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: mac80211: avoid out-of-bounds access in monitor](https://agentprime.io/advisories/CVE-2026-97511.md)
  `CVE-2026-97511` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [thunderbolt: Release request if tb_cfg_request() fails in \_\_tb_xdomain_response()](https://agentprime.io/advisories/CVE-2026-97510.md)
  `CVE-2026-97510` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [thunderbolt: Keep XDomain reference during the lifetime of a service](https://agentprime.io/advisories/CVE-2026-97509.md)
  `CVE-2026-97509` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 24 Sept 2026
- [thunderbolt: Set tb->root_switch to NULL when domain is stopped](https://agentprime.io/advisories/CVE-2026-97508.md)
  `CVE-2026-97508` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 24 Sept 2026
- [media: dm1105: fix missing error check for dma_alloc_coherent](https://agentprime.io/advisories/CVE-2026-97507.md)
  `CVE-2026-97507` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [crypto: ixp4xx - fix buffer chain unwind on allocation failure](https://agentprime.io/advisories/CVE-2026-97506.md)
  `CVE-2026-97506` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [PCI/sysfs: Add CAP_SYS_ADMIN check to \_\_resource_resize_store()](https://agentprime.io/advisories/CVE-2026-97505.md)
  `CVE-2026-97505` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk](https://agentprime.io/advisories/CVE-2026-97504.md)
  `CVE-2026-97504` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [genirq/proc: Size interrupt directory names for 10-digit interrupt numbers](https://agentprime.io/advisories/CVE-2026-97503.md)
  `CVE-2026-97503` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [mmc: davinci: avoid NULL deref of host->data in IRQ handler](https://agentprime.io/advisories/CVE-2026-97502.md)
  `CVE-2026-97502` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction](https://agentprime.io/advisories/CVE-2026-97501.md)
  `CVE-2026-97501` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: rtw89: phy: check length before parsing PHY status IE](https://agentprime.io/advisories/CVE-2026-97500.md)
  `CVE-2026-97500` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [coresight: perf: Retrieve path and source from event data](https://agentprime.io/advisories/CVE-2026-97499.md)
  `CVE-2026-97499` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction](https://agentprime.io/advisories/CVE-2026-97498.md)
  `CVE-2026-97498` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id](https://agentprime.io/advisories/CVE-2026-97497.md)
  `CVE-2026-97497` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026
- [drm/amdkfd: Fix OOB memory exposure in get_wave_state()](https://agentprime.io/advisories/CVE-2026-97496.md)
  `CVE-2026-97496` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 24 Sept 2026
- [drm/amdkfd: Check bounds on allocate_doorbell](https://agentprime.io/advisories/CVE-2026-97495.md)
  `CVE-2026-97495` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw](https://agentprime.io/advisories/CVE-2026-97494.md)
  `CVE-2026-97494` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [drm/amdgpu: Bound GPIO I2C table entry count from VBIOS](https://agentprime.io/advisories/CVE-2026-97493.md)
  `CVE-2026-97493` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed](https://agentprime.io/advisories/CVE-2026-97492.md)
  `CVE-2026-97492` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [net/rds: Don't sleep inside rds_ib_conn_path_shutdown](https://agentprime.io/advisories/CVE-2026-97491.md)
  `CVE-2026-97491` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026
- [affs: handle set_blocksize failures](https://agentprime.io/advisories/CVE-2026-97490.md)
  `CVE-2026-97490` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 24 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTI0VDE2OjA0OjM4LjYyMzAwMFoiLCJDVkUtMjAyNi05NzQ5MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTI1VDEwOjIxOjQzLjQ1MDAwMFoiLCJDVkUtMjAyNi05NzU1MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTI1VDEwOjIxOjQzLjQ1MDAwMFoiLCJDVkUtMjAyNi05NzU1MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.