# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [netfilter: cttimeout: prevent UAF during module unload](https://agentprime.io/advisories/CVE-2026-97609.md)
  `CVE-2026-97609` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 25 Sept 2026
- [netfilter: nf_log: unregister loggers before per-net teardown](https://agentprime.io/advisories/CVE-2026-97608.md)
  `CVE-2026-97608` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 25 Sept 2026
- [vdpa: ifcvf: Put device on unsupported feature error](https://agentprime.io/advisories/CVE-2026-97607.md)
  `CVE-2026-97607` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [fs: autofs: fix memory leak in autofs_fill_super()](https://agentprime.io/advisories/CVE-2026-97606.md)
  `CVE-2026-97606` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [erofs: preserve LZMA decoders on resize failure](https://agentprime.io/advisories/CVE-2026-97605.md)
  `CVE-2026-97605` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [fbdev: vfb: defer cleanup until the last reference](https://agentprime.io/advisories/CVE-2026-97604.md)
  `CVE-2026-97604` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [idpf: disable DIM work before freeing q_vectors](https://agentprime.io/advisories/CVE-2026-97603.md)
  `CVE-2026-97603` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [inet: frags: invalidate queues before flushing them](https://agentprime.io/advisories/CVE-2026-97602.md)
  `CVE-2026-97602` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink](https://agentprime.io/advisories/CVE-2026-97601.md)
  `CVE-2026-97601` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ieee802154: cc2520: fix FIFOP work use-after-free](https://agentprime.io/advisories/CVE-2026-97600.md)
  `CVE-2026-97600` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ieee802154: hwsim: serialize pib updates to fix double-free](https://agentprime.io/advisories/CVE-2026-97599.md)
  `CVE-2026-97599` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ipv4: fib: bound automatic table ID allocation](https://agentprime.io/advisories/CVE-2026-97598.md)
  `CVE-2026-97598` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ipv6: flowlabel: cap duplicate leases per socket](https://agentprime.io/advisories/CVE-2026-97597.md)
  `CVE-2026-97597` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ipvs: reject invalid states in connection template sync records](https://agentprime.io/advisories/CVE-2026-97596.md)
  `CVE-2026-97596` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [mac802154: fix use-after-free of sdata via queued RX frames](https://agentprime.io/advisories/CVE-2026-97595.md)
  `CVE-2026-97595` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2026
- [landlock: Fix use-after-free of the source's parent directory](https://agentprime.io/advisories/CVE-2026-97594.md)
  `CVE-2026-97594` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX](https://agentprime.io/advisories/CVE-2026-97593.md)
  `CVE-2026-97593` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm](https://agentprime.io/advisories/CVE-2026-97592.md)
  `CVE-2026-97592` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine](https://agentprime.io/advisories/CVE-2026-97591.md)
  `CVE-2026-97591` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [s390/crypto: Fix missing scrub of temp buffers with PAES algorithm](https://agentprime.io/advisories/CVE-2026-97590.md)
  `CVE-2026-97590` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [s390/crypto: Fix wrong return code to engine in asynch callbacks](https://agentprime.io/advisories/CVE-2026-97589.md)
  `CVE-2026-97589` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 25 Sept 2026
- [s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly](https://agentprime.io/advisories/CVE-2026-97588.md)
  `CVE-2026-97588` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [perf: RISC-V: store available counter mask as bitmap](https://agentprime.io/advisories/CVE-2026-97587.md)
  `CVE-2026-97587` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [afs: Fix missing kunmap in afs_dir_search_bucket()](https://agentprime.io/advisories/CVE-2026-97586.md)
  `CVE-2026-97586` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [afs: Fix double-unmap of directory block](https://agentprime.io/advisories/CVE-2026-97585.md)
  `CVE-2026-97585` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [afs: Fix incorrect free in candidate cleanup in afs_lookup_server()](https://agentprime.io/advisories/CVE-2026-97584.md)
  `CVE-2026-97584` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [afs: Clear stale peer app data after address list changes](https://agentprime.io/advisories/CVE-2026-97583.md)
  `CVE-2026-97583` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2026
- [hwmon: (gpio-fan) Fix use-after-free in alarm work](https://agentprime.io/advisories/CVE-2026-97582.md)
  `CVE-2026-97582` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity](https://agentprime.io/advisories/CVE-2026-97581.md)
  `CVE-2026-97581` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [media: rkvdec: bound HEVC tile loops and PPS id to the array capacity](https://agentprime.io/advisories/CVE-2026-97580.md)
  `CVE-2026-97580` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity](https://agentprime.io/advisories/CVE-2026-97579.md)
  `CVE-2026-97579` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer](https://agentprime.io/advisories/CVE-2026-97578.md)
  `CVE-2026-97578` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity](https://agentprime.io/advisories/CVE-2026-97577.md)
  `CVE-2026-97577` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [media: v4l2-ctrls: validate HEVC tile counts](https://agentprime.io/advisories/CVE-2026-97576.md)
  `CVE-2026-97576` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [media: v4l2-ctrls: validate AV1 tile counts](https://agentprime.io/advisories/CVE-2026-97575.md)
  `CVE-2026-97575` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [bnxt_en: Don't free the live ring's TPA state on queue restart failure](https://agentprime.io/advisories/CVE-2026-97574.md)
  `CVE-2026-97574` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()](https://agentprime.io/advisories/CVE-2026-97573.md)
  `CVE-2026-97573` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 25 Sept 2026
- [bnxt_en: Propagate RX ring init failures in bnxt_init_nic()](https://agentprime.io/advisories/CVE-2026-97572.md)
  `CVE-2026-97572` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc()](https://agentprime.io/advisories/CVE-2026-97571.md)
  `CVE-2026-97571` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bnxt_en: Bound SW TPA IDs to prevent crashes](https://agentprime.io/advisories/CVE-2026-97570.md)
  `CVE-2026-97570` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 25 Sept 2026
- [bnxt_en: Prevent queue stop with deferred completions](https://agentprime.io/advisories/CVE-2026-97569.md)
  `CVE-2026-97569` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [mptcp: syncookies: remember the request backup flag](https://agentprime.io/advisories/CVE-2026-97568.md)
  `CVE-2026-97568` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [mptcp: prevent race between disconnect() and rtx](https://agentprime.io/advisories/CVE-2026-97567.md)
  `CVE-2026-97567` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0](https://agentprime.io/advisories/CVE-2026-97566.md)
  `CVE-2026-97566` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [smb: client: reject short READ responses in CIFSSMBRead()](https://agentprime.io/advisories/CVE-2026-97565.md)
  `CVE-2026-97565` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [smb: client: reject userspace cifs.idmap descriptions](https://agentprime.io/advisories/CVE-2026-97564.md)
  `CVE-2026-97564` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [smb: client: reject out-of-bounds DataOffset in CIFSSMBRead()](https://agentprime.io/advisories/CVE-2026-97563.md)
  `CVE-2026-97563` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [smb: client: pin DFS superblock in iterator callback](https://agentprime.io/advisories/CVE-2026-97562.md)
  `CVE-2026-97562` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2026
- [smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid](https://agentprime.io/advisories/CVE-2026-97561.md)
  `CVE-2026-97561` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [smb: client: fix one-byte OOB read in smb2_parse_native_symlink()](https://agentprime.io/advisories/CVE-2026-97560.md)
  `CVE-2026-97560` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [smb: client: fail DACL rewrite when the new DACL exceeds 64K](https://agentprime.io/advisories/CVE-2026-97559.md)
  `CVE-2026-97559` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [smb: client: fix cifsFileInfo reference leak in deferred close](https://agentprime.io/advisories/CVE-2026-97558.md)
  `CVE-2026-97558` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [smb: client: avoid leaking refcount in cifs_queue_oplock_break()](https://agentprime.io/advisories/CVE-2026-97557.md)
  `CVE-2026-97557` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2026
- [smb: client: avoid leaking refcount when cifs_sb_tlink() fails](https://agentprime.io/advisories/CVE-2026-97556.md)
  `CVE-2026-97556` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [smb: client: fix heap overflow in DACL owner/group rewrite](https://agentprime.io/advisories/CVE-2026-97555.md)
  `CVE-2026-97555` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 25 Sept 2026
- [smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()](https://agentprime.io/advisories/CVE-2026-97554.md)
  `CVE-2026-97554` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [xfs: lock the healthmon when inserting unmount event](https://agentprime.io/advisories/CVE-2026-97553.md)
  `CVE-2026-97553` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [xfs: initialise error in xfs_defer_finish_one()](https://agentprime.io/advisories/CVE-2026-97552.md)
  `CVE-2026-97552` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [xfs: initialise args->total for parent pointer updates](https://agentprime.io/advisories/CVE-2026-97551.md)
  `CVE-2026-97551` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [xfs: fix unit conversions in per_binval computation](https://agentprime.io/advisories/CVE-2026-97550.md)
  `CVE-2026-97550` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTI1VDEwOjIxOjQzLjQ1MDAwMFoiLCJDVkUtMjAyNi05NzU1MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTI1VDEwOjIyOjIwLjIyODAwMFoiLCJDVkUtMjAyNi05NzYxMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTI1VDEwOjIyOjIwLjIyODAwMFoiLCJDVkUtMjAyNi05NzYxMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.