# Linux kernel.

Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [x86/amd_node: Fix potential NULL pointer dereference](https://agentprime.io/advisories/CVE-2026-97947.md)
  `CVE-2026-97947` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [x86/amd_node: Fix PCI device reference counting in amd_smn_init()](https://agentprime.io/advisories/CVE-2026-97946.md)
  `CVE-2026-97946` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [x86/mm: Fix user-space data loss with MADV_FREE and THP](https://agentprime.io/advisories/CVE-2026-97945.md)
  `CVE-2026-97945` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash()](https://agentprime.io/advisories/CVE-2026-97944.md)
  `CVE-2026-97944` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF](https://agentprime.io/advisories/CVE-2026-97943.md)
  `CVE-2026-97943` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [x86/alternatives: Exclude text poking against change_page_attr()](https://agentprime.io/advisories/CVE-2026-97942.md)
  `CVE-2026-97942` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [mm/slab: take n->list_lock in \_\_slab_try_return_freelist() to avoid race](https://agentprime.io/advisories/CVE-2026-97941.md)
  `CVE-2026-97941` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [ipv6: fix fib6 walker UAF on seq stop](https://agentprime.io/advisories/CVE-2026-97940.md)
  `CVE-2026-97940` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [ipmr: account multicast table and route memory](https://agentprime.io/advisories/CVE-2026-97939.md)
  `CVE-2026-97939` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [reboot: fix cad_pid use-after-free race](https://agentprime.io/advisories/CVE-2026-97938.md)
  `CVE-2026-97938` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ftrace: fork: Initialize function graph state before copy_exec_state()](https://agentprime.io/advisories/CVE-2026-97937.md)
  `CVE-2026-97937` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [tracing: Fix memory corruption from the histogram stacktrace modifier](https://agentprime.io/advisories/CVE-2026-97936.md)
  `CVE-2026-97936` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [tracing: Set the trace clock before registering the histogram trigger](https://agentprime.io/advisories/CVE-2026-97935.md)
  `CVE-2026-97935` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [tracing: Fix memory corruption from a "STACKTRACE" histogram key](https://agentprime.io/advisories/CVE-2026-97934.md)
  `CVE-2026-97934` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [tracing: Take trace_array reference when opening a tracer options file](https://agentprime.io/advisories/CVE-2026-97933.md)
  `CVE-2026-97933` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [tracing: Don't dereference trace_event_file in deferred trigger free](https://agentprime.io/advisories/CVE-2026-97932.md)
  `CVE-2026-97932` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ALSA: us122l: Prevent write upgrades for read mappings](https://agentprime.io/advisories/CVE-2026-97931.md)
  `CVE-2026-97931` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 25 Sept 2026
- [ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf](https://agentprime.io/advisories/CVE-2026-97930.md)
  `CVE-2026-97930` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ALSA: usbusx2y: validate URB actual_length in interrupt callback](https://agentprime.io/advisories/CVE-2026-97929.md)
  `CVE-2026-97929` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [drm/amdgpu: skip the VMID 0 flush for VRAM](https://agentprime.io/advisories/CVE-2026-97928.md)
  `CVE-2026-97928` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ufs: create the root dentry after loading cylinder metadata](https://agentprime.io/advisories/CVE-2026-97927.md)
  `CVE-2026-97927` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ufs: validate cylinder group metadata before caching it](https://agentprime.io/advisories/CVE-2026-97926.md)
  `CVE-2026-97926` · CVE record: Linux Linux · CVSS 7.0 High · Not analysed yet · Published 25 Sept 2026
- [tick/broadcast: Plug clockevents replacement race](https://agentprime.io/advisories/CVE-2026-97925.md)
  `CVE-2026-97925` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [tracing/user_events: Don't destroy fields when event removal fails](https://agentprime.io/advisories/CVE-2026-97924.md)
  `CVE-2026-97924` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [tracing: Free histogram the var ref when its initialization fails](https://agentprime.io/advisories/CVE-2026-97923.md)
  `CVE-2026-97923` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [tracing: Free histogram var refs regardless of how often they are referenced](https://agentprime.io/advisories/CVE-2026-97922.md)
  `CVE-2026-97922` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [tracing: Free histogram the field rejected for a bad modifier](https://agentprime.io/advisories/CVE-2026-97921.md)
  `CVE-2026-97921` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [tracing: Keep the entry count when the histogram stats allocation fails](https://agentprime.io/advisories/CVE-2026-97920.md)
  `CVE-2026-97920` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [tracing: Take the reference before publishing the named histogram trigger](https://agentprime.io/advisories/CVE-2026-97919.md)
  `CVE-2026-97919` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [tracing: Undo the registration when enabling the histogram trigger fails](https://agentprime.io/advisories/CVE-2026-97918.md)
  `CVE-2026-97918` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr](https://agentprime.io/advisories/CVE-2026-97917.md)
  `CVE-2026-97917` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [accel/ivpu: Validate firmware log buffer metadata](https://agentprime.io/advisories/CVE-2026-97916.md)
  `CVE-2026-97916` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [accel/ivpu: Limit firmware log name prints to field size](https://agentprime.io/advisories/CVE-2026-97915.md)
  `CVE-2026-97915` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [accel: ethosu: Fix ethosu_job_open() return value](https://agentprime.io/advisories/CVE-2026-97914.md)
  `CVE-2026-97914` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [accel: ethosu: Ensure cmd stream ends with a stop op](https://agentprime.io/advisories/CVE-2026-97913.md)
  `CVE-2026-97913` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [accel: ethosu: Ensure SRAM size is 0 on mapping failure](https://agentprime.io/advisories/CVE-2026-97912.md)
  `CVE-2026-97912` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [accel: ethosu: Ensure SRAM region size matches job](https://agentprime.io/advisories/CVE-2026-97911.md)
  `CVE-2026-97911` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [ASoC: sprd: validate compress buffer sizes against fixed allocations](https://agentprime.io/advisories/CVE-2026-97910.md)
  `CVE-2026-97910` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [ASoC: sti: initialize IRQ lock before requesting IRQ](https://agentprime.io/advisories/CVE-2026-97909.md)
  `CVE-2026-97909` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev](https://agentprime.io/advisories/CVE-2026-97908.md)
  `CVE-2026-97908` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [Bluetooth: btrtl: Don't leak return code when parsing firmware format v2](https://agentprime.io/advisories/CVE-2026-97907.md)
  `CVE-2026-97907` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [bootconfig: Fix integer overflow in initrd size check](https://agentprime.io/advisories/CVE-2026-97906.md)
  `CVE-2026-97906` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [cpufreq: zero-initialize policy cpumask before sysfs publication](https://agentprime.io/advisories/CVE-2026-97905.md)
  `CVE-2026-97905` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [cpufreq: initialize policy rwsem before sysfs publication](https://agentprime.io/advisories/CVE-2026-97904.md)
  `CVE-2026-97904` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [exit: hold a reference to thread_pid across proc_flush_pid](https://agentprime.io/advisories/CVE-2026-97903.md)
  `CVE-2026-97903` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [fs: don't return -EINVAL for successful nested thaw](https://agentprime.io/advisories/CVE-2026-97902.md)
  `CVE-2026-97902` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [genetlink: pin family module during policy dump](https://agentprime.io/advisories/CVE-2026-97901.md)
  `CVE-2026-97901` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [drm/drm_exec: fix up contended obj when num_objects is 0](https://agentprime.io/advisories/CVE-2026-97900.md)
  `CVE-2026-97900` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [drm/i915: Fix memory leak in query_perf_config_list()](https://agentprime.io/advisories/CVE-2026-97899.md)
  `CVE-2026-97899` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [drm/rockchip: analogix_dp: fix unchecked bound endpoint name length](https://agentprime.io/advisories/CVE-2026-97621.md)
  `CVE-2026-97621` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches](https://agentprime.io/advisories/CVE-2026-97620.md)
  `CVE-2026-97620` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [io_uring/rw: end write accounting from ->ki_complete](https://agentprime.io/advisories/CVE-2026-97619.md)
  `CVE-2026-97619` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [ring-buffer: Check resize_disabled before publishing the new subbuf order](https://agentprime.io/advisories/CVE-2026-97617.md)
  `CVE-2026-97617` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net/sched: act_api: release all action references on NEWACTION failure](https://agentprime.io/advisories/CVE-2026-97616.md)
  `CVE-2026-97616` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: bridge: use option bits for CFM/MRP frame handlers](https://agentprime.io/advisories/CVE-2026-97615.md)
  `CVE-2026-97615` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: dsa: tag_brcm: legacy FCS: request needed tailroom](https://agentprime.io/advisories/CVE-2026-97614.md)
  `CVE-2026-97614` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: mana: Reserve extra CQ slot for the fence completion CQE](https://agentprime.io/advisories/CVE-2026-97613.md)
  `CVE-2026-97613` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026
- [net: mpls: clear inner_protocol when the last label is popped](https://agentprime.io/advisories/CVE-2026-97612.md)
  `CVE-2026-97612` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [net: openvswitch: fix use-after-free of the flow table mask array](https://agentprime.io/advisories/CVE-2026-97611.md)
  `CVE-2026-97611` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026
- [netfs: Fix uninitialized return value in netfs_unbuffered_write()](https://agentprime.io/advisories/CVE-2026-97610.md)
  `CVE-2026-97610` · CVE record: Linux Linux · No CVSS score · Not analysed yet · Published 25 Sept 2026

Newest: <https://agentprime.io/advisories/technology/linux-kernel.md>
Older: <https://agentprime.io/advisories/technology/linux-kernel.md?cursor=WyIyMDI2LTA5LTI1VDEwOjIyOjIwLjIyODAwMFoiLCJDVkUtMjAyNi05NzYxMCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=linux-kernel&cursor=WyIyMDI2LTA5LTI1VDEwOjIyOjU3Ljc1NzAwMFoiLCJDVkUtMjAyNi05Nzk0OCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/linux-kernel/?cursor=WyIyMDI2LTA5LTI1VDEwOjIyOjU3Ljc1NzAwMFoiLCJDVkUtMjAyNi05Nzk0OCJd>. Everything for agents: <https://agentprime.io/llms.txt>.