CVE-2026-100080

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-100080", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.456Z", "datePublished": "2026-11-06T18:23:01.824Z", "dateUpdated": "2026-11-13T14:17:19.465Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-11-13T14:17:19.465Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen-netback: Fix UAF when reading statistics data\n\nThe network statistic data in the driver is protected by RCU.\nUnfortunately when tearing down the queues after an error during\nconnecting to the frontend (e.g. due to illegal Xenstore data filled\nin by the guest), the statistic data is being freed without\nsynchronizing the RCU state. In case the data is being read via sysfs\nin this phase, access to already freed memory or memory being in new\nuse is possible.\n\nFix that by calling synchronize_net() before freeing the queue data.\n\nThis is XSA-526 / CVE-2026-100080"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/xen-netback/xenbus.c"], "versions": [{"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "4223b33be49ee09acb6f1d26beb4a36dd3b8d63a", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "ab9cdf1291be551da999510b30216a2886074d7a", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "36f858f228e3f955b9336af7f94634747c221518", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "89e534265b62c94749639350200b10370564bb3a", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "6cd611d2abdd8623a554e14145f82c1cb4e4467a", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "37d5a73170579b30e67cc8b19ec69715eea3a6b6", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "4867687b6ad28ab84bc0811d8f8f9972e769da02", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "5fb756f1bbec7a3862dda5d79028bf656271804c", "status": "affected", "versionType": "git"}, {"version": "0", "lessThan": "5.10.274", "status": "affected", "versionType": "semver"}, {"version": "0", "lessThan": "5.15.225", "status": "affected", "versionType": "semver"}, {"version": "0", "lessThan": "6.1.192", "status": "affected", "versionType": "semver"}, {"version": "0", "lessThan": "6.6.162", "status": "affected", "versionType": "semver"}, {"version": "0", "lessThan": "6.12.116", "status": "affected", "versionType": "semver"}, {"version": "0", "lessThan": "6.18.62", "status": "affected", "versionType": "semver"}, {"version": "0", "lessThan": "7.3.3", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/xen-netback/xenbus.c"], "versions": [{"version": "5.10.274", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.225", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.192", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.162", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.116", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.62", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3.3", "lessThanOrEqual": "7.3.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.4-rc2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "5.10.274"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "5.15.225"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.1.192"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.6.162"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.12.116"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.18.62"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "7.3.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "7.4-rc2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/4223b33be49ee09acb6f1d26beb4a36dd3b8d63a"}, {"url": "https://git.kernel.org/stable/c/ab9cdf1291be551da999510b30216a2886074d7a"}, {"url": "https://git.kernel.org/stable/c/36f858f228e3f955b9336af7f94634747c221518"}, {"url": "https://git.kernel.org/stable/c/89e534265b62c94749639350200b10370564bb3a"}, {"url": "https://git.kernel.org/stable/c/6cd611d2abdd8623a554e14145f82c1cb4e4467a"}, {"url": "https://git.kernel.org/stable/c/37d5a73170579b30e67cc8b19ec69715eea3a6b6"}, {"url": "https://git.kernel.org/stable/c/4867687b6ad28ab84bc0811d8f8f9972e769da02"}, {"url": "https://git.kernel.org/stable/c/5fb756f1bbec7a3862dda5d79028bf656271804c"}], "title": "xen-netback: Fix UAF when reading statistics data", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/11/06/9"}, {"url": "http://xenbits.xen.org/xsa/advisory-526.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-11-06T19:08:40.599Z"}}]}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/xen-netback/xenbus.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "4223b33be49ee09acb6f1d26beb4a36dd3b8d63a", "status": "affected", "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "versionType": "git"}, {"lessThan": "ab9cdf1291be551da999510b30216a2886074d7a", "status": "affected", "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "versionType": "git"}, {"lessThan": "36f858f228e3f955b9336af7f94634747c221518", "status": "affected", "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "versionType": "git"}, {"lessThan": "89e534265b62c94749639350200b10370564bb3a", "status": "affected", "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "versionType": "git"}, {"lessThan": "6cd611d2abdd8623a554e14145f82c1cb4e4467a", "status": "affected", "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "versionType": "git"}, {"lessThan": "37d5a73170579b30e67cc8b19ec69715eea3a6b6", "status": "affected", "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "versionType": "git"}, {"lessThan": "4867687b6ad28ab84bc0811d8f8f9972e769da02", "status": "affected", "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "versionType": "git"}, {"lessThan": "5fb756f1bbec7a3862dda5d79028bf656271804c", "status": "affected", "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "versionType": "git"}, {"lessThan": "5.10.274", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThan": "5.15.225", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThan": "6.1.192", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThan": "6.6.162", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThan": "6.12.116", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThan": "6.18.62", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThan": "7.3.3", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/xen-netback/xenbus.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.274", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.225", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.192", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.162", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.116", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.62", "versionType": "semver"}, {"lessThanOrEqual": "7.3.*", "status": "unaffected", "version": "7.3.3", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.4-rc2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen-netback: Fix UAF when reading statistics data\n\nThe network statistic data in the driver is protected by RCU.\nUnfortunately when tearing down the queues after an error during\nconnecting to the frontend (e.g. due to illegal Xenstore data filled\nin by the guest), the statistic data is being freed without\nsynchronizing the RCU state. In case the data is being read via sysfs\nin this phase, access to already freed memory or memory being in new\nuse is possible.\n\nFix that by calling synchronize_net() before freeing the queue data.\n\nThis is XSA-526 / CVE-2026-100080"}], "id": "CVE-2026-100080", "lastModified": "2026-11-13T15:17:28.297", "metrics": {}, "published": "2026-11-06T19:17:03.190", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/36f858f228e3f955b9336af7f94634747c221518"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/37d5a73170579b30e67cc8b19ec69715eea3a6b6"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4223b33be49ee09acb6f1d26beb4a36dd3b8d63a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4867687b6ad28ab84bc0811d8f8f9972e769da02"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5fb756f1bbec7a3862dda5d79028bf656271804c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6cd611d2abdd8623a554e14145f82c1cb4e4467a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/89e534265b62c94749639350200b10370564bb3a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ab9cdf1291be551da999510b30216a2886074d7a"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2026/11/06/9"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://xenbits.xen.org/xsa/advisory-526.html"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: kernel: xen-netback: Denial of Service via use-after-free during queue teardown", "id": "2568422", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2568422"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.6", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-825", "details": ["A flaw was found in the Linux kernel's xen-netback driver. When handling a connection error caused by invalid guest configuration data, network queue statistics memory is freed without proper synchronization. If the statistics data is concurrently read through the system file system, a use-after-free condition can occur. This flaw may allow a malicious guest domain to cause a Denial of Service (DoS) by crashing the host system, leak sensitive information, or potentially execute arbitrary code."], "mitigation": {"lang": "en:us", "value": "To mitigate this vulnerability, prevent the xen-netback kernel module from loading:\n1. Blacklist the module by creating a configuration file in /etc/modprobe.d/:\n# echo \"install xen-netback /bin/true\" > /etc/modprobe.d/disable-xen-netback.conf\n2. If the module is included in the initramfs, rebuild the ramdisk:\n# dracut -f\nWarning: If the module is currently loaded, a system reboot is required for this configuration to take effect.\nCaveats: Disabling this module prevents the host system from serving paravirtualized network interfaces to Xen guest domains."}, "name": "CVE-2026-100080", "package_state": [{"cpe": "cpe:/a:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:rhel_els:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:rhel_els:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:rhel_els:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/a:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/a:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/a:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:5", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-10", "product_name": "Red Hat OpenShift Container Platform 5"}, {"cpe": "cpe:/a:redhat:openshift:5", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 5"}], "public_date": "2026-11-06T18:23:01Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-100080\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-100080\nhttps://git.kernel.org/stable/c/36f858f228e3f955b9336af7f94634747c221518\nhttps://git.kernel.org/stable/c/37d5a73170579b30e67cc8b19ec69715eea3a6b6\nhttps://git.kernel.org/stable/c/4223b33be49ee09acb6f1d26beb4a36dd3b8d63a\nhttps://git.kernel.org/stable/c/4867687b6ad28ab84bc0811d8f8f9972e769da02\nhttps://git.kernel.org/stable/c/6cd611d2abdd8623a554e14145f82c1cb4e4467a\nhttps://git.kernel.org/stable/c/89e534265b62c94749639350200b10370564bb3a\nhttps://git.kernel.org/stable/c/ab9cdf1291be551da999510b30216a2886074d7a"], "statement": "This vulnerability is rated as Moderate severity because exploitation requires a malicious or compromised Xen guest to supply malformed connection metadata while host-side sysfs statistics are concurrently read, primarily resulting in a host denial of service. Standard Red Hat Enterprise Linux deployments do not configure the system as a Xen hypervisor host or backend driver domain, significantly limiting exposure in typical production environments. Furthermore, systems running as Xen guests or utilizing KVM virtualization are entirely unaffected.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,4223b33be49ee09acb6f1d26beb4a36dd3b8d63a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,ab9cdf1291be551da999510b30216a2886074d7a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,36f858f228e3f955b9336af7f94634747c221518)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,89e534265b62c94749639350200b10370564bb3a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,6cd611d2abdd8623a554e14145f82c1cb4e4467a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,37d5a73170579b30e67cc8b19ec69715eea3a6b6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,4867687b6ad28ab84bc0811d8f8f9972e769da02)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,5.10.274)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,5.15.225)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.1.192)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.6.162)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.12.116)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.18.62)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,7.3.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.274,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.225,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.192,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.162,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.116,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.62,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.3.3,7.4.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,4223b33be49ee09acb6f1d26beb4a36dd3b8d63a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,ab9cdf1291be551da999510b30216a2886074d7a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,36f858f228e3f955b9336af7f94634747c221518)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,89e534265b62c94749639350200b10370564bb3a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,6cd611d2abdd8623a554e14145f82c1cb4e4467a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,37d5a73170579b30e67cc8b19ec69715eea3a6b6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,4867687b6ad28ab84bc0811d8f8f9972e769da02)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,5.10.274)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,5.15.225)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.1.192)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.6.162)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.12.116)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.18.62)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,7.3.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.274,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.225,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.192,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.162,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.116,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.62,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.3.3,7.4.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-11-06T19:45:08.009255+00:00", "updated": "2026-11-08T04:30:14.851331+00:00", "vendors": ["linux", "linux$PRODUCT$linux", "linux$PRODUCT$linux_kernel"]}