CVE-2026-23159

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-23159", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-01-13T15:37:45.979Z", "datePublished": "2026-02-14T16:01:25.229Z", "dateUpdated": "2026-05-23T16:04:01.503Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-23T16:04:01.503Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf: sched: Fix perf crash with new is_user_task() helper\n\nIn order to do a user space stacktrace the current task needs to be a user\ntask that has executed in user space. It use to be possible to test if a\ntask is a user task or not by simply checking the task_struct mm field. If\nit was non NULL, it was a user task and if not it was a kernel task.\n\nBut things have changed over time, and some kernel tasks now have their\nown mm field.\n\nAn idea was made to instead test PF_KTHREAD and two functions were used to\nwrap this check in case it became more complex to test if a task was a\nuser task or not[1]. But this was rejected and the C code simply checked\nthe PF_KTHREAD directly.\n\nIt was later found that not all kernel threads set PF_KTHREAD. The io-uring\nhelpers instead set PF_USER_WORKER and this needed to be added as well.\n\nBut checking the flags is still not enough. There's a very small window\nwhen a task exits that it frees its mm field and it is set back to NULL.\nIf perf were to trigger at this moment, the flags test would say its a\nuser space task but when perf would read the mm field it would crash with\nat NULL pointer dereference.\n\nNow there are flags that can be used to test if a task is exiting, but\nthey are set in areas that perf may still want to profile the user space\ntask (to see where it exited). The only real test is to check both the\nflags and the mm field.\n\nInstead of making this modification in every location, create a new\nis_user_task() helper function that does all the tests needed to know if\nit is safe to read the user space memory or not.\n\n[1] https://lore.kernel.org/all/20250425204120.639530125@goodmis.org/"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["include/linux/sched.h", "kernel/events/callchain.c", "kernel/events/core.c"], "versions": [{"version": "34b5aba8511a12fb2e9bd3124835cb4087187dac", "lessThan": "d84a4836dc246b7dc244e46a08ff992956b68db0", "status": "affected", "versionType": "git"}, {"version": "8d79f96e477c4b8e3fca2efb36b269d8960a2285", "lessThan": "5aac392fcd3d981d7997f1a0766829e1afdeac2e", "status": "affected", "versionType": "git"}, {"version": "90942f9fac05702065ff82ed0bade0d08168d4ea", "lessThan": "a28fce0365e1cb9cb8c04c893b9334e5ca9d9f1c", "status": "affected", "versionType": "git"}, {"version": "90942f9fac05702065ff82ed0bade0d08168d4ea", "lessThan": "76ed27608f7dd235b727ebbb12163438c2fbb617", "status": "affected", "versionType": "git"}, {"version": "5050083e1a2f3e5e29cee0205c40e5864b52601d", "status": "affected", "versionType": "git"}, {"version": "6.6.116", "lessThan": "6.6.123", "status": "affected", "versionType": "semver"}, {"version": "6.12.57", "lessThan": "6.12.69", "status": "affected", "versionType": "semver"}, {"version": "6.17.7", "lessThan": "6.18", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["include/linux/sched.h", "kernel/events/callchain.c", "kernel/events/core.c"], "versions": [{"version": "6.18", "status": "affected"}, {"version": "0", "lessThan": "6.18", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.123", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.69", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.9", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.116", "versionEndExcluding": "6.6.123"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.12.57", "versionEndExcluding": "6.12.69"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18", "versionEndExcluding": "6.18.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18", "versionEndExcluding": "6.19"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17.7"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/d84a4836dc246b7dc244e46a08ff992956b68db0"}, {"url": "https://git.kernel.org/stable/c/5aac392fcd3d981d7997f1a0766829e1afdeac2e"}, {"url": "https://git.kernel.org/stable/c/a28fce0365e1cb9cb8c04c893b9334e5ca9d9f1c"}, {"url": "https://git.kernel.org/stable/c/76ed27608f7dd235b727ebbb12163438c2fbb617"}], "title": "perf: sched: Fix perf crash with new is_user_task() helper", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["include/linux/sched.h", "kernel/events/callchain.c", "kernel/events/core.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "d84a4836dc246b7dc244e46a08ff992956b68db0", "status": "affected", "version": "34b5aba8511a12fb2e9bd3124835cb4087187dac", "versionType": "git"}, {"lessThan": "5aac392fcd3d981d7997f1a0766829e1afdeac2e", "status": "affected", "version": "8d79f96e477c4b8e3fca2efb36b269d8960a2285", "versionType": "git"}, {"lessThan": "a28fce0365e1cb9cb8c04c893b9334e5ca9d9f1c", "status": "affected", "version": "90942f9fac05702065ff82ed0bade0d08168d4ea", "versionType": "git"}, {"lessThan": "76ed27608f7dd235b727ebbb12163438c2fbb617", "status": "affected", "version": "90942f9fac05702065ff82ed0bade0d08168d4ea", "versionType": "git"}, {"status": "affected", "version": "5050083e1a2f3e5e29cee0205c40e5864b52601d", "versionType": "git"}, {"lessThan": "6.6.123", "status": "affected", "version": "6.6.116", "versionType": "semver"}, {"lessThan": "6.12.69", "status": "affected", "version": "6.12.57", "versionType": "semver"}, {"lessThan": "6.18", "status": "affected", "version": "6.17.7", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["include/linux/sched.h", "kernel/events/callchain.c", "kernel/events/core.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.18"}, {"lessThan": "6.18", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.123", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.69", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.9", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.19", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C7B0307B-B830-41F5-A46B-78B12251F41C", "versionEndExcluding": "6.6.123", "versionStartIncluding": "6.6.116", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "571DBB6B-9F41-4903-BA8D-1097EC4629E1", "versionEndExcluding": "6.12.69", "versionStartIncluding": "6.12.57", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "4D53B981-624A-4600-B8E0-DA90B41D49CE", "versionEndExcluding": "6.18.9", "versionStartIncluding": "6.17.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*", "matchCriteriaId": "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*", "matchCriteriaId": "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*", "matchCriteriaId": "F71D92C0-C023-48BD-B3B6-70B638EEE298", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*", "matchCriteriaId": "13580667-0A98-40CC-B29F-D12790B91BDB", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*", "matchCriteriaId": "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*", "matchCriteriaId": "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*", "matchCriteriaId": "F5DC0CA6-F0AF-4DDF-A882-3DADB9A886A7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf: sched: Fix perf crash with new is_user_task() helper\n\nIn order to do a user space stacktrace the current task needs to be a user\ntask that has executed in user space. It use to be possible to test if a\ntask is a user task or not by simply checking the task_struct mm field. If\nit was non NULL, it was a user task and if not it was a kernel task.\n\nBut things have changed over time, and some kernel tasks now have their\nown mm field.\n\nAn idea was made to instead test PF_KTHREAD and two functions were used to\nwrap this check in case it became more complex to test if a task was a\nuser task or not[1]. But this was rejected and the C code simply checked\nthe PF_KTHREAD directly.\n\nIt was later found that not all kernel threads set PF_KTHREAD. The io-uring\nhelpers instead set PF_USER_WORKER and this needed to be added as well.\n\nBut checking the flags is still not enough. There's a very small window\nwhen a task exits that it frees its mm field and it is set back to NULL.\nIf perf were to trigger at this moment, the flags test would say its a\nuser space task but when perf would read the mm field it would crash with\nat NULL pointer dereference.\n\nNow there are flags that can be used to test if a task is exiting, but\nthey are set in areas that perf may still want to profile the user space\ntask (to see where it exited). The only real test is to check both the\nflags and the mm field.\n\nInstead of making this modification in every location, create a new\nis_user_task() helper function that does all the tests needed to know if\nit is safe to read the user space memory or not.\n\n[1] https://lore.kernel.org/all/20250425204120.639530125@goodmis.org/"}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:\n\nperf: sched: Soluciona el fallo de perf con la nueva funci\u00f3n auxiliar is_user_task()\n\nPara realizar un seguimiento de pila (stacktrace) del espacio de usuario, la tarea actual debe ser una tarea de usuario que se haya ejecutado en el espacio de usuario. Sol\u00eda ser posible comprobar si una tarea es una tarea de usuario o no simplemente verificando el campo mm de task_struct. Si no era NULL, era una tarea de usuario y si no, era una tarea del kernel.\n\nPero las cosas han cambiado con el tiempo, y algunas tareas del kernel ahora tienen su propio campo mm.\n\nSe propuso la idea de probar PF_KTHREAD en su lugar y se utilizaron dos funciones para encapsular esta verificaci\u00f3n en caso de que se volviera m\u00e1s complejo probar si una tarea era una tarea de usuario o no[1]. Pero esto fue rechazado y el c\u00f3digo C simplemente verific\u00f3 PF_KTHREAD directamente.\n\nM\u00e1s tarde se descubri\u00f3 que no todos los hilos del kernel establecen PF_KTHREAD. Los auxiliares de io-uring, en cambio, establecen PF_USER_WORKER y esto tambi\u00e9n necesitaba ser a\u00f1adido.\n\nPero verificar las banderas (flags) todav\u00eda no es suficiente. Hay una ventana muy peque\u00f1a cuando una tarea sale en la que libera su campo mm y este se vuelve a establecer en NULL. Si perf se activara en este momento, la prueba de las banderas dir\u00eda que es una tarea del espacio de usuario, pero cuando perf leyera el campo mm, fallar\u00eda con una desreferencia de puntero NULL.\n\nAhora hay banderas que se pueden usar para probar si una tarea est\u00e1 saliendo, pero se establecen en \u00e1reas que perf a\u00fan podr\u00eda querer perfilar en la tarea del espacio de usuario (para ver d\u00f3nde sali\u00f3). La \u00fanica prueba real es verificar tanto las banderas como el campo mm.\n\nEn lugar de realizar esta modificaci\u00f3n en cada ubicaci\u00f3n, cree una nueva funci\u00f3n auxiliar is_user_task() que realice todas las pruebas necesarias para saber si es seguro leer la memoria del espacio de usuario o no.\n\n[1] https://lore.kernel.org/all/20250425204120.639530125@goodmis.org/"}], "id": "CVE-2026-23159", "lastModified": "2026-06-17T10:21:00.550", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-02-14T16:15:56.070", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/5aac392fcd3d981d7997f1a0766829e1afdeac2e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/76ed27608f7dd235b727ebbb12163438c2fbb617"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/a28fce0365e1cb9cb8c04c893b9334e5ca9d9f1c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d84a4836dc246b7dc244e46a08ff992956b68db0"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: perf: sched: Fix perf crash with new is_user_task() helper", "id": "2439935", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439935"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "details": ["In the Linux kernel, the following vulnerability has been resolved:\nperf: sched: Fix perf crash with new is_user_task() helper\nIn order to do a user space stacktrace the current task needs to be a user\ntask that has executed in user space. It use to be possible to test if a\ntask is a user task or not by simply checking the task_struct mm field. If\nit was non NULL, it was a user task and if not it was a kernel task.\nBut things have changed over time, and some kernel tasks now have their\nown mm field.\nAn idea was made to instead test PF_KTHREAD and two functions were used to\nwrap this check in case it became more complex to test if a task was a\nuser task or not[1]. But this was rejected and the C code simply checked\nthe PF_KTHREAD directly.\nIt was later found that not all kernel threads set PF_KTHREAD. The io-uring\nhelpers instead set PF_USER_WORKER and this needed to be added as well.\nBut checking the flags is still not enough. There's a very small window\nwhen a task exits that it frees its mm field and it is set back to NULL.\nIf perf were to trigger at this moment, the flags test would say its a\nuser space task but when perf would read the mm field it would crash with\nat NULL pointer dereference.\nNow there are flags that can be used to test if a task is exiting, but\nthey are set in areas that perf may still want to profile the user space\ntask (to see where it exited). The only real test is to check both the\nflags and the mm field.\nInstead of making this modification in every location, create a new\nis_user_task() helper function that does all the tests needed to know if\nit is safe to read the user space memory or not.\n[1] https://lore.kernel.org/all/20250425204120.639530125@goodmis.org/"], "name": "CVE-2026-23159", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-02-14T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-23159\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-23159\nhttps://lore.kernel.org/linux-cve-announce/2026021417-CVE-2026-23159-7d2c@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[34b5aba8511a12fb2e9bd3124835cb4087187dac,d84a4836dc246b7dc244e46a08ff992956b68db0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[8d79f96e477c4b8e3fca2efb36b269d8960a2285,5aac392fcd3d981d7997f1a0766829e1afdeac2e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[90942f9fac05702065ff82ed0bade0d08168d4ea,a28fce0365e1cb9cb8c04c893b9334e5ca9d9f1c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[90942f9fac05702065ff82ed0bade0d08168d4ea,76ed27608f7dd235b727ebbb12163438c2fbb617)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5050083e1a2f3e5e29cee0205c40e5864b52601d,*]"}}], "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.18"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.18)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.123,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.69,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.9,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.19,*]"}}], "product": "linux_kernel", "vendor": "linux"}], "analysis": {"en": {"generated_at": "2026-04-18T12:19:14.696715+00:00", "value": {"mitigation_remediation": ["Update the Linux kernel to a patched version that includes the is_user_task() helper, such as kernel 6.19 or newer.", "Limit or disable perf activity for untrusted users to reduce the likelihood of an exploit during task exit.", "Monitor kernel logs (e.g., dmesg, /var/log/kern.log) for oops or crash messages that might indicate a null pointer dereference in perf."], "summary": {"action": "Immediate Patch", "impact": "NULL pointer dereference leading to crash (Denial of Service)"}, "threat_synthesis": {"affected_systems": "Any Linux kernel instance that has not incorporated the patch implementing the is_user_task() helper is affected, including kernel 6.19 releases and earlier versions that contain the older perf implementation. The CVE references cover the 6.19 release candidates (rc1 through rc7) and the stable kernel sources, indicating that vulnerable code is present in all pre-patch kernels for that major release.", "description_and_impact": "The vulnerability occurs in the Linux kernel\u2019s perf subsystem when a user-space task is in the process of exiting. During this short window the task\u2019s memory mapping field becomes null while certain flags still indicate a user task, causing the perf helper to dereference a null pointer and crash the kernel. This is a classic null pointer dereference (CWE-476) that can lead to system-wide denial of service by crashing the kernel.", "risk_and_exploitability": "The severity is moderate with a CVSS score of 5.5, and the EPSS score is less than 1%, suggesting that exploitation is unlikely. The exploitation requires a local user or privilege level sufficient to run the perf tool against a specific task during its exit, which is an inferred local attack vector. The vulnerability is not listed in the CISA KEV catalog, further indicating a low threat level for active exploitation."}}}}, "created": "2026-02-16T12:01:08.253098+00:00", "updated": "2026-04-18T12:30:45.451479+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}