CVE-2026-23405

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-23405", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-01-13T15:37:46.012Z", "datePublished": "2026-04-01T08:36:35.697Z", "dateUpdated": "2026-05-11T22:06:16.436Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T22:06:16.436Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\napparmor: fix: limit the number of levels of policy namespaces\n\nCurrently the number of policy namespaces is not bounded relying on\nthe user namespace limit. However policy namespaces aren't strictly\ntied to user namespaces and it is possible to create them and nest\nthem arbitrarily deep which can be used to exhaust system resource.\n\nHard cap policy namespaces to the same depth as user namespaces."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["security/apparmor/include/policy_ns.h", "security/apparmor/policy_ns.c"], "versions": [{"version": "c88d4c7b049e87998ac0a9f455aa545cc895ef92", "lessThan": "6b396cc2f0365e684fc1d3547d18ef79fcee225d", "status": "affected", "versionType": "git"}, {"version": "c88d4c7b049e87998ac0a9f455aa545cc895ef92", "lessThan": "87d0cecc900e55d55fc4dbfb43ac93e269c7a5b3", "status": "affected", "versionType": "git"}, {"version": "c88d4c7b049e87998ac0a9f455aa545cc895ef92", "lessThan": "b1226e37eb3754d389721c135db6107db94c7a72", "status": "affected", "versionType": "git"}, {"version": "c88d4c7b049e87998ac0a9f455aa545cc895ef92", "lessThan": "3f8699b3ee0c04b4b9bc27b82cd89a40e81e1d2e", "status": "affected", "versionType": "git"}, {"version": "c88d4c7b049e87998ac0a9f455aa545cc895ef92", "lessThan": "853ce31ca72097d23991a06876a2ccb5cb64b603", "status": "affected", "versionType": "git"}, {"version": "c88d4c7b049e87998ac0a9f455aa545cc895ef92", "lessThan": "d42b2b6bb77ca40ee34ab74ad79305840b5f315d", "status": "affected", "versionType": "git"}, {"version": "c88d4c7b049e87998ac0a9f455aa545cc895ef92", "lessThan": "7b6495ead2c611647f6b11441a852324e3eb8616", "status": "affected", "versionType": "git"}, {"version": "c88d4c7b049e87998ac0a9f455aa545cc895ef92", "lessThan": "306039414932c80f8420695a24d4fe10c84ccfb2", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["security/apparmor/include/policy_ns.h", "security/apparmor/policy_ns.c"], "versions": [{"version": "2.6.36", "status": "affected"}, {"version": "0", "lessThan": "2.6.36", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.253", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.203", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.169", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.130", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.77", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.18", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.8", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.36", "versionEndExcluding": "5.10.253"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.36", "versionEndExcluding": "5.15.203"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.36", "versionEndExcluding": "6.1.169"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.36", "versionEndExcluding": "6.6.130"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.36", "versionEndExcluding": "6.12.77"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.36", "versionEndExcluding": "6.18.18"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.36", "versionEndExcluding": "6.19.8"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.36", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/6b396cc2f0365e684fc1d3547d18ef79fcee225d"}, {"url": "https://git.kernel.org/stable/c/87d0cecc900e55d55fc4dbfb43ac93e269c7a5b3"}, {"url": "https://git.kernel.org/stable/c/b1226e37eb3754d389721c135db6107db94c7a72"}, {"url": "https://git.kernel.org/stable/c/3f8699b3ee0c04b4b9bc27b82cd89a40e81e1d2e"}, {"url": "https://git.kernel.org/stable/c/853ce31ca72097d23991a06876a2ccb5cb64b603"}, {"url": "https://git.kernel.org/stable/c/d42b2b6bb77ca40ee34ab74ad79305840b5f315d"}, {"url": "https://git.kernel.org/stable/c/7b6495ead2c611647f6b11441a852324e3eb8616"}, {"url": "https://git.kernel.org/stable/c/306039414932c80f8420695a24d4fe10c84ccfb2"}], "title": "apparmor: fix: limit the number of levels of policy namespaces", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["security/apparmor/include/policy_ns.h", "security/apparmor/policy_ns.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "6b396cc2f0365e684fc1d3547d18ef79fcee225d", "status": "affected", "version": "c88d4c7b049e87998ac0a9f455aa545cc895ef92", "versionType": "git"}, {"lessThan": "87d0cecc900e55d55fc4dbfb43ac93e269c7a5b3", "status": "affected", "version": "c88d4c7b049e87998ac0a9f455aa545cc895ef92", "versionType": "git"}, {"lessThan": "b1226e37eb3754d389721c135db6107db94c7a72", "status": "affected", "version": "c88d4c7b049e87998ac0a9f455aa545cc895ef92", "versionType": "git"}, {"lessThan": "3f8699b3ee0c04b4b9bc27b82cd89a40e81e1d2e", "status": "affected", "version": "c88d4c7b049e87998ac0a9f455aa545cc895ef92", "versionType": "git"}, {"lessThan": "853ce31ca72097d23991a06876a2ccb5cb64b603", "status": "affected", "version": "c88d4c7b049e87998ac0a9f455aa545cc895ef92", "versionType": "git"}, {"lessThan": "d42b2b6bb77ca40ee34ab74ad79305840b5f315d", "status": "affected", "version": "c88d4c7b049e87998ac0a9f455aa545cc895ef92", "versionType": "git"}, {"lessThan": "7b6495ead2c611647f6b11441a852324e3eb8616", "status": "affected", "version": "c88d4c7b049e87998ac0a9f455aa545cc895ef92", "versionType": "git"}, {"lessThan": "306039414932c80f8420695a24d4fe10c84ccfb2", "status": "affected", "version": "c88d4c7b049e87998ac0a9f455aa545cc895ef92", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["security/apparmor/include/policy_ns.h", "security/apparmor/policy_ns.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "2.6.36"}, {"lessThan": "2.6.36", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.253", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.203", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.169", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.130", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.77", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.18", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.8", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "A0CBC198-582C-40A0-A6C1-C5B39993F590", "versionEndExcluding": "5.10.253", "versionStartIncluding": "2.6.36.1", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "20DDB3E9-AABF-4107-ADB0-5362AA067045", "versionEndExcluding": "5.15.203", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "DBEC0E5D-641C-4E98-A6D9-5799B10CE451", "versionEndExcluding": "6.1.169", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C57BB918-DF28-46B3-94F7-144176841267", "versionEndExcluding": "6.6.130", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "B3D12E00-E42D-4056-B354-BAD4903C03A5", "versionEndExcluding": "6.12.77", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "346AD1FB-0CE8-4D9D-8E56-5EB1A4D06199", "versionEndExcluding": "6.18.18", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C65A7D85-C7C6-485E-AC35-66A374C73FAC", "versionEndExcluding": "6.19.8", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.36:-:*:*:*:*:*:*", "matchCriteriaId": "D4407EF9-4ECF-408F-9ECB-0705E3FB65D5", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "F253B622-8837-4245-BCE5-A7BF8FC76A16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "F666C8D8-6538-46D4-B318-87610DE64C34", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*", "matchCriteriaId": "02259FDA-961B-47BC-AE7F-93D7EC6E90C2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*", "matchCriteriaId": "58A9FEFF-C040-420D-8F0A-BFDAAA1DF258", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*", "matchCriteriaId": "1D2315C0-D46F-4F85-9754-F9E5E11374A6", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*", "matchCriteriaId": "512EE3A8-A590-4501-9A94-5D4B268D6138", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\napparmor: fix: limit the number of levels of policy namespaces\n\nCurrently the number of policy namespaces is not bounded relying on\nthe user namespace limit. However policy namespaces aren't strictly\ntied to user namespaces and it is possible to create them and nest\nthem arbitrarily deep which can be used to exhaust system resource.\n\nHard cap policy namespaces to the same depth as user namespaces."}], "id": "CVE-2026-23405", "lastModified": "2026-06-17T10:21:31.077", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-04-01T09:16:16.153", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/306039414932c80f8420695a24d4fe10c84ccfb2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/3f8699b3ee0c04b4b9bc27b82cd89a40e81e1d2e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/6b396cc2f0365e684fc1d3547d18ef79fcee225d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/7b6495ead2c611647f6b11441a852324e3eb8616"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/853ce31ca72097d23991a06876a2ccb5cb64b603"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/87d0cecc900e55d55fc4dbfb43ac93e269c7a5b3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b1226e37eb3754d389721c135db6107db94c7a72"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d42b2b6bb77ca40ee34ab74ad79305840b5f315d"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: apparmor: fix: limit the number of levels of policy namespaces", "id": "2453795", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453795"}, "csaw": false, "cwe": "CWE-770", "details": ["A flaw was found in the AppArmor security module within the Linux kernel. A local user could exploit this vulnerability by creating and nesting policy namespaces without limit. This unbounded nesting can lead to the exhaustion of system resources, resulting in a Denial of Service (DoS) for the affected system."], "name": "CVE-2026-23405", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-04-01T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-23405\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-23405\nhttps://lore.kernel.org/linux-cve-announce/2026040111-CVE-2026-23405-0e7a@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c88d4c7b049e87998ac0a9f455aa545cc895ef92,3f8699b3ee0c04b4b9bc27b82cd89a40e81e1d2e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3f8699b3ee0c04b4b9bc27b82cd89a40e81e1d2e,853ce31ca72097d23991a06876a2ccb5cb64b603)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[853ce31ca72097d23991a06876a2ccb5cb64b603,d42b2b6bb77ca40ee34ab74ad79305840b5f315d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d42b2b6bb77ca40ee34ab74ad79305840b5f315d,7b6495ead2c611647f6b11441a852324e3eb8616)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7b6495ead2c611647f6b11441a852324e3eb8616,306039414932c80f8420695a24d4fe10c84ccfb2)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.6.36"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,2.6.36)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.130,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.77,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.18,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.8,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0-rc4,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "analysis": {"en": {"generated_at": "2026-04-28T09:00:07.745326+00:00", "value": {"mitigation_remediation": ["Apply the latest Linux kernel update that implements the policy namespace depth limitation.", "Reboot the system to load the updated kernel.", "Monitor system logs for out-of-memory or kernel panic events related to policy namespace creation, and adjust user namespace depth limits if necessary."], "summary": {"action": "Patch", "impact": "Denial of Service via Resource Exhaustion"}, "threat_synthesis": {"affected_systems": "The issue is present in the Linux kernel across all distributions that ship a kernel version containing unbounded policy namespace logic. The CVE notes the fix that hard\u2011caps policy namespace depth to match user namespace depth, but no specific kernel releases or version ranges are listed. Therefore any kernel build predating the patch is potentially vulnerable unless the vendor has applied the change.", "description_and_impact": "The vulnerability arises because the Linux kernel allows policy namespaces to be nested without an upper bound, relying solely on the user namespace limit. An attacker can create arbitrarily deep policy namespace hierarchies, exhausting system resources and potentially causing service interruptions or system crashes. The flaw represents unbounded resource consumption and can undermine system availability without directly compromising data confidentiality or integrity.", "risk_and_exploitability": "EPSS is reported as below 1\u202f% and the vulnerability is not in the CISA KEV catalog, indicating limited known exploitation. The likely attack vector is local or requires privileged kernel access, as creating and nesting policy namespaces requires kernel capabilities. With a CVSS score of 5.5, the risk can be considered medium\u2011to\u2011low, but the probability of exploitation remains low under normal circumstances."}}}}, "created": "2026-04-02T07:49:38.999700+00:00", "updated": "2026-04-28T09:15:09.674882+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}