CVE-2026-31683

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-31683", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-03-09T15:48:24.130Z", "datePublished": "2026-04-25T08:47:00.334Z", "dateUpdated": "2026-08-05T12:24:28.913Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:24:28.913Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: avoid OGM aggregation when skb tailroom is insufficient\n\nWhen OGM aggregation state is toggled at runtime, an existing forwarded\npacket may have been allocated with only packet_len bytes, while a later\npacket can still be selected for aggregation. Appending in this case can\nhit skb_put overflow conditions.\n\nReject aggregation when the target skb tailroom cannot accommodate the new\npacket. The caller then falls back to creating a new forward packet\ninstead of appending."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - A fully attacker-controlled trigger requires local control of batman-adv setup and the OGM aggregation toggle while injecting OGM traffic. Adjacent OGM frames can reach an existing mesh, but that path depends on a runtime aggregation toggle not controlled by the packet sender.\nAC:L - With local namespace control, the attacker can create the mesh setup, toggle aggregation, and send OGM traffic to deterministically reach the undersized queued skb append. No uncontrolled race or probabilistic condition is required in that scenario.\nPR:L - The required configuration control is CAP_NET_ADMIN, but batman-adv generic netlink uses namespace-capable admin permission, so an unprivileged local user can obtain it in a user namespace. No real init-namespace root privilege is required for that path.\nUI:N - Exploitation does not require a victim user to open a file, mount anything, or otherwise interact once the attacker controls the local namespace setup. The attacker can drive the trigger directly.\nS:U - The vulnerability corrupts or crashes kernel networking state within the same host kernel security authority. It does not cross a VM, IOMMU, or separate sandbox boundary by itself.\nC:H - The missing tailroom check creates an out-of-bounds skb append condition in kernel memory. Although common kernels may hit skb_over_panic first, the underlying memory-safety condition is defensibly scored as capable of exposing kernel data.\nI:H - The vulnerable path appends attacker-controlled OGM bytes past the allocated skb tailroom when the guard is absent. As a kernel out-of-bounds write condition, this is defensibly scored as high integrity impact.\nA:H - At minimum, insufficient tailroom reaches skb_put overflow handling, which triggers a BUG/oops/panic class failure. This can crash or destabilize the kernel, causing high availability impact."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/batman-adv/bat_iv_ogm.c"], "versions": [{"version": "c6c8fea29769d998d94fcec9b9f14d4b52b349d3", "lessThan": "67176c96f325837b0bb3e9538ca2eba414f447d8", "status": "affected", "versionType": "git"}, {"version": "c6c8fea29769d998d94fcec9b9f14d4b52b349d3", "lessThan": "0b10a8b355c3f71012ce89289ec2c2f5e3bfd6c1", "status": "affected", "versionType": "git"}, {"version": "c6c8fea29769d998d94fcec9b9f14d4b52b349d3", "lessThan": "6755347c5f9bdd44dee80f692208b056fcd40a52", "status": "affected", "versionType": "git"}, {"version": "c6c8fea29769d998d94fcec9b9f14d4b52b349d3", "lessThan": "1ada20331f2df2a942d6b83ae1f04a304b642e2a", "status": "affected", "versionType": "git"}, {"version": "c6c8fea29769d998d94fcec9b9f14d4b52b349d3", "lessThan": "6e40ebb999c2c3d2fbb3cacb61f0384ee6e69075", "status": "affected", "versionType": "git"}, {"version": "c6c8fea29769d998d94fcec9b9f14d4b52b349d3", "lessThan": "0e35db29fc5a97a8553f7c2d3a2ba730e46b1ee8", "status": "affected", "versionType": "git"}, {"version": "c6c8fea29769d998d94fcec9b9f14d4b52b349d3", "lessThan": "eda89a1bae0602aec8314ced299bb243b9f9aeef", "status": "affected", "versionType": "git"}, {"version": "c6c8fea29769d998d94fcec9b9f14d4b52b349d3", "lessThan": "0d4aef630be9d5f9c1227d07669c26c4383b5ad0", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/batman-adv/bat_iv_ogm.c"], "versions": [{"version": "2.6.38", "status": "affected"}, {"version": "0", "lessThan": "2.6.38", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.253", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.203", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.167", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.130", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.78", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.20", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.10", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.38", "versionEndExcluding": "5.10.253"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.38", "versionEndExcluding": "5.15.203"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.38", "versionEndExcluding": "6.1.167"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.38", "versionEndExcluding": "6.6.130"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.38", "versionEndExcluding": "6.12.78"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.38", "versionEndExcluding": "6.18.20"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.38", "versionEndExcluding": "6.19.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.38", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/67176c96f325837b0bb3e9538ca2eba414f447d8"}, {"url": "https://git.kernel.org/stable/c/0b10a8b355c3f71012ce89289ec2c2f5e3bfd6c1"}, {"url": "https://git.kernel.org/stable/c/6755347c5f9bdd44dee80f692208b056fcd40a52"}, {"url": "https://git.kernel.org/stable/c/1ada20331f2df2a942d6b83ae1f04a304b642e2a"}, {"url": "https://git.kernel.org/stable/c/6e40ebb999c2c3d2fbb3cacb61f0384ee6e69075"}, {"url": "https://git.kernel.org/stable/c/0e35db29fc5a97a8553f7c2d3a2ba730e46b1ee8"}, {"url": "https://git.kernel.org/stable/c/eda89a1bae0602aec8314ced299bb243b9f9aeef"}, {"url": "https://git.kernel.org/stable/c/0d4aef630be9d5f9c1227d07669c26c4383b5ad0"}], "title": "batman-adv: avoid OGM aggregation when skb tailroom is insufficient", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["net/batman-adv/bat_iv_ogm.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "67176c96f325837b0bb3e9538ca2eba414f447d8", "status": "affected", "version": "c6c8fea29769d998d94fcec9b9f14d4b52b349d3", "versionType": "git"}, {"lessThan": "0b10a8b355c3f71012ce89289ec2c2f5e3bfd6c1", "status": "affected", "version": "c6c8fea29769d998d94fcec9b9f14d4b52b349d3", "versionType": "git"}, {"lessThan": "6755347c5f9bdd44dee80f692208b056fcd40a52", "status": "affected", "version": "c6c8fea29769d998d94fcec9b9f14d4b52b349d3", "versionType": "git"}, {"lessThan": "1ada20331f2df2a942d6b83ae1f04a304b642e2a", "status": "affected", "version": "c6c8fea29769d998d94fcec9b9f14d4b52b349d3", "versionType": "git"}, {"lessThan": "6e40ebb999c2c3d2fbb3cacb61f0384ee6e69075", "status": "affected", "version": "c6c8fea29769d998d94fcec9b9f14d4b52b349d3", "versionType": "git"}, {"lessThan": "0e35db29fc5a97a8553f7c2d3a2ba730e46b1ee8", "status": "affected", "version": "c6c8fea29769d998d94fcec9b9f14d4b52b349d3", "versionType": "git"}, {"lessThan": "eda89a1bae0602aec8314ced299bb243b9f9aeef", "status": "affected", "version": "c6c8fea29769d998d94fcec9b9f14d4b52b349d3", "versionType": "git"}, {"lessThan": "0d4aef630be9d5f9c1227d07669c26c4383b5ad0", "status": "affected", "version": "c6c8fea29769d998d94fcec9b9f14d4b52b349d3", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["net/batman-adv/bat_iv_ogm.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "2.6.38"}, {"lessThan": "2.6.38", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.253", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.203", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.167", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.130", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.78", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.20", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.10", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "23469A4A-A411-46B7-BCC8-630D832E78C2", "versionEndExcluding": "5.10.253", "versionStartIncluding": "2.6.38", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "20DDB3E9-AABF-4107-ADB0-5362AA067045", "versionEndExcluding": "5.15.203", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "2EDC6BAF-B710-4E26-B6AA-D68922EE7B43", "versionEndExcluding": "6.1.167", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C57BB918-DF28-46B3-94F7-144176841267", "versionEndExcluding": "6.6.130", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "28D591F5-B196-4CC9-905C-DC80F116E7A8", "versionEndExcluding": "6.12.78", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E5571059-6552-48E7-9BEF-3E358C387171", "versionEndExcluding": "6.18.20", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "96D34333-38BE-4414-9E79-6EB764329581", "versionEndExcluding": "6.19.10", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "F253B622-8837-4245-BCE5-A7BF8FC76A16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "F666C8D8-6538-46D4-B318-87610DE64C34", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*", "matchCriteriaId": "02259FDA-961B-47BC-AE7F-93D7EC6E90C2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: avoid OGM aggregation when skb tailroom is insufficient\n\nWhen OGM aggregation state is toggled at runtime, an existing forwarded\npacket may have been allocated with only packet_len bytes, while a later\npacket can still be selected for aggregation. Appending in this case can\nhit skb_put overflow conditions.\n\nReject aggregation when the target skb tailroom cannot accommodate the new\npacket. The caller then falls back to creating a new forward packet\ninstead of appending."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbatman-adv: evitar la agregaci\u00f3n de OGM cuando el espacio de cola (tailroom) del skb es insuficiente\n\nCuando el estado de agregaci\u00f3n de OGM se conmuta en tiempo de ejecuci\u00f3n, un paquete reenviado existente puede haber sido asignado con solo packet_len bytes, mientras que un paquete posterior a\u00fan puede ser seleccionado para agregaci\u00f3n. A\u00f1adir en este caso puede provocar condiciones de desbordamiento de skb_put.\n\nRechazar la agregaci\u00f3n cuando el espacio de cola (tailroom) del skb objetivo no puede acomodar el nuevo paquete. El llamador entonces recurre a la creaci\u00f3n de un nuevo paquete de reenv\u00edo en lugar de a\u00f1adir."}], "id": "CVE-2026-31683", "lastModified": "2026-11-11T23:10:00.263", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}]}, "published": "2026-04-25T09:16:02.037", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0b10a8b355c3f71012ce89289ec2c2f5e3bfd6c1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0d4aef630be9d5f9c1227d07669c26c4383b5ad0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0e35db29fc5a97a8553f7c2d3a2ba730e46b1ee8"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/1ada20331f2df2a942d6b83ae1f04a304b642e2a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/67176c96f325837b0bb3e9538ca2eba414f447d8"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/6755347c5f9bdd44dee80f692208b056fcd40a52"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/6e40ebb999c2c3d2fbb3cacb61f0384ee6e69075"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/eda89a1bae0602aec8314ced299bb243b9f9aeef"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: batman-adv: avoid OGM aggregation when skb tailroom is insufficient", "id": "2461756", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461756"}, "csaw": false, "cwe": "CWE-131", "details": ["A flaw was found in the batman-adv module of the Linux kernel. This vulnerability arises when the Optimized Global Messaging (OGM) aggregation state is dynamically altered, leading to insufficient buffer space (skb tailroom) for network packets. A remote attacker could exploit this condition by sending specially crafted network packets, potentially causing a memory corruption vulnerability that results in a system crash or denial of service. The system may become unstable or unresponsive."], "name": "CVE-2026-31683", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-04-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-31683\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31683\nhttps://lore.kernel.org/linux-cve-announce/2026042545-CVE-2026-31683-b833@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c6c8fea29769d998d94fcec9b9f14d4b52b349d3,67176c96f325837b0bb3e9538ca2eba414f447d8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c6c8fea29769d998d94fcec9b9f14d4b52b349d3,0b10a8b355c3f71012ce89289ec2c2f5e3bfd6c1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c6c8fea29769d998d94fcec9b9f14d4b52b349d3,6755347c5f9bdd44dee80f692208b056fcd40a52)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c6c8fea29769d998d94fcec9b9f14d4b52b349d3,1ada20331f2df2a942d6b83ae1f04a304b642e2a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c6c8fea29769d998d94fcec9b9f14d4b52b349d3,6e40ebb999c2c3d2fbb3cacb61f0384ee6e69075)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c6c8fea29769d998d94fcec9b9f14d4b52b349d3,0e35db29fc5a97a8553f7c2d3a2ba730e46b1ee8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c6c8fea29769d998d94fcec9b9f14d4b52b349d3,eda89a1bae0602aec8314ced299bb243b9f9aeef)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c6c8fea29769d998d94fcec9b9f14d4b52b349d3,0d4aef630be9d5f9c1227d07669c26c4383b5ad0)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.6.38"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,2.6.38)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.253,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.203,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.167,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.130,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.78,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.20,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.10,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-04-27T20:00:05.354578+00:00", "updated": "2026-05-06T22:45:13.833706+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}