CVE-2026-31742

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-31742", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-03-09T15:48:24.138Z", "datePublished": "2026-05-01T14:14:37.495Z", "dateUpdated": "2026-10-19T19:06:07.610Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:24:56.085Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvt: discard stale unicode buffer on alt screen exit after resize\n\nWhen enter_alt_screen() saves vc_uni_lines into vc_saved_uni_lines and\nsets vc_uni_lines to NULL, a subsequent console resize via vc_do_resize()\nskips reallocating the unicode buffer because vc_uni_lines is NULL.\nHowever, vc_saved_uni_lines still points to the old buffer allocated for\nthe original dimensions.\n\nWhen leave_alt_screen() later restores vc_saved_uni_lines, the buffer\ndimensions no longer match vc_rows/vc_cols. Any operation that iterates\nover the unicode buffer using the current dimensions (e.g. csi_J clearing\nthe screen) will access memory out of bounds, causing a kernel oops:\n\n BUG: unable to handle page fault for address: 0x0000002000000020\n RIP: 0010:csi_J+0x133/0x2d0\n\nThe faulting address 0x0000002000000020 is two adjacent u32 space\ncharacters (0x20) interpreted as a pointer, read from the row data area\npast the end of the 25-entry pointer array in a buffer allocated for\n80x25 but accessed with 240x67 dimensions.\n\nFix this by checking whether the console dimensions changed while in the\nalternate screen. If they did, free the stale saved buffer instead of\nrestoring it. The unicode screen will be lazily rebuilt via\nvc_uniscr_check() when next needed."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - The vulnerable VT code is reached by local writes/ioctls to a Linux virtual console tty, not by network packets or adjacent protocols.\nAC:L - An attacker can deterministically create the stale unicode buffer by allocating it, entering alt screen, resizing with TIOCSWINSZ, leaving alt screen, and issuing a screen-clear/read operation.\nPR:L - The path is reachable by an unprivileged local user who owns or can write to a virtual console tty; TIOCSWINSZ has no capability check on this path.\nUI:N - No separate victim action is required once the attacker has local tty access; the attacker drives the escape sequences and resize directly.\nS:U - The impact is within the same kernel/host security authority and does not cross a VM, IOMMU, or sandbox boundary.\nC:H - The stale dimensions can make unicode-buffer users perform out-of-bounds reads from kernel memory, including via unicode screen-buffer access paths; per the required guidance, OOB reads are scored High unless strictly bounded.\nI:H - The stale row pointers/row lengths can drive out-of-bounds kernel writes during unicode screen clearing, so this is kernel memory corruption and is scored High under the required guidance.\nA:H - The demonstrated impact is a kernel oops/page fault in csi_J, and the local trigger can be repeated to crash the system."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/tty/vt/vt.c"], "versions": [{"version": "c4efef65a46f610418a3f69149c51492d31c8591", "lessThan": "891d790fdb5c96c6e1d2841e06ee6c360f2d1288", "status": "affected", "versionType": "git"}, {"version": "1cf66bd9127447c57295f5199029e8d8b47c6c67", "lessThan": "428fdf55301e6c8fa5a36b426240797b1cf86570", "status": "affected", "versionType": "git"}, {"version": "5eb608319bb56464674a71b4a66ea65c6c435d64", "lessThan": "40014493cece72a0be5672cd86763e53fb3ec613", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/tty/vt/vt.c"], "versions": [{"version": "6.18.20", "lessThan": "6.18.22", "status": "affected", "versionType": "semver"}, {"version": "6.19.10", "lessThan": "6.19.12", "status": "affected", "versionType": "semver"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18.20", "versionEndExcluding": "6.18.22"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.19.10", "versionEndExcluding": "6.19.12"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/891d790fdb5c96c6e1d2841e06ee6c360f2d1288"}, {"url": "https://git.kernel.org/stable/c/428fdf55301e6c8fa5a36b426240797b1cf86570"}, {"url": "https://git.kernel.org/stable/c/40014493cece72a0be5672cd86763e53fb3ec613"}], "title": "vt: discard stale unicode buffer on alt screen exit after resize", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-31742", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:12:57.933644Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read"}]}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-19T19:06:07.610Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-31742", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:12:57.933644Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T15:12:58.502Z"}}], "cna": {"title": "vt: discard stale unicode buffer on alt screen exit after resize", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:L - The vulnerable VT code is reached by local writes/ioctls to a Linux virtual console tty, not by network packets or adjacent protocols.\nAC:L - An attacker can deterministically create the stale unicode buffer by allocating it, entering alt screen, resizing with TIOCSWINSZ, leaving alt screen, and issuing a screen-clear/read operation.\nPR:L - The path is reachable by an unprivileged local user who owns or can write to a virtual console tty; TIOCSWINSZ has no capability check on this path.\nUI:N - No separate victim action is required once the attacker has local tty access; the attacker drives the escape sequences and resize directly.\nS:U - The impact is within the same kernel/host security authority and does not cross a VM, IOMMU, or sandbox boundary.\nC:H - The stale dimensions can make unicode-buffer users perform out-of-bounds reads from kernel memory, including via unicode screen-buffer access paths; per the required guidance, OOB reads are scored High unless strictly bounded.\nI:H - The stale row pointers/row lengths can drive out-of-bounds kernel writes during unicode screen clearing, so this is kernel memory corruption and is scored High under the required guidance.\nA:H - The demonstrated impact is a kernel oops/page fault in csi_J, and the local trigger can be repeated to crash the system."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "c4efef65a46f610418a3f69149c51492d31c8591", "lessThan": "891d790fdb5c96c6e1d2841e06ee6c360f2d1288", "versionType": "git"}, {"status": "affected", "version": "1cf66bd9127447c57295f5199029e8d8b47c6c67", "lessThan": "428fdf55301e6c8fa5a36b426240797b1cf86570", "versionType": "git"}, {"status": "affected", "version": "5eb608319bb56464674a71b4a66ea65c6c435d64", "lessThan": "40014493cece72a0be5672cd86763e53fb3ec613", "versionType": "git"}], "programFiles": ["drivers/tty/vt/vt.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.18.20", "lessThan": "6.18.22", "versionType": "semver"}, {"status": "affected", "version": "6.19.10", "lessThan": "6.19.12", "versionType": "semver"}], "programFiles": ["drivers/tty/vt/vt.c"], "defaultStatus": "unaffected"}], "references": [{"url": "https://git.kernel.org/stable/c/891d790fdb5c96c6e1d2841e06ee6c360f2d1288"}, {"url": "https://git.kernel.org/stable/c/428fdf55301e6c8fa5a36b426240797b1cf86570"}, {"url": "https://git.kernel.org/stable/c/40014493cece72a0be5672cd86763e53fb3ec613"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvt: discard stale unicode buffer on alt screen exit after resize\n\nWhen enter_alt_screen() saves vc_uni_lines into vc_saved_uni_lines and\nsets vc_uni_lines to NULL, a subsequent console resize via vc_do_resize()\nskips reallocating the unicode buffer because vc_uni_lines is NULL.\nHowever, vc_saved_uni_lines still points to the old buffer allocated for\nthe original dimensions.\n\nWhen leave_alt_screen() later restores vc_saved_uni_lines, the buffer\ndimensions no longer match vc_rows/vc_cols. Any operation that iterates\nover the unicode buffer using the current dimensions (e.g. csi_J clearing\nthe screen) will access memory out of bounds, causing a kernel oops:\n\n BUG: unable to handle page fault for address: 0x0000002000000020\n RIP: 0010:csi_J+0x133/0x2d0\n\nThe faulting address 0x0000002000000020 is two adjacent u32 space\ncharacters (0x20) interpreted as a pointer, read from the row data area\npast the end of the 25-entry pointer array in a buffer allocated for\n80x25 but accessed with 240x67 dimensions.\n\nFix this by checking whether the console dimensions changed while in the\nalternate screen. If they did, free the stale saved buffer instead of\nrestoring it. The unicode screen will be lazily rebuilt via\nvc_uniscr_check() when next needed."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.22", "versionStartIncluding": "6.18.20"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.19.12", "versionStartIncluding": "6.19.10"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:24:56.085Z"}}}, "cveMetadata": {"cveId": "CVE-2026-31742", "state": "PUBLISHED", "dateUpdated": "2026-10-19T19:06:07.610Z", "dateReserved": "2026-03-09T15:48:24.138Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-05-01T14:14:37.495Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/tty/vt/vt.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "891d790fdb5c96c6e1d2841e06ee6c360f2d1288", "status": "affected", "version": "c4efef65a46f610418a3f69149c51492d31c8591", "versionType": "git"}, {"lessThan": "428fdf55301e6c8fa5a36b426240797b1cf86570", "status": "affected", "version": "1cf66bd9127447c57295f5199029e8d8b47c6c67", "versionType": "git"}, {"lessThan": "40014493cece72a0be5672cd86763e53fb3ec613", "status": "affected", "version": "5eb608319bb56464674a71b4a66ea65c6c435d64", "versionType": "git"}]}, {"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/tty/vt/vt.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "6.18.22", "status": "affected", "version": "6.18.20", "versionType": "semver"}, {"lessThan": "6.19.12", "status": "affected", "version": "6.19.10", "versionType": "semver"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "7B6CD870-DF92-432B-A966-F190AE04E97F", "versionEndExcluding": "6.18.22", "versionStartIncluding": "6.18.20", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "6BF1D424-BCB7-4168-AFD4-DE335B44DACF", "versionEndExcluding": "6.19.12", "versionStartIncluding": "6.19.10", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*", "matchCriteriaId": "58A9FEFF-C040-420D-8F0A-BFDAAA1DF258", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*", "matchCriteriaId": "1D2315C0-D46F-4F85-9754-F9E5E11374A6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvt: discard stale unicode buffer on alt screen exit after resize\n\nWhen enter_alt_screen() saves vc_uni_lines into vc_saved_uni_lines and\nsets vc_uni_lines to NULL, a subsequent console resize via vc_do_resize()\nskips reallocating the unicode buffer because vc_uni_lines is NULL.\nHowever, vc_saved_uni_lines still points to the old buffer allocated for\nthe original dimensions.\n\nWhen leave_alt_screen() later restores vc_saved_uni_lines, the buffer\ndimensions no longer match vc_rows/vc_cols. Any operation that iterates\nover the unicode buffer using the current dimensions (e.g. csi_J clearing\nthe screen) will access memory out of bounds, causing a kernel oops:\n\n BUG: unable to handle page fault for address: 0x0000002000000020\n RIP: 0010:csi_J+0x133/0x2d0\n\nThe faulting address 0x0000002000000020 is two adjacent u32 space\ncharacters (0x20) interpreted as a pointer, read from the row data area\npast the end of the 25-entry pointer array in a buffer allocated for\n80x25 but accessed with 240x67 dimensions.\n\nFix this by checking whether the console dimensions changed while in the\nalternate screen. If they did, free the stale saved buffer instead of\nrestoring it. The unicode screen will be lazily rebuilt via\nvc_uniscr_check() when next needed."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nvt: descartar b\u00fafer Unicode obsoleto al salir de la pantalla alternativa despu\u00e9s de un redimensionamiento\n\nCuando enter_alt_screen() guarda vc_uni_lines en vc_saved_uni_lines y establece vc_uni_lines en NULL, un redimensionamiento posterior de la consola a trav\u00e9s de vc_do_resize() omite la reasignaci\u00f3n del b\u00fafer Unicode porque vc_uni_lines es NULL. Sin embargo, vc_saved_uni_lines todav\u00eda apunta al b\u00fafer antiguo asignado para las dimensiones originales.\n\nCuando leave_alt_screen() m\u00e1s tarde restaura vc_saved_uni_lines, las dimensiones del b\u00fafer ya no coinciden con vc_rows/vc_cols. Cualquier operaci\u00f3n que itere sobre el b\u00fafer Unicode utilizando las dimensiones actuales (por ejemplo, csi_J borrando la pantalla) acceder\u00e1 a memoria fuera de los l\u00edmites, causando un kernel oops:\n\n BUG: no se puede manejar el fallo de p\u00e1gina para la direcci\u00f3n: 0x 0000002000000020\n RIP: 0010:csi_J+0x133/0x2d0\n\nLa direcci\u00f3n de fallo 0x 0000002000000020 son dos caracteres de espacio u32 adyacentes (0x20) interpretados como un puntero, le\u00eddos del \u00e1rea de datos de fila m\u00e1s all\u00e1 del final del array de punteros de 25 entradas en un b\u00fafer asignado para 80x25 pero accedido con dimensiones de 240x67.\n\nSolucione esto comprobando si las dimensiones de la consola cambiaron mientras estaba en la pantalla alternativa. Si lo hicieron, libere el b\u00fafer guardado obsoleto en lugar de restaurarlo. La pantalla Unicode se reconstruir\u00e1 de forma perezosa a trav\u00e9s de vc_uniscr_check() cuando sea necesario de nuevo."}], "id": "CVE-2026-31742", "lastModified": "2026-11-11T21:10:00.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-31742", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-16T15:12:57.933644Z", "version": "2.0.3"}}]}, "published": "2026-05-01T15:16:36.937", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/40014493cece72a0be5672cd86763e53fb3ec613"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/428fdf55301e6c8fa5a36b426240797b1cf86570"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/891d790fdb5c96c6e1d2841e06ee6c360f2d1288"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-125"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{"bugzilla": {"description": "kernel: vt: discard stale unicode buffer on alt screen exit after resize", "id": "2464454", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464454"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-131", "details": ["A flaw was found in the Linux kernel. When a console is resized while in an alternate screen mode, the system may fail to properly update its internal buffer for unicode characters. This can lead to an out-of-bounds memory access when the alternate screen mode is exited, potentially causing a system crash (kernel oops) and resulting in a Denial of Service (DoS)."], "name": "CVE-2026-31742", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-01T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-31742\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31742\nhttps://lore.kernel.org/linux-cve-announce/2026050140-CVE-2026-31742-e1b4@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c4efef65a46f610418a3f69149c51492d31c8591,891d790fdb5c96c6e1d2841e06ee6c360f2d1288)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1cf66bd9127447c57295f5199029e8d8b47c6c67,428fdf55301e6c8fa5a36b426240797b1cf86570)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5eb608319bb56464674a71b4a66ea65c6c435d64,40014493cece72a0be5672cd86763e53fb3ec613)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.18.20,6.18.22)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.19.10,6.19.12)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-01T16:15:20.239383+00:00", "updated": "2026-05-07T18:30:25.975702+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}