CVE-2026-31780

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-31780", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-03-09T15:48:24.141Z", "datePublished": "2026-05-01T14:15:07.253Z", "dateUpdated": "2026-08-05T12:25:08.895Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:25:08.895Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation\n\nThe variable valuesize is declared as u8 but accumulates the total\nlength of all SSIDs to scan. Each SSID contributes up to 33 bytes\n(IEEE80211_MAX_SSID_LEN + 1), and with WILC_MAX_NUM_PROBED_SSID (10)\nSSIDs the total can reach 330, which wraps around to 74 when stored\nin a u8.\n\nThis causes kmalloc to allocate only 75 bytes while the subsequent\nmemcpy writes up to 331 bytes into the buffer, resulting in a 256-byte\nheap buffer overflow.\n\nWiden valuesize from u8 to u32 to accommodate the full range."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - The vulnerable path is reached by a local nl80211 generic-netlink trigger-scan request that supplies the probe SSID list. Over-the-air WiFi frames do not control this buffer.\nAC:L - The attacker can directly choose up to 10 SSIDs of up to 32 bytes each, reliably causing the u8 size wrap and heap overflow when scan is accepted. No race or hard-to-hit external condition is required.\nPR:L - NL80211_CMD_TRIGGER_SCAN is gated by GENL_UNS_ADMIN_PERM and netlink_ns_capable(..., CAP_NET_ADMIN), so namespace-scoped CAP_NET_ADMIN over the target wireless netns is sufficient. It is not reachable with no privileges.\nUI:N - No victim action is required once the attacker can issue the scan request. The attacker triggers the vulnerable code directly.\nS:U - The corruption occurs in the kernel while servicing a kernel wireless driver operation. It does not cross a VM, IOMMU, or other separate security authority boundary.\nC:H - The bug is a controlled kernel heap buffer overflow of up to 256 bytes, which can corrupt adjacent heap objects and plausibly support information disclosure during exploitation. Under the higher-severity rule, memory corruption is scored high for confidentiality.\nI:H - The attacker controls much of the data written past the undersized allocation into adjacent kernel heap memory. This is a kernel out-of-bounds write and is defensibly exploitable for integrity compromise.\nA:H - At minimum, the heap overflow can crash or oops the kernel, and it can be triggered repeatedly through scan requests. Kernel crash impact is high availability loss."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/microchip/wilc1000/hif.c"], "versions": [{"version": "c5c77ba18ea66aa05441c71e38473efb787705a4", "lessThan": "34a23fd9ddd683a03c7e8cc0ceded3e59e354b99", "status": "affected", "versionType": "git"}, {"version": "c5c77ba18ea66aa05441c71e38473efb787705a4", "lessThan": "549f02d8ec94d39092ab6d9b103d0d6783a4b024", "status": "affected", "versionType": "git"}, {"version": "c5c77ba18ea66aa05441c71e38473efb787705a4", "lessThan": "bfbddeadd4779651403035ee177ae2f22f9f5521", "status": "affected", "versionType": "git"}, {"version": "c5c77ba18ea66aa05441c71e38473efb787705a4", "lessThan": "9907ac9b9a18b92fc34b9e4cb9e10f208dc1d3f7", "status": "affected", "versionType": "git"}, {"version": "c5c77ba18ea66aa05441c71e38473efb787705a4", "lessThan": "c97b2a00059608592ad0d86fbb813a4f8cf9464b", "status": "affected", "versionType": "git"}, {"version": "c5c77ba18ea66aa05441c71e38473efb787705a4", "lessThan": "d8388614de613c28eeb659c10115060a83739924", "status": "affected", "versionType": "git"}, {"version": "c5c77ba18ea66aa05441c71e38473efb787705a4", "lessThan": "0c7f21d8bd2f93998b72b7a7f93152336aeca4dd", "status": "affected", "versionType": "git"}, {"version": "c5c77ba18ea66aa05441c71e38473efb787705a4", "lessThan": "d049e56b1739101d1c4d81deedb269c52a8dbba0", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/microchip/wilc1000/hif.c"], "versions": [{"version": "4.2", "status": "affected"}, {"version": "0", "lessThan": "4.2", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.253", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.203", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.168", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.134", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.81", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.22", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.12", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "5.10.253"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "5.15.203"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.1.168"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.6.134"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.12.81"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.18.22"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.19.12"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/34a23fd9ddd683a03c7e8cc0ceded3e59e354b99"}, {"url": "https://git.kernel.org/stable/c/549f02d8ec94d39092ab6d9b103d0d6783a4b024"}, {"url": "https://git.kernel.org/stable/c/bfbddeadd4779651403035ee177ae2f22f9f5521"}, {"url": "https://git.kernel.org/stable/c/9907ac9b9a18b92fc34b9e4cb9e10f208dc1d3f7"}, {"url": "https://git.kernel.org/stable/c/c97b2a00059608592ad0d86fbb813a4f8cf9464b"}, {"url": "https://git.kernel.org/stable/c/d8388614de613c28eeb659c10115060a83739924"}, {"url": "https://git.kernel.org/stable/c/0c7f21d8bd2f93998b72b7a7f93152336aeca4dd"}, {"url": "https://git.kernel.org/stable/c/d049e56b1739101d1c4d81deedb269c52a8dbba0"}], "title": "wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/wireless/microchip/wilc1000/hif.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "34a23fd9ddd683a03c7e8cc0ceded3e59e354b99", "status": "affected", "version": "c5c77ba18ea66aa05441c71e38473efb787705a4", "versionType": "git"}, {"lessThan": "549f02d8ec94d39092ab6d9b103d0d6783a4b024", "status": "affected", "version": "c5c77ba18ea66aa05441c71e38473efb787705a4", "versionType": "git"}, {"lessThan": "bfbddeadd4779651403035ee177ae2f22f9f5521", "status": "affected", "version": "c5c77ba18ea66aa05441c71e38473efb787705a4", "versionType": "git"}, {"lessThan": "9907ac9b9a18b92fc34b9e4cb9e10f208dc1d3f7", "status": "affected", "version": "c5c77ba18ea66aa05441c71e38473efb787705a4", "versionType": "git"}, {"lessThan": "c97b2a00059608592ad0d86fbb813a4f8cf9464b", "status": "affected", "version": "c5c77ba18ea66aa05441c71e38473efb787705a4", "versionType": "git"}, {"lessThan": "d8388614de613c28eeb659c10115060a83739924", "status": "affected", "version": "c5c77ba18ea66aa05441c71e38473efb787705a4", "versionType": "git"}, {"lessThan": "0c7f21d8bd2f93998b72b7a7f93152336aeca4dd", "status": "affected", "version": "c5c77ba18ea66aa05441c71e38473efb787705a4", "versionType": "git"}, {"lessThan": "d049e56b1739101d1c4d81deedb269c52a8dbba0", "status": "affected", "version": "c5c77ba18ea66aa05441c71e38473efb787705a4", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/wireless/microchip/wilc1000/hif.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.2"}, {"lessThan": "4.2", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.253", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.203", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.168", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.134", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.81", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.22", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.12", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "CC85AD7F-B910-43F1-9A7F-94BC2781DACB", "versionEndExcluding": "5.10.253", "versionStartIncluding": "4.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "20DDB3E9-AABF-4107-ADB0-5362AA067045", "versionEndExcluding": "5.15.203", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E2DDDCA1-6DAB-4018-B920-8F045DDD8D3B", "versionEndExcluding": "6.1.168", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "F56F925B-BAF8-4F4B-B62F-1496AF19A307", "versionEndExcluding": "6.6.134", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "6EF80433-B33B-43C5-8E64-0FA7B8DCE1BC", "versionEndExcluding": "6.12.81", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C9DF8BCE-36D3-475D-9D21-19E4F02F9029", "versionEndExcluding": "6.18.22", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "0A2B9540-02D5-41B4-B16A-82AF66FD4F36", "versionEndExcluding": "6.19.12", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "F253B622-8837-4245-BCE5-A7BF8FC76A16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "F666C8D8-6538-46D4-B318-87610DE64C34", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*", "matchCriteriaId": "02259FDA-961B-47BC-AE7F-93D7EC6E90C2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*", "matchCriteriaId": "58A9FEFF-C040-420D-8F0A-BFDAAA1DF258", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*", "matchCriteriaId": "1D2315C0-D46F-4F85-9754-F9E5E11374A6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation\n\nThe variable valuesize is declared as u8 but accumulates the total\nlength of all SSIDs to scan. Each SSID contributes up to 33 bytes\n(IEEE80211_MAX_SSID_LEN + 1), and with WILC_MAX_NUM_PROBED_SSID (10)\nSSIDs the total can reach 330, which wraps around to 74 when stored\nin a u8.\n\nThis causes kmalloc to allocate only 75 bytes while the subsequent\nmemcpy writes up to 331 bytes into the buffer, resulting in a 256-byte\nheap buffer overflow.\n\nWiden valuesize from u8 to u32 to accommodate the full range."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nwifi: wilc1000: corregir desbordamiento de u8 en el c\u00e1lculo del tama\u00f1o del b\u00fafer de escaneo de SSID\n\nLa variable valuesize est\u00e1 declarada como u8 pero acumula la longitud total de todos los SSIDs a escanear. Cada SSID contribuye con hasta 33 bytes (IEEE80211_MAX_SSID_LEN + 1), y con WILC_MAX_NUM_PROBED_SSID (10) SSIDs el total puede alcanzar 330, lo que se envuelve a 74 cuando se almacena en un u8.\n\nEsto hace que kmalloc asigne solo 75 bytes mientras que el memcpy subsiguiente escribe hasta 331 bytes en el b\u00fafer, lo que resulta en un desbordamiento de b\u00fafer de pila de 256 bytes.\n\nAmpliar valuesize de u8 a u32 para acomodar el rango completo."}], "id": "CVE-2026-31780", "lastModified": "2026-11-11T21:10:00.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}]}, "published": "2026-05-01T15:16:41.453", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0c7f21d8bd2f93998b72b7a7f93152336aeca4dd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/34a23fd9ddd683a03c7e8cc0ceded3e59e354b99"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/549f02d8ec94d39092ab6d9b103d0d6783a4b024"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9907ac9b9a18b92fc34b9e4cb9e10f208dc1d3f7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/bfbddeadd4779651403035ee177ae2f22f9f5521"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/c97b2a00059608592ad0d86fbb813a4f8cf9464b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d049e56b1739101d1c4d81deedb269c52a8dbba0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d8388614de613c28eeb659c10115060a83739924"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation", "id": "2464409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464409"}, "csaw": false, "cwe": "CWE-190", "details": ["A flaw was found in the Linux kernel's wilc1000 Wi-Fi driver. An integer overflow vulnerability exists in the calculation of the SSID scan buffer size. This can lead to a heap buffer overflow when processing multiple Service Set Identifiers (SSIDs), potentially allowing a local attacker to cause a denial of service or execute arbitrary code."], "name": "CVE-2026-31780", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-01T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-31780\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31780\nhttps://lore.kernel.org/linux-cve-announce/2026050151-CVE-2026-31780-b92a@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c5c77ba18ea66aa05441c71e38473efb787705a4,34a23fd9ddd683a03c7e8cc0ceded3e59e354b99)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c5c77ba18ea66aa05441c71e38473efb787705a4,549f02d8ec94d39092ab6d9b103d0d6783a4b024)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c5c77ba18ea66aa05441c71e38473efb787705a4,bfbddeadd4779651403035ee177ae2f22f9f5521)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c5c77ba18ea66aa05441c71e38473efb787705a4,9907ac9b9a18b92fc34b9e4cb9e10f208dc1d3f7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c5c77ba18ea66aa05441c71e38473efb787705a4,c97b2a00059608592ad0d86fbb813a4f8cf9464b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c5c77ba18ea66aa05441c71e38473efb787705a4,d8388614de613c28eeb659c10115060a83739924)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c5c77ba18ea66aa05441c71e38473efb787705a4,0c7f21d8bd2f93998b72b7a7f93152336aeca4dd)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c5c77ba18ea66aa05441c71e38473efb787705a4,d049e56b1739101d1c4d81deedb269c52a8dbba0)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.2"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,4.2)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.253,5.10.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.203,5.15.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.168,6.1.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.134,6.6.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.81,6.12.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.22,6.18.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.12,6.19.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-01T19:45:23.954408+00:00", "updated": "2026-05-11T23:45:03.145364+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}