CVE-2026-43084

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-43084", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-01T14:12:55.983Z", "datePublished": "2026-05-06T07:40:19.253Z", "dateUpdated": "2026-10-19T19:06:13.178Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:25:51.088Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_queue: make hash table per queue\n\nSharing a global hash table among all queues is tempting, but\nit can cause crash:\n\nBUG: KASAN: slab-use-after-free in nfqnl_recv_verdict+0x11ac/0x15e0 [nfnetlink_queue]\n[..]\n nfqnl_recv_verdict+0x11ac/0x15e0 [nfnetlink_queue]\n nfnetlink_rcv_msg+0x46a/0x930\n kmem_cache_alloc_node_noprof+0x11e/0x450\n\nstruct nf_queue_entry is freed via kfree, but parallel cpu can still\nencounter such an nf_queue_entry when walking the list.\n\nAlternative fix is to free the nf_queue_entry via kfree_rcu() instead,\nbut as we have to alloc/free for each skb this will cause more mem\npressure."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - The vulnerable path is reached through local NETLINK_NETFILTER/NFQUEUE verdict handling, not directly by unauthenticated network packets. A local attacker can set up NFQUEUE state and generate queued packets.\nAC:L - The attacker can control the relevant queues, packet flow, and concurrent verdict submissions, so the race can be exercised repeatedly. Any uncertainty about hash bucket timing is scored as low complexity under the required rule.\nPR:L - NFNETLINK receive requires CAP_NET_ADMIN in the target network namespace. Netfilter is reachable from unprivileged users through user and network namespaces, so this is low privileges rather than high.\nUI:N - No victim action is required after the attacker runs local code. The attacker can create the queue setup, send packets, and issue verdicts directly.\nS:U - The vulnerability corrupts kernel memory within the same kernel security authority. It is a standard local kernel privilege escalation/DoS scenario, not a cross-scope escape.\nC:H - This is a use-after-free of struct nf_queue_entry during rhashtable lookup, and reclaimed object contents can be exposed or steered by heap manipulation. Per kernel scoring guidance, UAF memory corruption supports high confidentiality impact.\nI:H - The stale nf_queue_entry can be acted on after lookup, including removal/list operations and later reinjection logic, giving plausible kernel memory corruption primitives. Per kernel scoring guidance, UAFs are high integrity impact.\nA:H - The fix cites a KASAN slab-use-after-free crash in nfqnl_recv_verdict, and the bug can crash the kernel. Kernel oops/panic availability impact is high."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["include/net/netfilter/nf_queue.h", "net/netfilter/nfnetlink_queue.c"], "versions": [{"version": "371de2bef6582a3f58049b3d18e190924af9c9a0", "lessThan": "22730cb96093b5be0609063bbb1923dbecd61252", "status": "affected", "versionType": "git"}, {"version": "870e3e63da8e88daffe9d692a025c711658018a8", "lessThan": "41e3652a178cb0eecd48e0e6e27fbb73a004046a", "status": "affected", "versionType": "git"}, {"version": "70e2e3ce4f6841e12ec1c104fc76c0e707398ec4", "lessThan": "9e5ebef91120d2764aefe557c3a484b6288f341f", "status": "affected", "versionType": "git"}, {"version": "e19079adcd26a25d7d3e586b1837493361fdf8b6", "lessThan": "936206e3f6ff411581e615e930263d6f8b78df9d", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["include/net/netfilter/nf_queue.h", "net/netfilter/nfnetlink_queue.c"], "versions": [{"version": "6.12.75", "lessThan": "6.12.83", "status": "affected", "versionType": "semver"}, {"version": "6.18.14", "lessThan": "6.18.24", "status": "affected", "versionType": "semver"}, {"version": "6.19.4", "lessThan": "6.19.14", "status": "affected", "versionType": "semver"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.12.75", "versionEndExcluding": "6.12.83"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18.14", "versionEndExcluding": "6.18.24"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.19.4", "versionEndExcluding": "6.19.14"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/22730cb96093b5be0609063bbb1923dbecd61252"}, {"url": "https://git.kernel.org/stable/c/41e3652a178cb0eecd48e0e6e27fbb73a004046a"}, {"url": "https://git.kernel.org/stable/c/9e5ebef91120d2764aefe557c3a484b6288f341f"}, {"url": "https://git.kernel.org/stable/c/936206e3f6ff411581e615e930263d6f8b78df9d"}], "title": "netfilter: nfnetlink_queue: make hash table per queue", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-43084", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:14:29.678333Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416 Use After Free"}]}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-19T19:06:13.178Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-43084", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:14:29.678333Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416 Use After Free"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T15:14:30.318Z"}}], "cna": {"title": "netfilter: nfnetlink_queue: make hash table per queue", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:L - The vulnerable path is reached through local NETLINK_NETFILTER/NFQUEUE verdict handling, not directly by unauthenticated network packets. A local attacker can set up NFQUEUE state and generate queued packets.\nAC:L - The attacker can control the relevant queues, packet flow, and concurrent verdict submissions, so the race can be exercised repeatedly. Any uncertainty about hash bucket timing is scored as low complexity under the required rule.\nPR:L - NFNETLINK receive requires CAP_NET_ADMIN in the target network namespace. Netfilter is reachable from unprivileged users through user and network namespaces, so this is low privileges rather than high.\nUI:N - No victim action is required after the attacker runs local code. The attacker can create the queue setup, send packets, and issue verdicts directly.\nS:U - The vulnerability corrupts kernel memory within the same kernel security authority. It is a standard local kernel privilege escalation/DoS scenario, not a cross-scope escape.\nC:H - This is a use-after-free of struct nf_queue_entry during rhashtable lookup, and reclaimed object contents can be exposed or steered by heap manipulation. Per kernel scoring guidance, UAF memory corruption supports high confidentiality impact.\nI:H - The stale nf_queue_entry can be acted on after lookup, including removal/list operations and later reinjection logic, giving plausible kernel memory corruption primitives. Per kernel scoring guidance, UAFs are high integrity impact.\nA:H - The fix cites a KASAN slab-use-after-free crash in nfqnl_recv_verdict, and the bug can crash the kernel. Kernel oops/panic availability impact is high."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "371de2bef6582a3f58049b3d18e190924af9c9a0", "lessThan": "22730cb96093b5be0609063bbb1923dbecd61252", "versionType": "git"}, {"status": "affected", "version": "870e3e63da8e88daffe9d692a025c711658018a8", "lessThan": "41e3652a178cb0eecd48e0e6e27fbb73a004046a", "versionType": "git"}, {"status": "affected", "version": "70e2e3ce4f6841e12ec1c104fc76c0e707398ec4", "lessThan": "9e5ebef91120d2764aefe557c3a484b6288f341f", "versionType": "git"}, {"status": "affected", "version": "e19079adcd26a25d7d3e586b1837493361fdf8b6", "lessThan": "936206e3f6ff411581e615e930263d6f8b78df9d", "versionType": "git"}], "programFiles": ["include/net/netfilter/nf_queue.h", "net/netfilter/nfnetlink_queue.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.12.75", "lessThan": "6.12.83", "versionType": "semver"}, {"status": "affected", "version": "6.18.14", "lessThan": "6.18.24", "versionType": "semver"}, {"status": "affected", "version": "6.19.4", "lessThan": "6.19.14", "versionType": "semver"}], "programFiles": ["include/net/netfilter/nf_queue.h", "net/netfilter/nfnetlink_queue.c"], "defaultStatus": "unaffected"}], "references": [{"url": "https://git.kernel.org/stable/c/22730cb96093b5be0609063bbb1923dbecd61252"}, {"url": "https://git.kernel.org/stable/c/41e3652a178cb0eecd48e0e6e27fbb73a004046a"}, {"url": "https://git.kernel.org/stable/c/9e5ebef91120d2764aefe557c3a484b6288f341f"}, {"url": "https://git.kernel.org/stable/c/936206e3f6ff411581e615e930263d6f8b78df9d"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_queue: make hash table per queue\n\nSharing a global hash table among all queues is tempting, but\nit can cause crash:\n\nBUG: KASAN: slab-use-after-free in nfqnl_recv_verdict+0x11ac/0x15e0 [nfnetlink_queue]\n[..]\n nfqnl_recv_verdict+0x11ac/0x15e0 [nfnetlink_queue]\n nfnetlink_rcv_msg+0x46a/0x930\n kmem_cache_alloc_node_noprof+0x11e/0x450\n\nstruct nf_queue_entry is freed via kfree, but parallel cpu can still\nencounter such an nf_queue_entry when walking the list.\n\nAlternative fix is to free the nf_queue_entry via kfree_rcu() instead,\nbut as we have to alloc/free for each skb this will cause more mem\npressure."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.83", "versionStartIncluding": "6.12.75"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.24", "versionStartIncluding": "6.18.14"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.19.14", "versionStartIncluding": "6.19.4"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:25:51.088Z"}}}, "cveMetadata": {"cveId": "CVE-2026-43084", "state": "PUBLISHED", "dateUpdated": "2026-10-19T19:06:13.178Z", "dateReserved": "2026-05-01T14:12:55.983Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-05-06T07:40:19.253Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["include/net/netfilter/nf_queue.h", "net/netfilter/nfnetlink_queue.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "22730cb96093b5be0609063bbb1923dbecd61252", "status": "affected", "version": "371de2bef6582a3f58049b3d18e190924af9c9a0", "versionType": "git"}, {"lessThan": "41e3652a178cb0eecd48e0e6e27fbb73a004046a", "status": "affected", "version": "870e3e63da8e88daffe9d692a025c711658018a8", "versionType": "git"}, {"lessThan": "9e5ebef91120d2764aefe557c3a484b6288f341f", "status": "affected", "version": "70e2e3ce4f6841e12ec1c104fc76c0e707398ec4", "versionType": "git"}, {"lessThan": "936206e3f6ff411581e615e930263d6f8b78df9d", "status": "affected", "version": "e19079adcd26a25d7d3e586b1837493361fdf8b6", "versionType": "git"}]}, {"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["include/net/netfilter/nf_queue.h", "net/netfilter/nfnetlink_queue.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "6.12.83", "status": "affected", "version": "6.12.75", "versionType": "semver"}, {"lessThan": "6.18.24", "status": "affected", "version": "6.18.14", "versionType": "semver"}, {"lessThan": "6.19.14", "status": "affected", "version": "6.19.4", "versionType": "semver"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E1A21D87-0999-4B99-8C46-E845E91596BC", "versionEndExcluding": "6.12.83", "versionStartIncluding": "6.12.75", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "F1EF34AA-110D-41A4-A945-0F3F8D525789", "versionEndExcluding": "6.18.24", "versionStartIncluding": "6.18.14", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "92491DD1-C41C-4797-A5EB-8523985265BA", "versionEndExcluding": "6.19.14", "versionStartIncluding": "6.19.4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_queue: make hash table per queue\n\nSharing a global hash table among all queues is tempting, but\nit can cause crash:\n\nBUG: KASAN: slab-use-after-free in nfqnl_recv_verdict+0x11ac/0x15e0 [nfnetlink_queue]\n[..]\n nfqnl_recv_verdict+0x11ac/0x15e0 [nfnetlink_queue]\n nfnetlink_rcv_msg+0x46a/0x930\n kmem_cache_alloc_node_noprof+0x11e/0x450\n\nstruct nf_queue_entry is freed via kfree, but parallel cpu can still\nencounter such an nf_queue_entry when walking the list.\n\nAlternative fix is to free the nf_queue_entry via kfree_rcu() instead,\nbut as we have to alloc/free for each skb this will cause more mem\npressure."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnetfilter: nfnetlink_queue: hacer tabla hash por cola\n\nCompartir una tabla hash global entre todas las colas es tentador, pero puede causar un fallo:\n\nBUG: KASAN: uso despu\u00e9s de liberaci\u00f3n de slab en nfqnl_recv_verdict+0x 11ac/0x 15e0 [nfnetlink_queue]\n[..]\n nfqnl_recv_verdict+0x 11ac/0x 15e0 [nfnetlink_queue]\n nfnetlink_rcv_msg+0x46a/0x930\n kmem_cache_alloc_node_noprof+0x11e/0x450\n\nLa estructura nf_queue_entry es liberada v\u00eda kfree, pero una CPU paralela a\u00fan puede encontrar dicha nf_queue_entry al recorrer la lista.\n\nUna soluci\u00f3n alternativa es liberar la nf_queue_entry v\u00eda kfree_rcu() en su lugar, pero como tenemos que asignar/liberar para cada skb, esto causar\u00e1 m\u00e1s presi\u00f3n de memoria."}], "id": "CVE-2026-43084", "lastModified": "2026-11-11T21:10:00.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-43084", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-16T15:14:29.678333Z", "version": "2.0.3"}}]}, "published": "2026-05-06T10:16:21.610", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/22730cb96093b5be0609063bbb1923dbecd61252"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/41e3652a178cb0eecd48e0e6e27fbb73a004046a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/936206e3f6ff411581e615e930263d6f8b78df9d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9e5ebef91120d2764aefe557c3a484b6288f341f"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-416"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{"bugzilla": {"description": "kernel: netfilter: nfnetlink_queue: make hash table per queue", "id": "2467021", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467021"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-364", "details": ["A flaw was found in the Linux kernel's netfilter component. This vulnerability, a use-after-free, occurs due to the sharing of a global hash table among all queues in `nfnetlink_queue`. This allows a parallel CPU to access a `nf_queue_entry` after it has been freed, leading to a system crash and a Denial of Service (DoS)."], "name": "CVE-2026-43084", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-06T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-43084\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-43084\nhttps://lore.kernel.org/linux-cve-announce/2026050615-CVE-2026-43084-963f@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[371de2bef6582a3f58049b3d18e190924af9c9a0,22730cb96093b5be0609063bbb1923dbecd61252)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[870e3e63da8e88daffe9d692a025c711658018a8,41e3652a178cb0eecd48e0e6e27fbb73a004046a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[70e2e3ce4f6841e12ec1c104fc76c0e707398ec4,9e5ebef91120d2764aefe557c3a484b6288f341f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e19079adcd26a25d7d3e586b1837493361fdf8b6,936206e3f6ff411581e615e930263d6f8b78df9d)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.12.75,6.12.83)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.18.14,6.18.24)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.19.4,6.19.14)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-06T13:00:04.776037+00:00", "updated": "2026-05-21T01:30:44.038313+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}