CVE-2026-43373

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-43373", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-01T14:12:56.006Z", "datePublished": "2026-05-08T14:21:23.875Z", "dateUpdated": "2026-08-05T12:27:33.592Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:27:33.592Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ncsi: fix skb leak in error paths\n\nEarly return paths in NCSI RX and AEN handlers fail to release\nthe received skb, resulting in a memory leak.\n\nSpecifically, ncsi_aen_handler() returns on invalid AEN packets\nwithout consuming the skb. Similarly, ncsi_rcv_rsp() exits early\nwhen failing to resolve the NCSI device, response handler, or\nrequest, leaving the skb unfreed."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:N - The vulnerable handlers are reached through the kernel Ethernet receive path for ETH_P_NCSI frames on an NCSI-enabled network device. A remote peer capable of delivering NCSI frames to the management interface can trigger the bug with network packets.\nAC:L - Triggering only requires malformed or unmatched NCSI response/AEN packets that take deterministic early error paths. No race, timing, or hard-to-control system state is required.\nPR:N - The packet receive path performs no credential, capability, or authentication checks before entering ncsi_rcv_rsp() or ncsi_aen_handler(). Local NCSI netlink operations may require admin permission, but the vulnerable receive path does not.\nUI:N - No victim user action is needed. Packets are processed automatically by the network receive stack.\nS:U - The impact remains within the kernel and the affected NCSI/network device security authority. There is no VM, sandbox, IOMMU, or other cross-scope boundary crossing.\nC:N - The fixed bug is a missing kfree_skb()/consume_skb() on error paths, not an information disclosure. The leaked skb is not exposed back to the attacker.\nI:N - The bug does not corrupt memory or provide a write primitive. It only retains references to received skb objects that should have been freed.\nA:H - Each trigger leaks a received skb, and the attacker can repeat this indefinitely with malformed or unmatched NCSI packets. On plausible BMC/management-controller deployments this can exhaust kernel memory and deny service."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/ncsi/ncsi-aen.c", "net/ncsi/ncsi-rsp.c"], "versions": [{"version": "138635cc27c9737f940c3aa80912ff7a61c825af", "lessThan": "9891d7f4f1ede473c54b49776ae07755083eef06", "status": "affected", "versionType": "git"}, {"version": "138635cc27c9737f940c3aa80912ff7a61c825af", "lessThan": "fef5aa6e3bcf3c8053307642663a63b7362d7552", "status": "affected", "versionType": "git"}, {"version": "138635cc27c9737f940c3aa80912ff7a61c825af", "lessThan": "81d6aee32f8f7bbc175c05dbf61f4430bfb88c4a", "status": "affected", "versionType": "git"}, {"version": "138635cc27c9737f940c3aa80912ff7a61c825af", "lessThan": "59962588197863d0d746879f193905c0c6b3df49", "status": "affected", "versionType": "git"}, {"version": "138635cc27c9737f940c3aa80912ff7a61c825af", "lessThan": "553366c271479c0d571dd1bb5d1bcde4747fb82e", "status": "affected", "versionType": "git"}, {"version": "138635cc27c9737f940c3aa80912ff7a61c825af", "lessThan": "b70c4e5e711931cdd56e6e905737b72f1e649189", "status": "affected", "versionType": "git"}, {"version": "138635cc27c9737f940c3aa80912ff7a61c825af", "lessThan": "87138dde2d6937b12b967f28fe598a7d59000ae4", "status": "affected", "versionType": "git"}, {"version": "138635cc27c9737f940c3aa80912ff7a61c825af", "lessThan": "5c3398a54266541610c8d0a7082e654e9ff3e259", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/ncsi/ncsi-aen.c", "net/ncsi/ncsi-rsp.c"], "versions": [{"version": "4.8", "status": "affected"}, {"version": "0", "lessThan": "4.8", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.253", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.203", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.167", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.130", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.78", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.19", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.9", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.8", "versionEndExcluding": "5.10.253"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.8", "versionEndExcluding": "5.15.203"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.8", "versionEndExcluding": "6.1.167"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.8", "versionEndExcluding": "6.6.130"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.8", "versionEndExcluding": "6.12.78"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.8", "versionEndExcluding": "6.18.19"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.8", "versionEndExcluding": "6.19.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.8", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/9891d7f4f1ede473c54b49776ae07755083eef06"}, {"url": "https://git.kernel.org/stable/c/fef5aa6e3bcf3c8053307642663a63b7362d7552"}, {"url": "https://git.kernel.org/stable/c/81d6aee32f8f7bbc175c05dbf61f4430bfb88c4a"}, {"url": "https://git.kernel.org/stable/c/59962588197863d0d746879f193905c0c6b3df49"}, {"url": "https://git.kernel.org/stable/c/553366c271479c0d571dd1bb5d1bcde4747fb82e"}, {"url": "https://git.kernel.org/stable/c/b70c4e5e711931cdd56e6e905737b72f1e649189"}, {"url": "https://git.kernel.org/stable/c/87138dde2d6937b12b967f28fe598a7d59000ae4"}, {"url": "https://git.kernel.org/stable/c/5c3398a54266541610c8d0a7082e654e9ff3e259"}], "title": "net: ncsi: fix skb leak in error paths", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["net/ncsi/ncsi-aen.c", "net/ncsi/ncsi-rsp.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "9891d7f4f1ede473c54b49776ae07755083eef06", "status": "affected", "version": "138635cc27c9737f940c3aa80912ff7a61c825af", "versionType": "git"}, {"lessThan": "fef5aa6e3bcf3c8053307642663a63b7362d7552", "status": "affected", "version": "138635cc27c9737f940c3aa80912ff7a61c825af", "versionType": "git"}, {"lessThan": "81d6aee32f8f7bbc175c05dbf61f4430bfb88c4a", "status": "affected", "version": "138635cc27c9737f940c3aa80912ff7a61c825af", "versionType": "git"}, {"lessThan": "59962588197863d0d746879f193905c0c6b3df49", "status": "affected", "version": "138635cc27c9737f940c3aa80912ff7a61c825af", "versionType": "git"}, {"lessThan": "553366c271479c0d571dd1bb5d1bcde4747fb82e", "status": "affected", "version": "138635cc27c9737f940c3aa80912ff7a61c825af", "versionType": "git"}, {"lessThan": "b70c4e5e711931cdd56e6e905737b72f1e649189", "status": "affected", "version": "138635cc27c9737f940c3aa80912ff7a61c825af", "versionType": "git"}, {"lessThan": "87138dde2d6937b12b967f28fe598a7d59000ae4", "status": "affected", "version": "138635cc27c9737f940c3aa80912ff7a61c825af", "versionType": "git"}, {"lessThan": "5c3398a54266541610c8d0a7082e654e9ff3e259", "status": "affected", "version": "138635cc27c9737f940c3aa80912ff7a61c825af", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["net/ncsi/ncsi-aen.c", "net/ncsi/ncsi-rsp.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.8"}, {"lessThan": "4.8", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.253", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.203", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.167", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.130", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.78", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.19", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.9", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D793BFD8-FFAF-4802-8259-31FB6C425FBB", "versionEndExcluding": "5.10.253", "versionStartIncluding": "4.8", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "20DDB3E9-AABF-4107-ADB0-5362AA067045", "versionEndExcluding": "5.15.203", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "2EDC6BAF-B710-4E26-B6AA-D68922EE7B43", "versionEndExcluding": "6.1.167", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C57BB918-DF28-46B3-94F7-144176841267", "versionEndExcluding": "6.6.130", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "28D591F5-B196-4CC9-905C-DC80F116E7A8", "versionEndExcluding": "6.12.78", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D394AC60-6F28-435F-872A-CCDF384B8331", "versionEndExcluding": "6.18.19", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E825E7C3-FEAC-4FD3-8A81-78D7387948C9", "versionEndExcluding": "6.19.9", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "F253B622-8837-4245-BCE5-A7BF8FC76A16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "F666C8D8-6538-46D4-B318-87610DE64C34", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ncsi: fix skb leak in error paths\n\nEarly return paths in NCSI RX and AEN handlers fail to release\nthe received skb, resulting in a memory leak.\n\nSpecifically, ncsi_aen_handler() returns on invalid AEN packets\nwithout consuming the skb. Similarly, ncsi_rcv_rsp() exits early\nwhen failing to resolve the NCSI device, response handler, or\nrequest, leaving the skb unfreed."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: ncsi: corregir fuga de skb en rutas de error\n\nLas rutas de retorno tempranas en los gestores NCSI RX y AEN no liberan el skb recibido, lo que resulta en una fuga de memoria.\n\nEspec\u00edficamente, ncsi_aen_handler() retorna en paquetes AEN inv\u00e1lidos sin consumir el skb. De manera similar, ncsi_rcv_rsp() termina anticipadamente al no poder resolver el dispositivo NCSI, el gestor de respuesta o la solicitud, dejando el skb sin liberar."}], "id": "CVE-2026-43373", "lastModified": "2026-11-11T20:10:00.273", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}]}, "published": "2026-05-08T15:16:48.423", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/553366c271479c0d571dd1bb5d1bcde4747fb82e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/59962588197863d0d746879f193905c0c6b3df49"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/5c3398a54266541610c8d0a7082e654e9ff3e259"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/81d6aee32f8f7bbc175c05dbf61f4430bfb88c4a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/87138dde2d6937b12b967f28fe598a7d59000ae4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9891d7f4f1ede473c54b49776ae07755083eef06"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b70c4e5e711931cdd56e6e905737b72f1e649189"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/fef5aa6e3bcf3c8053307642663a63b7362d7552"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-401"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: net: ncsi: fix skb leak in error paths", "id": "2468197", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468197"}, "csaw": false, "cwe": "CWE-772", "details": ["A flaw was found in the Linux kernel, specifically within the Network Controller Sideband Interface (NCSI) subsystem. This vulnerability occurs in the NCSI RX and Asynchronous Event Notification (AEN) handlers, where early return paths fail to release received socket buffers (skb) when processing invalid packets or failing to resolve NCSI devices or handlers. This oversight can lead to a memory leak, potentially resulting in a Denial of Service (DoS) condition for the affected system."], "name": "CVE-2026-43373", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-08T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-43373\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-43373\nhttps://lore.kernel.org/linux-cve-announce/2026050830-CVE-2026-43373-2e8a@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[138635cc27c9737f940c3aa80912ff7a61c825af,9891d7f4f1ede473c54b49776ae07755083eef06)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[138635cc27c9737f940c3aa80912ff7a61c825af,fef5aa6e3bcf3c8053307642663a63b7362d7552)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[138635cc27c9737f940c3aa80912ff7a61c825af,81d6aee32f8f7bbc175c05dbf61f4430bfb88c4a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[138635cc27c9737f940c3aa80912ff7a61c825af,59962588197863d0d746879f193905c0c6b3df49)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[138635cc27c9737f940c3aa80912ff7a61c825af,553366c271479c0d571dd1bb5d1bcde4747fb82e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[138635cc27c9737f940c3aa80912ff7a61c825af,b70c4e5e711931cdd56e6e905737b72f1e649189)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[138635cc27c9737f940c3aa80912ff7a61c825af,87138dde2d6937b12b967f28fe598a7d59000ae4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[138635cc27c9737f940c3aa80912ff7a61c825af,5c3398a54266541610c8d0a7082e654e9ff3e259)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.8"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.8)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.253,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.203,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.167,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.130,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.78,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.19,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.9,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-08T18:15:13.441276+00:00", "updated": "2026-05-15T17:00:04.807726+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}