CVE-2026-43380

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-43380", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-01T14:12:56.006Z", "datePublished": "2026-05-08T14:21:28.702Z", "dateUpdated": "2026-08-05T12:27:40.763Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:27:40.763Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read\n\nThe q54sj108a2_debugfs_read function suffers from a stack buffer overflow\ndue to incorrect arguments passed to bin2hex(). The function currently\npasses 'data' as the destination and 'data_char' as the source.\n\nBecause bin2hex() converts each input byte into two hex characters, a\n32-byte block read results in 64 bytes of output. Since 'data' is only\n34 bytes (I2C_SMBUS_BLOCK_MAX + 2), this writes 30 bytes past the end\nof the buffer onto the stack.\n\nAdditionally, the arguments were swapped: it was reading from the\nzero-initialized 'data_char' and writing to 'data', resulting in\nall-zero output regardless of the actual I2C read.\n\nFix this by:\n1. Expanding 'data_char' to 66 bytes to safely hold the hex output.\n2. Correcting the bin2hex() argument order and using the actual read count.\n3. Using a pointer to select the correct output buffer for the final\n simple_read_from_buffer call."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - The vulnerable code is reached by a local userspace read of the q54sj108a2 debugfs file, through read(2)/vfs_read/debugfs proxy operations into q54sj108a2_debugfs_read. There is no network or adjacent protocol path.\nAC:L - On an affected system with the driver, device, and debugfs entry present, a single read of blackbox_read reliably triggers the overflow; there is no race or condition the attacker must win. The vulnerable code always calls bin2hex(..., 32) for that path after a successful SMBus block read.\nPR:L - The vulnerable file is created with mode 0444 and the driver performs no capability or authentication check, so a local unprivileged user can trigger it where debugfs is exposed beyond its root-only default mount. If choosing between root-only debugfs deployment and exposed debugfs deployment, the higher-severity reasonable case is unprivileged local access.\nUI:N - No victim action is needed after the attacker has local access to the debugfs file. The attacker directly opens and reads the file.\nS:U - The corruption occurs in kernel code and impacts the same kernel security authority. It is not a guest-to-host, IOMMU, or other cross-scope boundary bypass.\nC:H - This is kernel stack memory corruption, and the buggy read path can also copy beyond the intended stack buffer back to userspace. Under the required overestimating guidance, memory corruption that can support information disclosure warrants high confidentiality impact.\nI:H - The bug is an out-of-bounds write on the kernel stack, overflowing a 34-byte buffer with up to 64 bytes of hex output plus later indexing beyond the buffer. Kernel stack corruption is defensibly treated as potentially enabling control-flow hijack or arbitrary kernel modification.\nA:H - The stack overflow can corrupt adjacent stack state and, with stack protection, can directly trigger a kernel oops/panic. Repeated local reads can therefore cause high availability impact."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hwmon/pmbus/q54sj108a2.c"], "versions": [{"version": "d014538aa38561cd24c5eb228223585f26c5ec71", "lessThan": "a0fc1b9c738fba231f190ab960c83202722efee5", "status": "affected", "versionType": "git"}, {"version": "d014538aa38561cd24c5eb228223585f26c5ec71", "lessThan": "c59090c50f62a17129fc4c5407bc4071305a9e82", "status": "affected", "versionType": "git"}, {"version": "d014538aa38561cd24c5eb228223585f26c5ec71", "lessThan": "52db5ef163c96f916d424e472fb17aadc35a9f7a", "status": "affected", "versionType": "git"}, {"version": "d014538aa38561cd24c5eb228223585f26c5ec71", "lessThan": "b48a0f8d4541a4f6651dc9a64430ce9fdf5c120b", "status": "affected", "versionType": "git"}, {"version": "d014538aa38561cd24c5eb228223585f26c5ec71", "lessThan": "73a7a345816946d276ad2c46c8bb771de67cfc46", "status": "affected", "versionType": "git"}, {"version": "d014538aa38561cd24c5eb228223585f26c5ec71", "lessThan": "24a7b9daa103fa963b3fd37d8805b23e01621976", "status": "affected", "versionType": "git"}, {"version": "d014538aa38561cd24c5eb228223585f26c5ec71", "lessThan": "25dd70a03b1f5f3aa71e1a5091ecd9cd2a13ee43", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hwmon/pmbus/q54sj108a2.c"], "versions": [{"version": "5.11", "status": "affected"}, {"version": "0", "lessThan": "5.11", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.203", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.167", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.130", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.78", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.19", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.9", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "5.15.203"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "6.1.167"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "6.6.130"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "6.12.78"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "6.18.19"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "6.19.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/a0fc1b9c738fba231f190ab960c83202722efee5"}, {"url": "https://git.kernel.org/stable/c/c59090c50f62a17129fc4c5407bc4071305a9e82"}, {"url": "https://git.kernel.org/stable/c/52db5ef163c96f916d424e472fb17aadc35a9f7a"}, {"url": "https://git.kernel.org/stable/c/b48a0f8d4541a4f6651dc9a64430ce9fdf5c120b"}, {"url": "https://git.kernel.org/stable/c/73a7a345816946d276ad2c46c8bb771de67cfc46"}, {"url": "https://git.kernel.org/stable/c/24a7b9daa103fa963b3fd37d8805b23e01621976"}, {"url": "https://git.kernel.org/stable/c/25dd70a03b1f5f3aa71e1a5091ecd9cd2a13ee43"}], "title": "hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/hwmon/pmbus/q54sj108a2.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "a0fc1b9c738fba231f190ab960c83202722efee5", "status": "affected", "version": "d014538aa38561cd24c5eb228223585f26c5ec71", "versionType": "git"}, {"lessThan": "c59090c50f62a17129fc4c5407bc4071305a9e82", "status": "affected", "version": "d014538aa38561cd24c5eb228223585f26c5ec71", "versionType": "git"}, {"lessThan": "52db5ef163c96f916d424e472fb17aadc35a9f7a", "status": "affected", "version": "d014538aa38561cd24c5eb228223585f26c5ec71", "versionType": "git"}, {"lessThan": "b48a0f8d4541a4f6651dc9a64430ce9fdf5c120b", "status": "affected", "version": "d014538aa38561cd24c5eb228223585f26c5ec71", "versionType": "git"}, {"lessThan": "73a7a345816946d276ad2c46c8bb771de67cfc46", "status": "affected", "version": "d014538aa38561cd24c5eb228223585f26c5ec71", "versionType": "git"}, {"lessThan": "24a7b9daa103fa963b3fd37d8805b23e01621976", "status": "affected", "version": "d014538aa38561cd24c5eb228223585f26c5ec71", "versionType": "git"}, {"lessThan": "25dd70a03b1f5f3aa71e1a5091ecd9cd2a13ee43", "status": "affected", "version": "d014538aa38561cd24c5eb228223585f26c5ec71", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/hwmon/pmbus/q54sj108a2.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.11"}, {"lessThan": "5.11", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.203", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.167", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.130", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.78", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.19", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.9", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "20DDB3E9-AABF-4107-ADB0-5362AA067045", "versionEndExcluding": "5.15.203", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "2EDC6BAF-B710-4E26-B6AA-D68922EE7B43", "versionEndExcluding": "6.1.167", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C57BB918-DF28-46B3-94F7-144176841267", "versionEndExcluding": "6.6.130", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "28D591F5-B196-4CC9-905C-DC80F116E7A8", "versionEndExcluding": "6.12.78", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D394AC60-6F28-435F-872A-CCDF384B8331", "versionEndExcluding": "6.18.19", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E825E7C3-FEAC-4FD3-8A81-78D7387948C9", "versionEndExcluding": "6.19.9", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "F253B622-8837-4245-BCE5-A7BF8FC76A16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read\n\nThe q54sj108a2_debugfs_read function suffers from a stack buffer overflow\ndue to incorrect arguments passed to bin2hex(). The function currently\npasses 'data' as the destination and 'data_char' as the source.\n\nBecause bin2hex() converts each input byte into two hex characters, a\n32-byte block read results in 64 bytes of output. Since 'data' is only\n34 bytes (I2C_SMBUS_BLOCK_MAX + 2), this writes 30 bytes past the end\nof the buffer onto the stack.\n\nAdditionally, the arguments were swapped: it was reading from the\nzero-initialized 'data_char' and writing to 'data', resulting in\nall-zero output regardless of the actual I2C read.\n\nFix this by:\n1. Expanding 'data_char' to 66 bytes to safely hold the hex output.\n2. Correcting the bin2hex() argument order and using the actual read count.\n3. Using a pointer to select the correct output buffer for the final\n simple_read_from_buffer call."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nhwmon: (pmbus/q54sj108a2) corrige desbordamiento de pila en la lectura de debugfs\n\nLa funci\u00f3n q54sj108a2_debugfs_read sufre de un desbordamiento de b\u00fafer de pila debido a argumentos incorrectos pasados a bin2hex(). La funci\u00f3n actualmente pasa \u2019data\u2019 como destino y \u2019data_char\u2019 como origen.\n\nDebido a que bin2hex() convierte cada byte de entrada en dos caracteres hexadecimales, una lectura de bloque de 32 bytes resulta en 64 bytes de salida. Dado que \u2019data\u2019 es de solo 34 bytes (I2C_SMBUS_BLOCK_MAX + 2), esto escribe 30 bytes m\u00e1s all\u00e1 del final del b\u00fafer en la pila.\n\nAdem\u00e1s, los argumentos estaban intercambiados: estaba leyendo de \u2019data_char\u2019 inicializado a cero y escribiendo en \u2019data\u2019, lo que resultaba en una salida de todo ceros independientemente de la lectura I2C real.\n\nEsto se soluciona mediante:\n1. Expandiendo \u2019data_char\u2019 a 66 bytes para contener de forma segura la salida hexadecimal.\n2. Corrigiendo el orden de los argumentos de bin2hex() y usando el recuento de lectura real.\n3. Usando un puntero para seleccionar el b\u00fafer de salida correcto para la llamada final a simple_read_from_buffer."}], "id": "CVE-2026-43380", "lastModified": "2026-11-11T20:10:00.273", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-05-08T15:16:49.207", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/24a7b9daa103fa963b3fd37d8805b23e01621976"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/25dd70a03b1f5f3aa71e1a5091ecd9cd2a13ee43"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/52db5ef163c96f916d424e472fb17aadc35a9f7a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/73a7a345816946d276ad2c46c8bb771de67cfc46"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/a0fc1b9c738fba231f190ab960c83202722efee5"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b48a0f8d4541a4f6651dc9a64430ce9fdf5c120b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/c59090c50f62a17129fc4c5407bc4071305a9e82"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read", "id": "2468245", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468245"}, "csaw": false, "cwe": "CWE-131", "details": ["A flaw was found in the Linux kernel's hwmon subsystem, specifically within the pmbus/q54sj108a2 driver. This vulnerability, a stack buffer overflow, occurs in the q54sj108a2_debugfs_read function due to incorrect arguments passed to the bin2hex() function. This flaw allows data to be written past the end of a buffer onto the stack, potentially leading to a denial of service or arbitrary code execution."], "name": "CVE-2026-43380", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-08T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-43380\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-43380\nhttps://lore.kernel.org/linux-cve-announce/2026050832-CVE-2026-43380-d98b@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d014538aa38561cd24c5eb228223585f26c5ec71,a0fc1b9c738fba231f190ab960c83202722efee5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d014538aa38561cd24c5eb228223585f26c5ec71,c59090c50f62a17129fc4c5407bc4071305a9e82)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d014538aa38561cd24c5eb228223585f26c5ec71,52db5ef163c96f916d424e472fb17aadc35a9f7a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d014538aa38561cd24c5eb228223585f26c5ec71,b48a0f8d4541a4f6651dc9a64430ce9fdf5c120b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d014538aa38561cd24c5eb228223585f26c5ec71,73a7a345816946d276ad2c46c8bb771de67cfc46)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d014538aa38561cd24c5eb228223585f26c5ec71,24a7b9daa103fa963b3fd37d8805b23e01621976)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d014538aa38561cd24c5eb228223585f26c5ec71,25dd70a03b1f5f3aa71e1a5091ecd9cd2a13ee43)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.11"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,5.11)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.203,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.167,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.130,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.78,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.19,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.9,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-08T16:15:12.710211+00:00", "updated": "2026-05-20T17:30:35.426421+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}