CVE-2026-63938

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-63938", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T07:54:57.022Z", "datePublished": "2026-07-19T14:55:35.168Z", "dateUpdated": "2026-10-19T20:17:57.657Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:37:25.558Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SEV: Check PSC request indices against the actual size of the buffer\n\nWhen processing Page State Change (PSC) requests, validate the PSC buffer\nagainst the effective size of the scratch area, which could be less than\nthe maximum size if the guest provided a pointer that isn't exactly at the\nstart of the GHCB shared buffer."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 9.3, "baseSeverity": "CRITICAL"}, "scenarios": [{"lang": "en", "value": "AV:L - The flaw is reached when malicious code inside an SEV-SNP guest issues a Page State Change VMGEXIT (SVM_VMGEXIT_PSC) through the GHCB, causing a VM exit handled locally by KVM on the host.\nAC:L - The guest fully controls sw_scratch placement, PSC header indices, and entry contents; triggering the out-of-bounds access is deterministic and does not depend on races or conditions outside attacker control.\nPR:N - Exploitation requires only the ability to run code in an SEV-SNP guest (e.g., a cloud confidential-VM tenant), not host root, CAP_SYS_ADMIN, or other elevated host privileges.\nUI:N - No victim user action is required beyond the attacker operating inside their own guest; the malicious VMGEXIT is self-contained.\nS:C - The vulnerability crosses the guest/host security boundary: a guest VM can corrupt host kernel memory via out-of-bounds access during PSC processing, enabling VM escape.\nC:H - Out-of-bounds reads of guest_psc->entries[idx] via READ_ONCE() can read kernel memory beyond the effective scratch buffer, including data past the GHCB page mapping. Out-of-bounds writes in __snp_complete_one_psc() (guest_psc->entries[idx].cur_page) corrupt memory beyond the validated buffer, providing a memory corruption primitive exploitable for host code execution. Out-of-bounds reads of guest_psc->entries[idx] via READ_ONCE() can read kernel memory beyond the effective scratch buffer, including data past the GHCB page mapping.\nI:H - Out-of-bounds writes in __snp_complete_one_psc() (guest_psc->entries[idx].cur_page) corrupt memory beyond the validated buffer, providing a memory corruption primitive exploitable for host code execution.\nA:H - Out-of-bounds access on the GHCB mapping can cause host kernel oops, panic, or BUG when indices extend past the mapped page boundary."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/x86/kvm/svm/sev.c"], "versions": [{"version": "9b54e248d2644be71cb394eb85f31ad99e023a05", "lessThan": "5198f70c09a5f6e9e5f5a0a2c6b388f24294b176", "status": "affected", "versionType": "git"}, {"version": "9b54e248d2644be71cb394eb85f31ad99e023a05", "lessThan": "75c8d1d7291268b479794fba5808971dc2f5eaf3", "status": "affected", "versionType": "git"}, {"version": "9b54e248d2644be71cb394eb85f31ad99e023a05", "lessThan": "505a3b94535583e4265360e2621734e355ef263d", "status": "affected", "versionType": "git"}, {"version": "9b54e248d2644be71cb394eb85f31ad99e023a05", "lessThan": "121d88de56bc5c0ba0ce2f6381af67f948a7e7c1", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/x86/kvm/svm/sev.c"], "versions": [{"version": "6.11", "status": "affected"}, {"version": "0", "lessThan": "6.11", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.93", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.35", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.12", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "6.12.93"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "6.18.35"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "7.0.12"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/5198f70c09a5f6e9e5f5a0a2c6b388f24294b176"}, {"url": "https://git.kernel.org/stable/c/75c8d1d7291268b479794fba5808971dc2f5eaf3"}, {"url": "https://git.kernel.org/stable/c/505a3b94535583e4265360e2621734e355ef263d"}, {"url": "https://git.kernel.org/stable/c/121d88de56bc5c0ba0ce2f6381af67f948a7e7c1"}], "title": "KVM: SEV: Check PSC request indices against the actual size of the buffer", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-63938", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:33:45.611470Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read"}]}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-19T20:17:57.657Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-63938", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:33:45.611470Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T15:33:46.243Z"}}], "cna": {"title": "KVM: SEV: Check PSC request indices against the actual size of the buffer", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 9.3, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:L - The flaw is reached when malicious code inside an SEV-SNP guest issues a Page State Change VMGEXIT (SVM_VMGEXIT_PSC) through the GHCB, causing a VM exit handled locally by KVM on the host.\nAC:L - The guest fully controls sw_scratch placement, PSC header indices, and entry contents; triggering the out-of-bounds access is deterministic and does not depend on races or conditions outside attacker control.\nPR:N - Exploitation requires only the ability to run code in an SEV-SNP guest (e.g., a cloud confidential-VM tenant), not host root, CAP_SYS_ADMIN, or other elevated host privileges.\nUI:N - No victim user action is required beyond the attacker operating inside their own guest; the malicious VMGEXIT is self-contained.\nS:C - The vulnerability crosses the guest/host security boundary: a guest VM can corrupt host kernel memory via out-of-bounds access during PSC processing, enabling VM escape.\nC:H - Out-of-bounds reads of guest_psc->entries[idx] via READ_ONCE() can read kernel memory beyond the effective scratch buffer, including data past the GHCB page mapping. Out-of-bounds writes in __snp_complete_one_psc() (guest_psc->entries[idx].cur_page) corrupt memory beyond the validated buffer, providing a memory corruption primitive exploitable for host code execution. Out-of-bounds reads of guest_psc->entries[idx] via READ_ONCE() can read kernel memory beyond the effective scratch buffer, including data past the GHCB page mapping.\nI:H - Out-of-bounds writes in __snp_complete_one_psc() (guest_psc->entries[idx].cur_page) corrupt memory beyond the validated buffer, providing a memory corruption primitive exploitable for host code execution.\nA:H - Out-of-bounds access on the GHCB mapping can cause host kernel oops, panic, or BUG when indices extend past the mapped page boundary."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "9b54e248d2644be71cb394eb85f31ad99e023a05", "lessThan": "5198f70c09a5f6e9e5f5a0a2c6b388f24294b176", "versionType": "git"}, {"status": "affected", "version": "9b54e248d2644be71cb394eb85f31ad99e023a05", "lessThan": "75c8d1d7291268b479794fba5808971dc2f5eaf3", "versionType": "git"}, {"status": "affected", "version": "9b54e248d2644be71cb394eb85f31ad99e023a05", "lessThan": "505a3b94535583e4265360e2621734e355ef263d", "versionType": "git"}, {"status": "affected", "version": "9b54e248d2644be71cb394eb85f31ad99e023a05", "lessThan": "121d88de56bc5c0ba0ce2f6381af67f948a7e7c1", "versionType": "git"}], "programFiles": ["arch/x86/kvm/svm/sev.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.11"}, {"status": "unaffected", "version": "0", "lessThan": "6.11", "versionType": "semver"}, {"status": "unaffected", "version": "6.12.93", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.35", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.0.12", "versionType": "semver", "lessThanOrEqual": "7.0.*"}, {"status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["arch/x86/kvm/svm/sev.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/5198f70c09a5f6e9e5f5a0a2c6b388f24294b176"}, {"url": "https://git.kernel.org/stable/c/75c8d1d7291268b479794fba5808971dc2f5eaf3"}, {"url": "https://git.kernel.org/stable/c/505a3b94535583e4265360e2621734e355ef263d"}, {"url": "https://git.kernel.org/stable/c/121d88de56bc5c0ba0ce2f6381af67f948a7e7c1"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SEV: Check PSC request indices against the actual size of the buffer\n\nWhen processing Page State Change (PSC) requests, validate the PSC buffer\nagainst the effective size of the scratch area, which could be less than\nthe maximum size if the guest provided a pointer that isn't exactly at the\nstart of the GHCB shared buffer."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.93", "versionStartIncluding": "6.11"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.35", "versionStartIncluding": "6.11"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.0.12", "versionStartIncluding": "6.11"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.1", "versionStartIncluding": "6.11"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:37:25.558Z"}}}, "cveMetadata": {"cveId": "CVE-2026-63938", "state": "PUBLISHED", "dateUpdated": "2026-10-19T20:17:57.657Z", "dateReserved": "2026-07-19T07:54:57.022Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-07-19T14:55:35.168Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["arch/x86/kvm/svm/sev.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "5198f70c09a5f6e9e5f5a0a2c6b388f24294b176", "status": "affected", "version": "9b54e248d2644be71cb394eb85f31ad99e023a05", "versionType": "git"}, {"lessThan": "75c8d1d7291268b479794fba5808971dc2f5eaf3", "status": "affected", "version": "9b54e248d2644be71cb394eb85f31ad99e023a05", "versionType": "git"}, {"lessThan": "505a3b94535583e4265360e2621734e355ef263d", "status": "affected", "version": "9b54e248d2644be71cb394eb85f31ad99e023a05", "versionType": "git"}, {"lessThan": "121d88de56bc5c0ba0ce2f6381af67f948a7e7c1", "status": "affected", "version": "9b54e248d2644be71cb394eb85f31ad99e023a05", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["arch/x86/kvm/svm/sev.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.11"}, {"lessThan": "6.11", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.93", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.35", "versionType": "semver"}, {"lessThanOrEqual": "7.0.*", "status": "unaffected", "version": "7.0.12", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "424D443C-A075-4671-94EC-F9F3E489E267", "versionEndExcluding": "6.12.93", "versionStartIncluding": "6.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "0FCCB23A-7629-4386-93B6-B119237C4382", "versionEndExcluding": "6.18.35", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "9161A938-0FA8-44BC-95FE-C5A271601AB3", "versionEndExcluding": "7.0.12", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "B1EF7059-E670-45F4-B422-54C40FA86390", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "0D38F0BF-A728-4133-A358-D44A2F7EE6D6", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*", "matchCriteriaId": "EC732D08-5F7B-46D9-B154-E60C7F4F0A97", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*", "matchCriteriaId": "E5910A9D-F60A-409A-B486-FE66BFEBA9B9", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:*", "matchCriteriaId": "81DFF19E-9CF8-49C6-8C36-1E4038622933", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SEV: Check PSC request indices against the actual size of the buffer\n\nWhen processing Page State Change (PSC) requests, validate the PSC buffer\nagainst the effective size of the scratch area, which could be less than\nthe maximum size if the guest provided a pointer that isn't exactly at the\nstart of the GHCB shared buffer."}], "id": "CVE-2026-63938", "lastModified": "2026-10-27T13:36:28.417", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 6.0, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-63938", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-16T15:33:45.611470Z", "version": "2.0.3"}}]}, "published": "2026-07-19T16:17:12.323", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/121d88de56bc5c0ba0ce2f6381af67f948a7e7c1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/505a3b94535583e4265360e2621734e355ef263d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/5198f70c09a5f6e9e5f5a0a2c6b388f24294b176"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/75c8d1d7291268b479794fba5808971dc2f5eaf3"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{"bugzilla": {"description": "kernel: KVM: SEV: Check PSC request indices against the actual size of the buffer", "id": "2502336", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502336"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-1285", "details": ["A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) Secure Encrypted Virtualization (SEV) feature. When processing Page State Change (PSC) requests, the system does not properly validate the PSC buffer against the effective size of the scratch area. This can occur if a guest operating system provides a pointer that is not precisely at the start of the Guest Hypervisor Communication Block (GHCB) shared buffer, potentially leading to out-of-bounds memory access. This vulnerability could allow a malicious guest to cause a denial of service on the host system."], "name": "CVE-2026-63938", "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-63938\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-63938\nhttps://lore.kernel.org/linux-cve-announce/2026071952-CVE-2026-63938-2d13@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[9b54e248d2644be71cb394eb85f31ad99e023a05,5198f70c09a5f6e9e5f5a0a2c6b388f24294b176)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[9b54e248d2644be71cb394eb85f31ad99e023a05,75c8d1d7291268b479794fba5808971dc2f5eaf3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[9b54e248d2644be71cb394eb85f31ad99e023a05,505a3b94535583e4265360e2621734e355ef263d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[9b54e248d2644be71cb394eb85f31ad99e023a05,121d88de56bc5c0ba0ce2f6381af67f948a7e7c1)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.11"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.11)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.93,6.12.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.35,6.18.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0.12,7.0.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-21T05:30:16.524560+00:00", "updated": "2026-10-20T09:15:12.782029+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}