CVE-2026-64056

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-64056", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T07:54:57.030Z", "datePublished": "2026-07-19T15:39:37.673Z", "dateUpdated": "2026-08-05T12:38:45.763Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:38:45.763Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: cortina: Make RX SKB per-port\n\nThe SKB used to assemble packets from fragments in gmac_rx()\nis static local, but the Gemini has two ethernet ports, meaning\nthere can be races between the ports on a bad day if a device\nis using both.\n\nMake the RX SKB a per-port variable and carry it over between\ninvocations in the port struct instead.\n\nZero the pointer once we call napi_gro_frags(), on error (after\ncalling napi_free_frags()) or if the port is stopped.\n\nZero it in some place where not strictly necessary just to\nemphasize what is going on.\n\nThis was found by Sashiko during normal patch review."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}, "scenarios": [{"lang": "en", "value": "AV:N - The vulnerable code runs in the netdev RX path (gmac_irq \u2192 napi_schedule \u2192 gmac_napi_poll \u2192 gmac_rx) when Ethernet frames are DMA'd from the wire, so any remote host that can send packets to a reachable Gemini GMAC interface can trigger it.\nAC:L - An attacker controls both sides of the race by flooding one or both GMAC ports with multi-descriptor/jumbo frames to keep skb assembly in progress while concurrent NAPI polls run on the independent per-port IRQ handlers without serialization on the shared static skb pointer.\nPR:N - Exploitation requires only the ability to deliver Ethernet frames to an active interface; there are no authentication gates, capability checks, or local syscalls on the RX path from hardware interrupt through gmac_rx().\nUI:N - Triggering the race requires only crafted or high-volume network traffic; no victim interaction such as mounting a filesystem or opening a file is needed.\nS:U - The corruption is confined to kernel networking state (shared skb assembly between the two GMAC ports on the same host); impact does not cross a VM, IOMMU, or sandbox security boundary.\nC:H - Concurrent corruption of a shared skb and mismatched napi_get_frags/napi_gro_frags/napi_free_frags usage across ports can cause use-after-free and skb metadata corruption that enables arbitrary kernel memory disclosure.\nI:H - Cross-port skb corruption via concurrent skb_fill_page_desc and len updates, plus orphaned or double-freed skb/page state, provides memory corruption primitives that can be leveraged for arbitrary kernel writes or code execution.\nA:H - The race can cause kernel oopses or panics from slab/list corruption, invalid page refcount handling, or crashes inside napi_gro_frags when skb state is corrupted across the two ports."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/cortina/gemini.c"], "versions": [{"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "27856d533eca3804008695f61c1e4d5ff984196b", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "b6b22824b30e48ce1df3a2e80990f4b8505deb50", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "6bba24e9ebe6f1c0b356cd471e36bdc7fa434897", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "3b249988d774dacf13b203817e971934a42243c4", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "72158ea185b27afae163949b0e86164cb6b64e55", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "cfd62907f3cdbc3b6da8f49ba907c0390018fe5e", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "67a35e7da7ef9d2f000aa758552a128324c604a0", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "06937db21ee311ed07eba47954447245041a982d", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/cortina/gemini.c"], "versions": [{"version": "4.16", "status": "affected"}, {"version": "0", "lessThan": "4.16", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.258", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.209", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.175", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.142", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.92", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.34", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.11", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "5.10.258"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "5.15.209"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.1.175"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.6.142"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.12.92"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.18.34"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "7.0.11"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/27856d533eca3804008695f61c1e4d5ff984196b"}, {"url": "https://git.kernel.org/stable/c/b6b22824b30e48ce1df3a2e80990f4b8505deb50"}, {"url": "https://git.kernel.org/stable/c/6bba24e9ebe6f1c0b356cd471e36bdc7fa434897"}, {"url": "https://git.kernel.org/stable/c/3b249988d774dacf13b203817e971934a42243c4"}, {"url": "https://git.kernel.org/stable/c/72158ea185b27afae163949b0e86164cb6b64e55"}, {"url": "https://git.kernel.org/stable/c/cfd62907f3cdbc3b6da8f49ba907c0390018fe5e"}, {"url": "https://git.kernel.org/stable/c/67a35e7da7ef9d2f000aa758552a128324c604a0"}, {"url": "https://git.kernel.org/stable/c/06937db21ee311ed07eba47954447245041a982d"}], "title": "net: ethernet: cortina: Make RX SKB per-port", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/ethernet/cortina/gemini.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "27856d533eca3804008695f61c1e4d5ff984196b", "status": "affected", "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "versionType": "git"}, {"lessThan": "b6b22824b30e48ce1df3a2e80990f4b8505deb50", "status": "affected", "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "versionType": "git"}, {"lessThan": "6bba24e9ebe6f1c0b356cd471e36bdc7fa434897", "status": "affected", "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "versionType": "git"}, {"lessThan": "3b249988d774dacf13b203817e971934a42243c4", "status": "affected", "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "versionType": "git"}, {"lessThan": "72158ea185b27afae163949b0e86164cb6b64e55", "status": "affected", "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "versionType": "git"}, {"lessThan": "cfd62907f3cdbc3b6da8f49ba907c0390018fe5e", "status": "affected", "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "versionType": "git"}, {"lessThan": "67a35e7da7ef9d2f000aa758552a128324c604a0", "status": "affected", "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "versionType": "git"}, {"lessThan": "06937db21ee311ed07eba47954447245041a982d", "status": "affected", "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/ethernet/cortina/gemini.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.16"}, {"lessThan": "4.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.258", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.209", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.175", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.142", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.92", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.34", "versionType": "semver"}, {"lessThanOrEqual": "7.0.*", "status": "unaffected", "version": "7.0.11", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "2583F9DE-5239-4321-826F-19FA6934C6B1", "versionEndExcluding": "5.10.258", "versionStartIncluding": "4.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "919C10A9-7951-4A74-BADD-C135A0A8D8B4", "versionEndExcluding": "5.15.209", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "92385813-D91D-480D-83A1-F423D2CBB2BA", "versionEndExcluding": "6.1.175", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "FBFF77B0-526A-4AF1-84D0-ED7187624A67", "versionEndExcluding": "6.6.142", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "9CB90BD9-95B7-4D7F-9F17-4ECE6CFB66C9", "versionEndExcluding": "6.12.92", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "A4B1EF6D-18D7-4838-BC37-7499D5DCC3C0", "versionEndExcluding": "6.18.34", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "0520D091-FC52-4A50-AF07-70AE7D08B750", "versionEndExcluding": "7.0.11", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "B1EF7059-E670-45F4-B422-54C40FA86390", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "0D38F0BF-A728-4133-A358-D44A2F7EE6D6", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*", "matchCriteriaId": "EC732D08-5F7B-46D9-B154-E60C7F4F0A97", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: cortina: Make RX SKB per-port\n\nThe SKB used to assemble packets from fragments in gmac_rx()\nis static local, but the Gemini has two ethernet ports, meaning\nthere can be races between the ports on a bad day if a device\nis using both.\n\nMake the RX SKB a per-port variable and carry it over between\ninvocations in the port struct instead.\n\nZero the pointer once we call napi_gro_frags(), on error (after\ncalling napi_free_frags()) or if the port is stopped.\n\nZero it in some place where not strictly necessary just to\nemphasize what is going on.\n\nThis was found by Sashiko during normal patch review."}], "id": "CVE-2026-64056", "lastModified": "2026-09-02T21:13:22.933", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}]}, "published": "2026-07-19T16:17:46.057", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/06937db21ee311ed07eba47954447245041a982d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/27856d533eca3804008695f61c1e4d5ff984196b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/3b249988d774dacf13b203817e971934a42243c4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/67a35e7da7ef9d2f000aa758552a128324c604a0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/6bba24e9ebe6f1c0b356cd471e36bdc7fa434897"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/72158ea185b27afae163949b0e86164cb6b64e55"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b6b22824b30e48ce1df3a2e80990f4b8505deb50"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/cfd62907f3cdbc3b6da8f49ba907c0390018fe5e"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: net: ethernet: cortina: Make RX SKB per-port", "id": "2502594", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502594"}, "csaw": false, "cwe": "CWE-820", "details": ["A flaw was found in the Linux kernel's Cortina ethernet driver for Gemini devices. The driver used a single, shared buffer (SKB, or Socket Kernel Buffer) for assembling incoming network packets across multiple ethernet ports. This shared resource could lead to race conditions, where simultaneous access from different ports might cause unpredictable system behavior, potentially resulting in a denial of service or data integrity issues."], "name": "CVE-2026-64056", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-64056\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-64056\nhttps://lore.kernel.org/linux-cve-announce/2026071909-CVE-2026-64056-47cb@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,27856d533eca3804008695f61c1e4d5ff984196b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,b6b22824b30e48ce1df3a2e80990f4b8505deb50)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,6bba24e9ebe6f1c0b356cd471e36bdc7fa434897)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,3b249988d774dacf13b203817e971934a42243c4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,72158ea185b27afae163949b0e86164cb6b64e55)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,cfd62907f3cdbc3b6da8f49ba907c0390018fe5e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,67a35e7da7ef9d2f000aa758552a128324c604a0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,06937db21ee311ed07eba47954447245041a982d)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.16"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,4.16)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.258,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.209,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.175,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.142,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.92,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.34,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.11,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-21T11:15:05.702639+00:00", "updated": "2026-09-03T14:45:04.219330+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}