CVE-2026-64160

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-64160", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T07:54:57.038Z", "datePublished": "2026-07-19T15:40:47.063Z", "dateUpdated": "2026-10-19T20:28:14.119Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:39:50.187Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix potential for tearing in ->remote_i_size and ->zero_point\n\nFix potential tearing in using ->remote_i_size and ->zero_point by copying\ni_size_read() and i_size_write() and using the same seqcount as for i_size.\n\nWe need to make sure that netfslib and the filesystems that use it always\nhold i_lock whilst updating any of the sizes to prevent i_size_seqcount\nfrom getting corrupted."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}, "scenarios": [{"lang": "en", "value": "AV:N - The bug is in netfs client code (CIFS/SMB, AFS, 9p) reached when processing network filesystem protocol responses and concurrent I/O; a malicious remote server can drive attribute/size updates that race with client read/write paths.\nAC:L - The attacker controls both sides of the race by timing SMB/AFS/9p responses against concurrent local read/write/DIO operations, or by spawning parallel threads performing file I/O on the same inode.\nPR:N - A remote malicious filesystem server needs no privileges on the victim host; exploitation only requires the victim system to perform routine I/O against a mounted attacker-controlled or MITM'd network share.\nUI:N - No per-attack discretionary user action is required beyond an existing CIFS/AFS/9p mount and normal automated or concurrent file access, which is typical in enterprise and embedded deployments.\nS:U - Impact is confined to the victim kernel's netfs client subsystem and does not cross a VM, IOMMU, or other security-authority boundary.\nC:H - Torn 64-bit size values produce attacker-influenceable arbitrary bounds used in read-length and EOF decisions, potentially causing out-of-bounds kernel reads or stale-cache data exposure beyond intended file ranges.\nI:H - Corrupted size metadata causes incorrect zero-filling, skipped server reads, and wrong EOF handling, enabling arbitrary modification of file content visible to applications and incorrect size metadata written back to the server.\nA:H - Unsynchronized writes can corrupt i_size_seqcount, causing i_size_read() and related readers to spin forever, producing soft lockups and denial of service for affected inodes and dependent processes."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/9p/v9fs_vfs.h", "fs/9p/vfs_inode.c", "fs/9p/vfs_inode_dotl.c", "fs/afs/file.c", "fs/afs/inode.c", "fs/afs/internal.h", "fs/afs/write.c", "fs/netfs/buffered_read.c", "fs/netfs/buffered_write.c", "fs/netfs/direct_write.c", "fs/netfs/misc.c", "fs/netfs/write_collect.c", "fs/smb/client/cifsfs.c", "fs/smb/client/cifssmb.c", "fs/smb/client/file.c", "fs/smb/client/inode.c", "fs/smb/client/readdir.c", "fs/smb/client/smb2ops.c", "fs/smb/client/smb2pdu.c", "include/linux/netfs.h"], "versions": [{"version": "4058f742105ecfcbdf99e1139e6c1f74fb8e6db9", "lessThan": "55970f238d495517edc961d55c44c772594d0969", "status": "affected", "versionType": "git"}, {"version": "4058f742105ecfcbdf99e1139e6c1f74fb8e6db9", "lessThan": "2c8f4742bb76117d735f92a3932d85239b16c494", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/9p/v9fs_vfs.h", "fs/9p/vfs_inode.c", "fs/9p/vfs_inode_dotl.c", "fs/afs/file.c", "fs/afs/inode.c", "fs/afs/internal.h", "fs/afs/write.c", "fs/netfs/buffered_read.c", "fs/netfs/buffered_write.c", "fs/netfs/direct_write.c", "fs/netfs/misc.c", "fs/netfs/write_collect.c", "fs/smb/client/cifsfs.c", "fs/smb/client/cifssmb.c", "fs/smb/client/file.c", "fs/smb/client/inode.c", "fs/smb/client/readdir.c", "fs/smb/client/smb2ops.c", "fs/smb/client/smb2pdu.c", "include/linux/netfs.h"], "versions": [{"version": "5.18", "status": "affected"}, {"version": "0", "lessThan": "5.18", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.11", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.18", "versionEndExcluding": "7.0.11"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.18", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/55970f238d495517edc961d55c44c772594d0969"}, {"url": "https://git.kernel.org/stable/c/2c8f4742bb76117d735f92a3932d85239b16c494"}], "title": "netfs: Fix potential for tearing in ->remote_i_size and ->zero_point", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-64160", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:37:03.470970Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-362", "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-19T20:28:14.119Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-64160", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:37:03.470970Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T15:37:04.379Z"}}], "cna": {"title": "netfs: Fix potential for tearing in ->remote_i_size and ->zero_point", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:N - The bug is in netfs client code (CIFS/SMB, AFS, 9p) reached when processing network filesystem protocol responses and concurrent I/O; a malicious remote server can drive attribute/size updates that race with client read/write paths.\nAC:L - The attacker controls both sides of the race by timing SMB/AFS/9p responses against concurrent local read/write/DIO operations, or by spawning parallel threads performing file I/O on the same inode.\nPR:N - A remote malicious filesystem server needs no privileges on the victim host; exploitation only requires the victim system to perform routine I/O against a mounted attacker-controlled or MITM'd network share.\nUI:N - No per-attack discretionary user action is required beyond an existing CIFS/AFS/9p mount and normal automated or concurrent file access, which is typical in enterprise and embedded deployments.\nS:U - Impact is confined to the victim kernel's netfs client subsystem and does not cross a VM, IOMMU, or other security-authority boundary.\nC:H - Torn 64-bit size values produce attacker-influenceable arbitrary bounds used in read-length and EOF decisions, potentially causing out-of-bounds kernel reads or stale-cache data exposure beyond intended file ranges.\nI:H - Corrupted size metadata causes incorrect zero-filling, skipped server reads, and wrong EOF handling, enabling arbitrary modification of file content visible to applications and incorrect size metadata written back to the server.\nA:H - Unsynchronized writes can corrupt i_size_seqcount, causing i_size_read() and related readers to spin forever, producing soft lockups and denial of service for affected inodes and dependent processes."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4058f742105ecfcbdf99e1139e6c1f74fb8e6db9", "lessThan": "55970f238d495517edc961d55c44c772594d0969", "versionType": "git"}, {"status": "affected", "version": "4058f742105ecfcbdf99e1139e6c1f74fb8e6db9", "lessThan": "2c8f4742bb76117d735f92a3932d85239b16c494", "versionType": "git"}], "programFiles": ["fs/9p/v9fs_vfs.h", "fs/9p/vfs_inode.c", "fs/9p/vfs_inode_dotl.c", "fs/afs/file.c", "fs/afs/inode.c", "fs/afs/internal.h", "fs/afs/write.c", "fs/netfs/buffered_read.c", "fs/netfs/buffered_write.c", "fs/netfs/direct_write.c", "fs/netfs/misc.c", "fs/netfs/write_collect.c", "fs/smb/client/cifsfs.c", "fs/smb/client/cifssmb.c", "fs/smb/client/file.c", "fs/smb/client/inode.c", "fs/smb/client/readdir.c", "fs/smb/client/smb2ops.c", "fs/smb/client/smb2pdu.c", "include/linux/netfs.h"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.18"}, {"status": "unaffected", "version": "0", "lessThan": "5.18", "versionType": "semver"}, {"status": "unaffected", "version": "7.0.11", "versionType": "semver", "lessThanOrEqual": "7.0.*"}, {"status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/9p/v9fs_vfs.h", "fs/9p/vfs_inode.c", "fs/9p/vfs_inode_dotl.c", "fs/afs/file.c", "fs/afs/inode.c", "fs/afs/internal.h", "fs/afs/write.c", "fs/netfs/buffered_read.c", "fs/netfs/buffered_write.c", "fs/netfs/direct_write.c", "fs/netfs/misc.c", "fs/netfs/write_collect.c", "fs/smb/client/cifsfs.c", "fs/smb/client/cifssmb.c", "fs/smb/client/file.c", "fs/smb/client/inode.c", "fs/smb/client/readdir.c", "fs/smb/client/smb2ops.c", "fs/smb/client/smb2pdu.c", "include/linux/netfs.h"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/55970f238d495517edc961d55c44c772594d0969"}, {"url": "https://git.kernel.org/stable/c/2c8f4742bb76117d735f92a3932d85239b16c494"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix potential for tearing in ->remote_i_size and ->zero_point\n\nFix potential tearing in using ->remote_i_size and ->zero_point by copying\ni_size_read() and i_size_write() and using the same seqcount as for i_size.\n\nWe need to make sure that netfslib and the filesystems that use it always\nhold i_lock whilst updating any of the sizes to prevent i_size_seqcount\nfrom getting corrupted."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.0.11", "versionStartIncluding": "5.18"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.1", "versionStartIncluding": "5.18"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:39:50.187Z"}}}, "cveMetadata": {"cveId": "CVE-2026-64160", "state": "PUBLISHED", "dateUpdated": "2026-10-16T15:42:24.995Z", "dateReserved": "2026-07-19T07:54:57.038Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-07-19T15:40:47.063Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/9p/v9fs_vfs.h", "fs/9p/vfs_inode.c", "fs/9p/vfs_inode_dotl.c", "fs/afs/file.c", "fs/afs/inode.c", "fs/afs/internal.h", "fs/afs/write.c", "fs/netfs/buffered_read.c", "fs/netfs/buffered_write.c", "fs/netfs/direct_write.c", "fs/netfs/misc.c", "fs/netfs/write_collect.c", "fs/smb/client/cifsfs.c", "fs/smb/client/cifssmb.c", "fs/smb/client/file.c", "fs/smb/client/inode.c", "fs/smb/client/readdir.c", "fs/smb/client/smb2ops.c", "fs/smb/client/smb2pdu.c", "include/linux/netfs.h"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "55970f238d495517edc961d55c44c772594d0969", "status": "affected", "version": "4058f742105ecfcbdf99e1139e6c1f74fb8e6db9", "versionType": "git"}, {"lessThan": "2c8f4742bb76117d735f92a3932d85239b16c494", "status": "affected", "version": "4058f742105ecfcbdf99e1139e6c1f74fb8e6db9", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/9p/v9fs_vfs.h", "fs/9p/vfs_inode.c", "fs/9p/vfs_inode_dotl.c", "fs/afs/file.c", "fs/afs/inode.c", "fs/afs/internal.h", "fs/afs/write.c", "fs/netfs/buffered_read.c", "fs/netfs/buffered_write.c", "fs/netfs/direct_write.c", "fs/netfs/misc.c", "fs/netfs/write_collect.c", "fs/smb/client/cifsfs.c", "fs/smb/client/cifssmb.c", "fs/smb/client/file.c", "fs/smb/client/inode.c", "fs/smb/client/readdir.c", "fs/smb/client/smb2ops.c", "fs/smb/client/smb2pdu.c", "include/linux/netfs.h"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.18"}, {"lessThan": "5.18", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "7.0.*", "status": "unaffected", "version": "7.0.11", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "0DB20DAA-322B-469E-BE32-85C48AAC7796", "versionEndExcluding": "7.0.11", "versionStartIncluding": "5.18", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "B1EF7059-E670-45F4-B422-54C40FA86390", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "0D38F0BF-A728-4133-A358-D44A2F7EE6D6", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*", "matchCriteriaId": "EC732D08-5F7B-46D9-B154-E60C7F4F0A97", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*", "matchCriteriaId": "E5910A9D-F60A-409A-B486-FE66BFEBA9B9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix potential for tearing in ->remote_i_size and ->zero_point\n\nFix potential tearing in using ->remote_i_size and ->zero_point by copying\ni_size_read() and i_size_write() and using the same seqcount as for i_size.\n\nWe need to make sure that netfslib and the filesystems that use it always\nhold i_lock whilst updating any of the sizes to prevent i_size_seqcount\nfrom getting corrupted."}], "id": "CVE-2026-64160", "lastModified": "2026-10-19T21:17:25.743", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-64160", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-16T15:37:03.470970Z", "version": "2.0.3"}}]}, "published": "2026-07-19T16:17:58.010", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/2c8f4742bb76117d735f92a3932d85239b16c494"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/55970f238d495517edc961d55c44c772594d0969"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-362"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{"bugzilla": {"description": "kernel: netfs: Fix potential for tearing in ->remote_i_size and ->zero_point", "id": "2502539", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502539"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-821", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnetfs: Fix potential for tearing in ->remote_i_size and ->zero_point\nFix potential tearing in using ->remote_i_size and ->zero_point by copying\ni_size_read() and i_size_write() and using the same seqcount as for i_size.\nWe need to make sure that netfslib and the filesystems that use it always\nhold i_lock whilst updating any of the sizes to prevent i_size_seqcount\nfrom getting corrupted.", "A flaw was found in the Linux kernel's network file system (netfs) component. This vulnerability, known as 'tearing', occurs when the system attempts to update file size information (`remote_i_size` and `zero_point`) without proper synchronization. This can lead to corrupted file size counters (`i_size_seqcount`), potentially causing data integrity issues or incorrect reporting of file sizes. An attacker could potentially exploit this to manipulate file sizes or cause system instability."], "name": "CVE-2026-64160", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Not affected", "impact": "important", "package_name": "erlang27", "product_name": "Red Hat Hardened Images"}], "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-64160\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-64160\nhttps://lore.kernel.org/linux-cve-announce/2026071933-CVE-2026-64160-8bee@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4058f742105ecfcbdf99e1139e6c1f74fb8e6db9,55970f238d495517edc961d55c44c772594d0969)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4058f742105ecfcbdf99e1139e6c1f74fb8e6db9,2c8f4742bb76117d735f92a3932d85239b16c494)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.18"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.18)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.11,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-21T11:30:06.114905+00:00", "updated": "2026-10-20T09:45:06.512174+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}