CVE-2026-64250

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-64250", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T15:36:31.773Z", "datePublished": "2026-07-24T15:31:17.021Z", "dateUpdated": "2026-08-17T04:52:01.823Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T04:52:01.823Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nLoongArch: Report dying CPU to RCU in stop_this_cpu()\n\nThis is a port of MIPS commit 9f3f3bdc6d9dac1 (\"MIPS: smp: report dying\nCPU to RCU in stop_this_cpu()\"). smp_send_stop() parks all secondary\nCPUs in stop_this_cpu(). And the function marks the CPU offline for the\nscheduler via set_cpu_online(false) but never informs RCU, so RCU keeps\nexpecting a quiescent state from CPUs that are now spinning forever with\ninterrupts disabled.\n\nAs long as nothing waits for an RCU grace period after smp_send_stop()\nthis is harmless, which is why it went unnoticed. However, since commit\n91840be8f710370 (\"irq_work: Fix use-after-free in irq_work_single() on\nPREEMPT_RT\"), irq_work_sync() calls synchronize_rcu() on architectures\nwithout an irq_work self-IPI, i.e. where arch_irq_work_has_interrupt()\nreturns false. Any irq_work_sync() issued in the reboot/shutdown/halt\npath after smp_send_stop() then blocks on a grace period that can never\ncomplete, hanging the reboot:\n\n WARNING: CPU: 0 PID: 15 at kernel/irq_work.c:144 irq_work_queue_on\n ...\n rcu: INFO: rcu_sched detected stalls on CPUs/tasks:\n rcu: Offline CPU 1 blocking current GP.\n rcu: Offline CPU 2 blocking current GP.\n rcu: Offline CPU 3 blocking current GP.\n\nThis issue needs some hacks to reproduce, and it was not noticed on\nLoongArch because arch_irq_work_has_interrupt() usually returns true.\n\nCall rcutree_report_cpu_dead() once interrupts are disabled, mirroring\nthe generic CPU-hotplug offline path, so RCU stops waiting on the parked\nCPUs and grace periods can still complete. LoongArch shuts down all CPUs\nhere without going through the CPU-hotplug mechanism, so this report is\nnot otherwise issued."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/loongarch/kernel/smp.c"], "versions": [{"version": "2dc79362302922cb18f35e262712b5e58de65442", "lessThan": "262dadc619e69ebeb97affd334cd1078a9704e98", "status": "affected", "versionType": "git"}, {"version": "eef4f71b46a9929ac33e968538c9dd5d96a02460", "lessThan": "1fa22de588a65880d6fe54c38c87fffe7d519f60", "status": "affected", "versionType": "git"}, {"version": "684a78183c54c23e70d1cba320f7fc184604210b", "lessThan": "a0269e928728f970c782319fee53d92d4ea4e512", "status": "affected", "versionType": "git"}, {"version": "18c0456ea2615b1a743a6db739c74411c3b42bc6", "lessThan": "90e254f18b8c224460082329dd5c42fd30995c2f", "status": "affected", "versionType": "git"}, {"version": "91840be8f710370607f949a627e070896faeddb8", "lessThan": "0833b2b84c2fc1387f8165f0cbf6a02d67f647a5", "status": "affected", "versionType": "git"}, {"version": "91840be8f710370607f949a627e070896faeddb8", "lessThan": "f2539c56c74691e7a88af6372ba2b48c06ed2fe4", "status": "affected", "versionType": "git"}, {"version": "81b582784518196eff1050212a046bc29d3a05dd", "status": "affected", "versionType": "git"}, {"version": "6.1.175", "lessThan": "6.1.178", "status": "affected", "versionType": "semver"}, {"version": "6.6.142", "lessThan": "6.6.145", "status": "affected", "versionType": "semver"}, {"version": "6.12.92", "lessThan": "6.12.95", "status": "affected", "versionType": "semver"}, {"version": "6.18.34", "lessThan": "6.18.38", "status": "affected", "versionType": "semver"}, {"version": "7.0.11", "lessThan": "7.1", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/loongarch/kernel/smp.c"], "versions": [{"version": "7.1", "status": "affected"}, {"version": "0", "lessThan": "7.1", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.178", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.145", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.95", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.38", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.3", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.175", "versionEndExcluding": "6.1.178"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.142", "versionEndExcluding": "6.6.145"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.12.92", "versionEndExcluding": "6.12.95"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18.34", "versionEndExcluding": "6.18.38"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "7.1", "versionEndExcluding": "7.1.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "7.1", "versionEndExcluding": "7.2"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "7.0.11"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/262dadc619e69ebeb97affd334cd1078a9704e98"}, {"url": "https://git.kernel.org/stable/c/1fa22de588a65880d6fe54c38c87fffe7d519f60"}, {"url": "https://git.kernel.org/stable/c/a0269e928728f970c782319fee53d92d4ea4e512"}, {"url": "https://git.kernel.org/stable/c/90e254f18b8c224460082329dd5c42fd30995c2f"}, {"url": "https://git.kernel.org/stable/c/0833b2b84c2fc1387f8165f0cbf6a02d67f647a5"}, {"url": "https://git.kernel.org/stable/c/f2539c56c74691e7a88af6372ba2b48c06ed2fe4"}], "title": "LoongArch: Report dying CPU to RCU in stop_this_cpu()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["arch/loongarch/kernel/smp.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "262dadc619e69ebeb97affd334cd1078a9704e98", "status": "affected", "version": "2dc79362302922cb18f35e262712b5e58de65442", "versionType": "git"}, {"lessThan": "1fa22de588a65880d6fe54c38c87fffe7d519f60", "status": "affected", "version": "eef4f71b46a9929ac33e968538c9dd5d96a02460", "versionType": "git"}, {"lessThan": "a0269e928728f970c782319fee53d92d4ea4e512", "status": "affected", "version": "684a78183c54c23e70d1cba320f7fc184604210b", "versionType": "git"}, {"lessThan": "90e254f18b8c224460082329dd5c42fd30995c2f", "status": "affected", "version": "18c0456ea2615b1a743a6db739c74411c3b42bc6", "versionType": "git"}, {"lessThan": "0833b2b84c2fc1387f8165f0cbf6a02d67f647a5", "status": "affected", "version": "91840be8f710370607f949a627e070896faeddb8", "versionType": "git"}, {"lessThan": "f2539c56c74691e7a88af6372ba2b48c06ed2fe4", "status": "affected", "version": "91840be8f710370607f949a627e070896faeddb8", "versionType": "git"}, {"status": "affected", "version": "81b582784518196eff1050212a046bc29d3a05dd", "versionType": "git"}, {"lessThan": "6.1.178", "status": "affected", "version": "6.1.175", "versionType": "semver"}, {"lessThan": "6.6.145", "status": "affected", "version": "6.6.142", "versionType": "semver"}, {"lessThan": "6.12.95", "status": "affected", "version": "6.12.92", "versionType": "semver"}, {"lessThan": "6.18.38", "status": "affected", "version": "6.18.34", "versionType": "semver"}, {"lessThan": "7.1", "status": "affected", "version": "7.0.11", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["arch/loongarch/kernel/smp.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "7.1"}, {"lessThan": "7.1", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.178", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.145", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.95", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.38", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.3", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "6476CFBE-7300-465C-8DBA-620D3D005F5A", "versionEndExcluding": "6.1.178", "versionStartIncluding": "6.1.175", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D144D922-9AD2-409A-85E8-D8620FC3CA68", "versionEndExcluding": "6.6.145", "versionStartIncluding": "6.6.142", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "2E4368C8-9FF7-4CC0-87A3-C707FFF4C1C0", "versionEndExcluding": "6.12.95", "versionStartIncluding": "6.12.92", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "756FA43D-0AB4-4F32-87FC-8C7552758B86", "versionEndExcluding": "6.18.38", "versionStartIncluding": "6.18.34", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "F099E30C-99C7-4E28-BFFA-57D8DCD36E9B", "versionEndExcluding": "7.1", "versionStartIncluding": "7.0.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "45BB622E-915E-4013-B2C5-D455CDA9D2DD", "versionEndExcluding": "7.1.3", "versionStartIncluding": "7.1.1", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:-:*:*:*:*:*:*", "matchCriteriaId": "42591D75-4648-4AF0-B193-8AE633EFFACF", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*", "matchCriteriaId": "E5910A9D-F60A-409A-B486-FE66BFEBA9B9", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:*", "matchCriteriaId": "81DFF19E-9CF8-49C6-8C36-1E4038622933", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:*", "matchCriteriaId": "B0E8FC71-3952-444C-83E9-718DBBBEC615", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc7:*:*:*:*:*:*", "matchCriteriaId": "1039E95A-8CC3-4C88-8FF9-5C08EEB861C9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nLoongArch: Report dying CPU to RCU in stop_this_cpu()\n\nThis is a port of MIPS commit 9f3f3bdc6d9dac1 (\"MIPS: smp: report dying\nCPU to RCU in stop_this_cpu()\"). smp_send_stop() parks all secondary\nCPUs in stop_this_cpu(). And the function marks the CPU offline for the\nscheduler via set_cpu_online(false) but never informs RCU, so RCU keeps\nexpecting a quiescent state from CPUs that are now spinning forever with\ninterrupts disabled.\n\nAs long as nothing waits for an RCU grace period after smp_send_stop()\nthis is harmless, which is why it went unnoticed. However, since commit\n91840be8f710370 (\"irq_work: Fix use-after-free in irq_work_single() on\nPREEMPT_RT\"), irq_work_sync() calls synchronize_rcu() on architectures\nwithout an irq_work self-IPI, i.e. where arch_irq_work_has_interrupt()\nreturns false. Any irq_work_sync() issued in the reboot/shutdown/halt\npath after smp_send_stop() then blocks on a grace period that can never\ncomplete, hanging the reboot:\n\n WARNING: CPU: 0 PID: 15 at kernel/irq_work.c:144 irq_work_queue_on\n ...\n rcu: INFO: rcu_sched detected stalls on CPUs/tasks:\n rcu: Offline CPU 1 blocking current GP.\n rcu: Offline CPU 2 blocking current GP.\n rcu: Offline CPU 3 blocking current GP.\n\nThis issue needs some hacks to reproduce, and it was not noticed on\nLoongArch because arch_irq_work_has_interrupt() usually returns true.\n\nCall rcutree_report_cpu_dead() once interrupts are disabled, mirroring\nthe generic CPU-hotplug offline path, so RCU stops waiting on the parked\nCPUs and grace periods can still complete. LoongArch shuts down all CPUs\nhere without going through the CPU-hotplug mechanism, so this report is\nnot otherwise issued."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nLoongArch: Informar CPU moribunda a RCU en stop_this_cpu()\n\nEste es un puerto del commit MIPS 9f3f3bdc6d9dac1 (\u2019MIPS: smp: informar CPU moribunda a RCU en stop_this_cpu()\u2019). smp_send_stop() aparca todas las CPUs secundarias en stop_this_cpu(). Y la funci\u00f3n marca la CPU como fuera de l\u00ednea para el planificador a trav\u00e9s de set_cpu_online(false) pero nunca informa a RCU, por lo que RCU sigue esperando un estado de reposo de CPUs que ahora est\u00e1n girando indefinidamente con las interrupciones deshabilitadas.\n\nMientras nada espere un per\u00edodo de gracia de RCU despu\u00e9s de smp_send_stop(), esto es inofensivo, raz\u00f3n por la cual pas\u00f3 desapercibido. Sin embargo, desde el commit 91840be8f710370 (\u2019irq_work: Corregir uso despu\u00e9s de liberaci\u00f3n en irq_work_single() en PREEMPT_RT\u2019), irq_work_sync() llama a synchronize_rcu() en arquitecturas sin un auto-IPI de irq_work, es decir, donde arch_irq_work_has_interrupt() devuelve falso. Cualquier irq_work_sync() emitido en la ruta de reinicio/apagado/detenci\u00f3n despu\u00e9s de smp_send_stop() entonces se bloquea en un per\u00edodo de gracia que nunca puede completarse, colgando el reinicio:\n\n ADVERTENCIA: CPU: 0 PID: 15 en kernel/irq_work.c:144 irq_work_queue_on\n ...\n rcu: INFO: rcu_sched detect\u00f3 bloqueos en CPUs/tareas:\n rcu: CPU fuera de l\u00ednea 1 bloqueando GP actual.\n rcu: CPU fuera de l\u00ednea 2 bloqueando GP actual.\n rcu: CPU fuera de l\u00ednea 3 bloqueando GP actual.\n\nEste problema necesita algunos trucos para reproducirse, y no fue notado en LoongArch porque arch_irq_work_has_interrupt() usualmente devuelve verdadero.\n\nLlamar a rcutree_report_cpu_dead() una vez que las interrupciones est\u00e1n deshabilitadas, reflejando la ruta gen\u00e9rica de desconexi\u00f3n de CPU-hotplug, para que RCU deje de esperar en las CPUs aparcadas y los per\u00edodos de gracia a\u00fan puedan completarse. LoongArch apaga todas las CPUs aqu\u00ed sin pasar por el mecanismo de CPU-hotplug, por lo que este informe no se emite de otra manera."}], "id": "CVE-2026-64250", "lastModified": "2026-11-08T16:10:00.183", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-07-24T16:16:54.577", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0833b2b84c2fc1387f8165f0cbf6a02d67f647a5"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/1fa22de588a65880d6fe54c38c87fffe7d519f60"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/262dadc619e69ebeb97affd334cd1078a9704e98"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/90e254f18b8c224460082329dd5c42fd30995c2f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/a0269e928728f970c782319fee53d92d4ea4e512"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/f2539c56c74691e7a88af6372ba2b48c06ed2fe4"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: LoongArch: Report dying CPU to RCU in stop_this_cpu()", "id": "2506788", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506788"}, "csaw": false, "cwe": "CWE-833", "details": ["No description is available for this CVE."], "name": "CVE-2026-64250", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-07-24T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-64250\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-64250\nhttps://lore.kernel.org/linux-cve-announce/2026072419-CVE-2026-64250-580f@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2dc79362302922cb18f35e262712b5e58de65442,262dadc619e69ebeb97affd334cd1078a9704e98)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[eef4f71b46a9929ac33e968538c9dd5d96a02460,1fa22de588a65880d6fe54c38c87fffe7d519f60)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[684a78183c54c23e70d1cba320f7fc184604210b,a0269e928728f970c782319fee53d92d4ea4e512)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[18c0456ea2615b1a743a6db739c74411c3b42bc6,90e254f18b8c224460082329dd5c42fd30995c2f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[91840be8f710370607f949a627e070896faeddb8,0833b2b84c2fc1387f8165f0cbf6a02d67f647a5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[91840be8f710370607f949a627e070896faeddb8,f2539c56c74691e7a88af6372ba2b48c06ed2fe4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "81b582784518196eff1050212a046bc29d3a05dd"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.1.175,6.1.178)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.6.142,6.6.145)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.12.92,6.12.95)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.18.34,6.18.38)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.0.11,7.1)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.1"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,7.1)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.1.178,6.1.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.6.145,6.6.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.95,6.12.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.38,6.18.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1.3,7.1.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-24T22:15:03.847671+00:00", "updated": "2026-08-13T11:45:03.989915+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}