CVE-2026-74707

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-74707", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-15T05:44:03.927Z", "datePublished": "2026-08-22T15:33:05.337Z", "dateUpdated": "2026-10-16T19:16:10.746Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-25T05:41:50.013Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: validate metadata when processing requests\n\nThe zero-copy path validates TX metadata while obtaining the descriptor\ncontext, then reads it again later when preparing the hardware request.\nUser space can change the metadata between those operations and bypass the\noriginal validation.\n\nValidate the metadata in xsk_tx_metadata_request() and use the resulting\nflags snapshot for every feature check. Read request fields once so all\nzero-copy drivers process only values observed after successful\nvalidation."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - The flaw is reached only through local AF_XDP setup (socket, UMEM registration, TX ring submission) and zero-copy driver transmit on bound netdev queues; remote peers cannot directly trigger xsk_tx_metadata_request() without local control of an AF_XDP socket.\nAC:L - The attacker fully controls mmap'd UMEM metadata and can race concurrent writes (or helper threads) between early validation in get_ctx/get_metadata and the later xsk_tx_metadata_request() read, reliably creating the TOCTOU window.\nPR:L - Creating an AF_XDP socket requires CAP_NET_RAW in the relevant network user namespace (xsk_create); unprivileged local users can obtain this capability via user/network namespaces (e.g., unshare -Urn), matching CNA guidance for net stack local attack surface.\nUI:N - Exploitation requires only the attacker configuring AF_XDP zero-copy TX, crafting metadata, and submitting descriptors; no separate victim user action is needed beyond normal attacker-controlled local execution.\nS:U - Impact is confined to kernel/driver transmit state on the host where the AF_XDP socket runs; it does not cross VM, IOMMU, or sandbox security boundaries into another authority.\nC:H - Bypassing metadata validation can enable unchecked launch-time/checksum offload handlers that misread fields and corrupt kernel TX ring/descriptor state, providing a plausible kernel memory disclosure primitive consistent with related AF_XDP metadata TOCTOU issues.\nI:H - After validation, userspace can flip flags and request fields so zero-copy drivers (igc/stmmac/mlx5/libeth) program hardware with unvalidated launch_time or checksum requests, corrupting in-kernel TX descriptors and transmit control structures.\nA:H - Illegal hardware offload activation or corrupted TX ring accounting can kernel-oops, panic, or wedge NIC transmit queues; the attacker can repeatedly trigger the path via continuous AF_XDP zero-copy transmissions."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/intel/igc/igc_main.c", "drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c", "drivers/net/ethernet/stmicro/stmmac/stmmac_main.c", "include/net/libeth/xsk.h", "include/net/xdp_sock_drv.h", "net/xdp/xsk_buff_pool.c"], "versions": [{"version": "ca4419f15abd19ba8be1e109661b60f9f5b6c9f0", "lessThan": "5fd121971912dee2f5af1efec64462ac722deb17", "status": "affected", "versionType": "git"}, {"version": "ca4419f15abd19ba8be1e109661b60f9f5b6c9f0", "lessThan": "0cc7aa6e0d19027fdd42e6fbd156267ac1e3bbba", "status": "affected", "versionType": "git"}, {"version": "ca4419f15abd19ba8be1e109661b60f9f5b6c9f0", "lessThan": "849b1664dbda1cf6c63e0fd4f9dec23782b8c851", "status": "affected", "versionType": "git"}, {"version": "d9d736c416c9a85f84e15435ba82a177262e745b", "status": "affected", "versionType": "git"}, {"version": "6.14.2", "lessThan": "6.15", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/intel/igc/igc_main.c", "drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c", "drivers/net/ethernet/stmicro/stmmac/stmmac_main.c", "include/net/libeth/xsk.h", "include/net/xdp_sock_drv.h", "net/xdp/xsk_buff_pool.c"], "versions": [{"version": "6.15", "status": "affected"}, {"version": "0", "lessThan": "6.15", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.45", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.9", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "6.18.45"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.1.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.2"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.14.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/5fd121971912dee2f5af1efec64462ac722deb17"}, {"url": "https://git.kernel.org/stable/c/0cc7aa6e0d19027fdd42e6fbd156267ac1e3bbba"}, {"url": "https://git.kernel.org/stable/c/849b1664dbda1cf6c63e0fd4f9dec23782b8c851"}], "title": "xsk: validate metadata when processing requests", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-74707", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T19:15:08.406835Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T19:16:10.746Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-74707", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T19:15:08.406835Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T19:15:09.671Z"}}], "cna": {"title": "xsk: validate metadata when processing requests", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:L - The flaw is reached only through local AF_XDP setup (socket, UMEM registration, TX ring submission) and zero-copy driver transmit on bound netdev queues; remote peers cannot directly trigger xsk_tx_metadata_request() without local control of an AF_XDP socket.\nAC:L - The attacker fully controls mmap'd UMEM metadata and can race concurrent writes (or helper threads) between early validation in get_ctx/get_metadata and the later xsk_tx_metadata_request() read, reliably creating the TOCTOU window.\nPR:L - Creating an AF_XDP socket requires CAP_NET_RAW in the relevant network user namespace (xsk_create); unprivileged local users can obtain this capability via user/network namespaces (e.g., unshare -Urn), matching CNA guidance for net stack local attack surface.\nUI:N - Exploitation requires only the attacker configuring AF_XDP zero-copy TX, crafting metadata, and submitting descriptors; no separate victim user action is needed beyond normal attacker-controlled local execution.\nS:U - Impact is confined to kernel/driver transmit state on the host where the AF_XDP socket runs; it does not cross VM, IOMMU, or sandbox security boundaries into another authority.\nC:H - Bypassing metadata validation can enable unchecked launch-time/checksum offload handlers that misread fields and corrupt kernel TX ring/descriptor state, providing a plausible kernel memory disclosure primitive consistent with related AF_XDP metadata TOCTOU issues.\nI:H - After validation, userspace can flip flags and request fields so zero-copy drivers (igc/stmmac/mlx5/libeth) program hardware with unvalidated launch_time or checksum requests, corrupting in-kernel TX descriptors and transmit control structures.\nA:H - Illegal hardware offload activation or corrupted TX ring accounting can kernel-oops, panic, or wedge NIC transmit queues; the attacker can repeatedly trigger the path via continuous AF_XDP zero-copy transmissions."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "ca4419f15abd19ba8be1e109661b60f9f5b6c9f0", "lessThan": "5fd121971912dee2f5af1efec64462ac722deb17", "versionType": "git"}, {"status": "affected", "version": "ca4419f15abd19ba8be1e109661b60f9f5b6c9f0", "lessThan": "0cc7aa6e0d19027fdd42e6fbd156267ac1e3bbba", "versionType": "git"}, {"status": "affected", "version": "ca4419f15abd19ba8be1e109661b60f9f5b6c9f0", "lessThan": "849b1664dbda1cf6c63e0fd4f9dec23782b8c851", "versionType": "git"}, {"status": "affected", "version": "d9d736c416c9a85f84e15435ba82a177262e745b", "versionType": "git"}, {"status": "affected", "version": "6.14.2", "lessThan": "6.15", "versionType": "semver"}], "programFiles": ["drivers/net/ethernet/intel/igc/igc_main.c", "drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c", "drivers/net/ethernet/stmicro/stmmac/stmmac_main.c", "include/net/libeth/xsk.h", "include/net/xdp_sock_drv.h", "net/xdp/xsk_buff_pool.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.15"}, {"status": "unaffected", "version": "0", "lessThan": "6.15", "versionType": "semver"}, {"status": "unaffected", "version": "6.18.45", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.9", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/ethernet/intel/igc/igc_main.c", "drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c", "drivers/net/ethernet/stmicro/stmmac/stmmac_main.c", "include/net/libeth/xsk.h", "include/net/xdp_sock_drv.h", "net/xdp/xsk_buff_pool.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/5fd121971912dee2f5af1efec64462ac722deb17"}, {"url": "https://git.kernel.org/stable/c/0cc7aa6e0d19027fdd42e6fbd156267ac1e3bbba"}, {"url": "https://git.kernel.org/stable/c/849b1664dbda1cf6c63e0fd4f9dec23782b8c851"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: validate metadata when processing requests\n\nThe zero-copy path validates TX metadata while obtaining the descriptor\ncontext, then reads it again later when preparing the hardware request.\nUser space can change the metadata between those operations and bypass the\noriginal validation.\n\nValidate the metadata in xsk_tx_metadata_request() and use the resulting\nflags snapshot for every feature check. Read request fields once so all\nzero-copy drivers process only values observed after successful\nvalidation."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.45", "versionStartIncluding": "6.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.1.9", "versionStartIncluding": "6.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.2", "versionStartIncluding": "6.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "6.14.2"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-25T05:41:50.013Z"}}}, "cveMetadata": {"cveId": "CVE-2026-74707", "state": "PUBLISHED", "dateUpdated": "2026-10-16T19:16:10.746Z", "dateReserved": "2026-08-15T05:44:03.927Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-08-22T15:33:05.337Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/ethernet/intel/igc/igc_main.c", "drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c", "drivers/net/ethernet/stmicro/stmmac/stmmac_main.c", "include/net/libeth/xsk.h", "include/net/xdp_sock_drv.h", "net/xdp/xsk_buff_pool.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "5fd121971912dee2f5af1efec64462ac722deb17", "status": "affected", "version": "ca4419f15abd19ba8be1e109661b60f9f5b6c9f0", "versionType": "git"}, {"lessThan": "0cc7aa6e0d19027fdd42e6fbd156267ac1e3bbba", "status": "affected", "version": "ca4419f15abd19ba8be1e109661b60f9f5b6c9f0", "versionType": "git"}, {"lessThan": "849b1664dbda1cf6c63e0fd4f9dec23782b8c851", "status": "affected", "version": "ca4419f15abd19ba8be1e109661b60f9f5b6c9f0", "versionType": "git"}, {"status": "affected", "version": "d9d736c416c9a85f84e15435ba82a177262e745b", "versionType": "git"}, {"lessThan": "6.15", "status": "affected", "version": "6.14.2", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/ethernet/intel/igc/igc_main.c", "drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c", "drivers/net/ethernet/stmicro/stmmac/stmmac_main.c", "include/net/libeth/xsk.h", "include/net/xdp_sock_drv.h", "net/xdp/xsk_buff_pool.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.15"}, {"lessThan": "6.15", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.45", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.9", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: validate metadata when processing requests\n\nThe zero-copy path validates TX metadata while obtaining the descriptor\ncontext, then reads it again later when preparing the hardware request.\nUser space can change the metadata between those operations and bypass the\noriginal validation.\n\nValidate the metadata in xsk_tx_metadata_request() and use the resulting\nflags snapshot for every feature check. Read request fields once so all\nzero-copy drivers process only values observed after successful\nvalidation."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nxsk: validar metadatos al procesar solicitudes\n\nLa ruta de copia cero valida los metadatos TX mientras obtiene el contexto del descriptor, luego los lee de nuevo m\u00e1s tarde al preparar la solicitud de hardware. El espacio de usuario puede cambiar los metadatos entre esas operaciones y eludir la validaci\u00f3n original.\n\nValidar los metadatos en xsk_tx_metadata_request() y usar la instant\u00e1nea de banderas resultante para cada verificaci\u00f3n de caracter\u00edstica. Leer los campos de solicitud una vez para que todos los controladores de copia cero procesen solo los valores observados despu\u00e9s de una validaci\u00f3n exitosa."}], "id": "CVE-2026-74707", "lastModified": "2026-10-16T20:17:53.490", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-74707", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-16T19:15:08.406835Z", "version": "2.0.3"}}]}, "published": "2026-08-22T16:16:45.433", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/0cc7aa6e0d19027fdd42e6fbd156267ac1e3bbba"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5fd121971912dee2f5af1efec64462ac722deb17"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/849b1664dbda1cf6c63e0fd4f9dec23782b8c851"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: xsk: validate metadata when processing requests", "id": "2521453", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521453"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-367", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nxsk: validate metadata when processing requests\nThe zero-copy path validates TX metadata while obtaining the descriptor\ncontext, then reads it again later when preparing the hardware request.\nUser space can change the metadata between those operations and bypass the\noriginal validation.\nValidate the metadata in xsk_tx_metadata_request() and use the resulting\nflags snapshot for every feature check. Read request fields once so all\nzero-copy drivers process only values observed after successful\nvalidation.", "A flaw was found in the Linux kernel's xsk (AF_XDP sockets) component. This vulnerability allows a local user to bypass security validation by modifying transmission (TX) metadata after it has been initially checked but before it is used to prepare hardware requests. This could lead to unexpected system behavior or potentially impact data integrity."], "name": "CVE-2026-74707", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-22T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-74707\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-74707\nhttps://lore.kernel.org/linux-cve-announce/2026082237-CVE-2026-74707-360f@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ca4419f15abd19ba8be1e109661b60f9f5b6c9f0,5fd121971912dee2f5af1efec64462ac722deb17)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ca4419f15abd19ba8be1e109661b60f9f5b6c9f0,0cc7aa6e0d19027fdd42e6fbd156267ac1e3bbba)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ca4419f15abd19ba8be1e109661b60f9f5b6c9f0,849b1664dbda1cf6c63e0fd4f9dec23782b8c851)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "d9d736c416c9a85f84e15435ba82a177262e745b"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.14.2,6.15)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.15"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.15)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.45,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.9,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-22T18:30:16.838102+00:00", "updated": "2026-08-25T18:30:04.988080+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}