CVE-2026-80591

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-80591", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-26T14:34:25.770Z", "datePublished": "2026-08-28T06:48:19.617Z", "dateUpdated": "2026-08-29T06:21:06.412Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-29T06:21:06.412Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix listxattr handling of corrupted xattr entries\n\nValidate the xattr entry before reading its fields in f2fs_listxattr().\nReturn -EFSCORRUPTED when the entry is outside the valid xattr storage\narea instead of returning a successful partial result."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - The flaw is reached via local listxattr/flistxattr/listxattrat syscalls through vfs_listxattr into f2fs_listxattr; f2fs is a local block filesystem (Android userdata, embedded flash) and although nfsd/ksmbd can call vfs_listxattr this is a secondary path requiring pre-existing on-disk corruption.\nAC:L - Once a crafted f2fs image with corrupted xattr entry sizes is mounted, the attacker deterministically controls the on-disk layout that makes list_for_each_xattr iterate past last_base_addr; no race, special memory layout, or rare kernel config is required beyond standard CONFIG_F2FS_FS_XATTR.\nPR:L - Planting malformed on-disk xattr metadata requires offline image crafting plus CAP_SYS_ADMIN to loop-mount (obtainable in an unprivileged user namespace) or root for raw block writes; triggering listxattr only needs normal file access on the attacker-controlled mount with no capability checks beyond LSM hooks on the syscall path.\nUI:N - In the highest-impact self-contained attack the attacker crafts a malicious f2fs image and mounts it inside their own user namespace, then calls listxattr on their own inode with no victim action such as opening a file or inserting removable media required.\nS:U - The out-of-bounds read corrupts or leaks kernel heap memory within the same kernel security domain; this is a standard local kernel memory-safety flaw, not a VM escape, container breakout, or IOMMU boundary bypass.\nC:H - Before bounds validation f2fs_listxattr reads entry->e_name_index and XATTR_NEXT_ENTRY() fields from xattr entries outside the valid storage area, causing slab out-of-bounds reads of adjacent kernel heap objects that can disclose kernel pointers and sensitive kernel data.\nI:H - Although the immediate fault is a read past bounds rather than a write, this is kernel heap memory corruption class behavior; adjacent-slab reads are routinely chained into further kernel exploitation via heap grooming for arbitrary write and code execution, so I:H applies when uncertain.\nA:H - Reading xattr entry fields beyond the kmalloc-allocated buffer can fault the kernel with a slab out-of-bounds access or oops under KASAN/hardening; f2fs_handle_error may log corruption but does not prevent the out-of-bounds read from destabilizing the system on each listxattr invocation."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/f2fs/xattr.c"], "versions": [{"version": "688078e7f36c293dae25b338ddc9e0a2790f6e06", "lessThan": "7dfac47e4189692f35230f3064acf2540e6d75fe", "status": "affected", "versionType": "git"}, {"version": "688078e7f36c293dae25b338ddc9e0a2790f6e06", "lessThan": "c8a10f174316e80d577e6549099b71a7a2111f3f", "status": "affected", "versionType": "git"}, {"version": "688078e7f36c293dae25b338ddc9e0a2790f6e06", "lessThan": "dfa4891c27bccbd83d511a065721e85621f275a1", "status": "affected", "versionType": "git"}, {"version": "688078e7f36c293dae25b338ddc9e0a2790f6e06", "lessThan": "2770041f34b52334ea63351ffb1cc2007a9de46e", "status": "affected", "versionType": "git"}, {"version": "688078e7f36c293dae25b338ddc9e0a2790f6e06", "lessThan": "7dd01f7d0291583e3e5420c95c7d584e114899bd", "status": "affected", "versionType": "git"}, {"version": "688078e7f36c293dae25b338ddc9e0a2790f6e06", "lessThan": "ec9f79c8d5b28a928e65b67cd138c841571cf502", "status": "affected", "versionType": "git"}, {"version": "688078e7f36c293dae25b338ddc9e0a2790f6e06", "lessThan": "3c0dbfecd859fd02fe9008f33a83146102ccd9ba", "status": "affected", "versionType": "git"}, {"version": "688078e7f36c293dae25b338ddc9e0a2790f6e06", "lessThan": "5ef5bc304f23c3fe255d4936472378dcb74d0e94", "status": "affected", "versionType": "git"}, {"version": "ae811cecbbb231f11a84acaf74baca1283b964c7", "status": "affected", "versionType": "git"}, {"version": "ed523cbd4a6594edf123dc03ec9d70ea4f793671", "status": "affected", "versionType": "git"}, {"version": "5811f24abd27a8a0791c6909c6ff803659060c84", "status": "affected", "versionType": "git"}, {"version": "4.14.181", "lessThan": "4.15", "status": "affected", "versionType": "semver"}, {"version": "4.19.119", "lessThan": "4.20", "status": "affected", "versionType": "semver"}, {"version": "5.4.36", "lessThan": "5.5", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/f2fs/xattr.c"], "versions": [{"version": "5.5", "status": "affected"}, {"version": "0", "lessThan": "5.5", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.261", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.212", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.178", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.145", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.96", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.39", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "5.10.261"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "5.15.212"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "6.1.178"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "6.6.145"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "6.12.96"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "6.18.39"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "7.2"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14.181"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.19.119"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4.36"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/7dfac47e4189692f35230f3064acf2540e6d75fe"}, {"url": "https://git.kernel.org/stable/c/c8a10f174316e80d577e6549099b71a7a2111f3f"}, {"url": "https://git.kernel.org/stable/c/dfa4891c27bccbd83d511a065721e85621f275a1"}, {"url": "https://git.kernel.org/stable/c/2770041f34b52334ea63351ffb1cc2007a9de46e"}, {"url": "https://git.kernel.org/stable/c/7dd01f7d0291583e3e5420c95c7d584e114899bd"}, {"url": "https://git.kernel.org/stable/c/ec9f79c8d5b28a928e65b67cd138c841571cf502"}, {"url": "https://git.kernel.org/stable/c/3c0dbfecd859fd02fe9008f33a83146102ccd9ba"}, {"url": "https://git.kernel.org/stable/c/5ef5bc304f23c3fe255d4936472378dcb74d0e94"}], "title": "f2fs: fix listxattr handling of corrupted xattr entries", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/f2fs/xattr.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "7dfac47e4189692f35230f3064acf2540e6d75fe", "status": "affected", "version": "688078e7f36c293dae25b338ddc9e0a2790f6e06", "versionType": "git"}, {"lessThan": "c8a10f174316e80d577e6549099b71a7a2111f3f", "status": "affected", "version": "688078e7f36c293dae25b338ddc9e0a2790f6e06", "versionType": "git"}, {"lessThan": "dfa4891c27bccbd83d511a065721e85621f275a1", "status": "affected", "version": "688078e7f36c293dae25b338ddc9e0a2790f6e06", "versionType": "git"}, {"lessThan": "2770041f34b52334ea63351ffb1cc2007a9de46e", "status": "affected", "version": "688078e7f36c293dae25b338ddc9e0a2790f6e06", "versionType": "git"}, {"lessThan": "7dd01f7d0291583e3e5420c95c7d584e114899bd", "status": "affected", "version": "688078e7f36c293dae25b338ddc9e0a2790f6e06", "versionType": "git"}, {"lessThan": "ec9f79c8d5b28a928e65b67cd138c841571cf502", "status": "affected", "version": "688078e7f36c293dae25b338ddc9e0a2790f6e06", "versionType": "git"}, {"lessThan": "3c0dbfecd859fd02fe9008f33a83146102ccd9ba", "status": "affected", "version": "688078e7f36c293dae25b338ddc9e0a2790f6e06", "versionType": "git"}, {"lessThan": "5ef5bc304f23c3fe255d4936472378dcb74d0e94", "status": "affected", "version": "688078e7f36c293dae25b338ddc9e0a2790f6e06", "versionType": "git"}, {"status": "affected", "version": "ae811cecbbb231f11a84acaf74baca1283b964c7", "versionType": "git"}, {"status": "affected", "version": "ed523cbd4a6594edf123dc03ec9d70ea4f793671", "versionType": "git"}, {"status": "affected", "version": "5811f24abd27a8a0791c6909c6ff803659060c84", "versionType": "git"}, {"lessThan": "4.15", "status": "affected", "version": "4.14.181", "versionType": "semver"}, {"lessThan": "4.20", "status": "affected", "version": "4.19.119", "versionType": "semver"}, {"lessThan": "5.5", "status": "affected", "version": "5.4.36", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/f2fs/xattr.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.5"}, {"lessThan": "5.5", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.261", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.212", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.178", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.145", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.96", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.39", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix listxattr handling of corrupted xattr entries\n\nValidate the xattr entry before reading its fields in f2fs_listxattr().\nReturn -EFSCORRUPTED when the entry is outside the valid xattr storage\narea instead of returning a successful partial result."}], "id": "CVE-2026-80591", "lastModified": "2026-08-29T07:16:44.307", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}]}, "published": "2026-08-28T08:16:42.693", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2770041f34b52334ea63351ffb1cc2007a9de46e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3c0dbfecd859fd02fe9008f33a83146102ccd9ba"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5ef5bc304f23c3fe255d4936472378dcb74d0e94"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7dd01f7d0291583e3e5420c95c7d584e114899bd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7dfac47e4189692f35230f3064acf2540e6d75fe"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c8a10f174316e80d577e6549099b71a7a2111f3f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/dfa4891c27bccbd83d511a065721e85621f275a1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ec9f79c8d5b28a928e65b67cd138c841571cf502"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: f2fs: fix listxattr handling of corrupted xattr entries", "id": "2525397", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525397"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-125", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nf2fs: fix listxattr handling of corrupted xattr entries\nValidate the xattr entry before reading its fields in f2fs_listxattr().\nReturn -EFSCORRUPTED when the entry is outside the valid xattr storage\narea instead of returning a successful partial result.", "A flaw was found in the `f2fs` file system within the Linux kernel. This vulnerability arises from inadequate validation of extended attribute (xattr) entries during the `f2fs_listxattr()` function's operation. A local attacker could potentially create a corrupted xattr entry, causing the system to attempt to read data from outside the valid xattr storage area. This could lead to unexpected system behavior or the disclosure of sensitive information."], "name": "CVE-2026-80591", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-28T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-80591\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-80591\nhttps://lore.kernel.org/linux-cve-announce/2026082827-CVE-2026-80591-9af6@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[688078e7f36c293dae25b338ddc9e0a2790f6e06,7dfac47e4189692f35230f3064acf2540e6d75fe)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[688078e7f36c293dae25b338ddc9e0a2790f6e06,c8a10f174316e80d577e6549099b71a7a2111f3f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[688078e7f36c293dae25b338ddc9e0a2790f6e06,dfa4891c27bccbd83d511a065721e85621f275a1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[688078e7f36c293dae25b338ddc9e0a2790f6e06,2770041f34b52334ea63351ffb1cc2007a9de46e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[688078e7f36c293dae25b338ddc9e0a2790f6e06,7dd01f7d0291583e3e5420c95c7d584e114899bd)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[688078e7f36c293dae25b338ddc9e0a2790f6e06,ec9f79c8d5b28a928e65b67cd138c841571cf502)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[688078e7f36c293dae25b338ddc9e0a2790f6e06,3c0dbfecd859fd02fe9008f33a83146102ccd9ba)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[688078e7f36c293dae25b338ddc9e0a2790f6e06,5ef5bc304f23c3fe255d4936472378dcb74d0e94)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "ae811cecbbb231f11a84acaf74baca1283b964c7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "ed523cbd4a6594edf123dc03ec9d70ea4f793671"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "5811f24abd27a8a0791c6909c6ff803659060c84"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.14.181,4.15)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.19.119,4.20)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.4.36,5.5)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.5"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,5.5)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[5.10.261,5.10.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[5.15.212,5.15.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.1.178,6.1.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.6.145,6.6.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.96,6.12.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.39,6.18.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1.5,7.1.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-28T11:15:03.333514+00:00", "updated": "2026-08-31T14:00:19.803467+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-119", "CWE-125"]}