CVE-2026-98767

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98767", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.369Z", "datePublished": "2026-10-18T15:48:02.089Z", "dateUpdated": "2026-10-30T12:39:36.527Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:39:36.527Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: gadget: fix IRQ storm on invalid event buffer count\n\nWhen dwc3_check_event_buf() reads a GEVNTCOUNT value exceeding the\nevent buffer length, commit 63ccd26cd1f6 (\"usb: dwc3: gadget: check\nthat event count does not exceed event buffer length\") returns IRQ_NONE\nwithout writing back GEVNTCOUNT. Since the DWC3 interrupt is\nlevel-triggered, the uncleared IRQ source keeps the line asserted,\ncausing a tight IRQ storm that accumulates 99,900 unhandled interrupts\nand triggers spurious.c:184 BUG -> kernel panic.\n\nThe resulting call stack:\n __report_bad_irq+0xac/0xc8\n note_interrupt+0x340/0x468\n handle_irq_event+0xac/0xc0\n handle_fasteoi_irq+0x120/0x228\n gic_handle_irq+0x68/0x108\n ...\n kernel BUG at kernel/irq/spurious.c:184\n\nTo reproduce, write a bogus value exceeding the event buffer length\ndirectly to the GEVNTCOUNT register:\n\n devmem <DWC3_BASE + 0xc40c> 4 0x1004\n\nWrite the bogus count back to GEVNTCOUNT to clear the IRQ source,\nconsistent with the stale event clearing pattern in\ndwc3_event_buffers_setup(), and schedule error recovery to\nreinitialize the controller."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/usb/dwc3/core.h", "drivers/usb/dwc3/ep0.c", "drivers/usb/dwc3/gadget.c"], "versions": [{"version": "c0079630f268843a25ed75226169cba40e0d8880", "lessThan": "2c41e442ff6304532bf369aa618b23c8a474feb4", "status": "affected", "versionType": "git"}, {"version": "a44547015287a19001384fe94dbff84c92ce4ee1", "lessThan": "86b9c867fb061a147df05ff0d9bb69dd3d79f49a", "status": "affected", "versionType": "git"}, {"version": "c4d80e41cb42008dceb35e5dbf52574d93beac0d", "lessThan": "6cd82563bb270e03fe2f91324660ea14e3ce5d1a", "status": "affected", "versionType": "git"}, {"version": "52a7c9d930b95aa8b1620edaba4818040c32631f", "lessThan": "96918ca25ff467c25675478fc79393df4ae9d74c", "status": "affected", "versionType": "git"}, {"version": "63ccd26cd1f6600421795f6ca3e625076be06c9f", "lessThan": "ba927133b301894e7d24099afbb701887c8cd2f1", "status": "affected", "versionType": "git"}, {"version": "63ccd26cd1f6600421795f6ca3e625076be06c9f", "lessThan": "f51cadb02b439850ab411df0a2cf4288a66d42e2", "status": "affected", "versionType": "git"}, {"version": "63ccd26cd1f6600421795f6ca3e625076be06c9f", "lessThan": "1ff77cbefe5a653ea12874c213ea4bd0d72c1067", "status": "affected", "versionType": "git"}, {"version": "015c39f38e69a491d2abd5e98869a500a9459b3b", "status": "affected", "versionType": "git"}, {"version": "b43225948b231b3f331194010f84512bee4d9f59", "status": "affected", "versionType": "git"}, {"version": "99d655119b870ee60e4dbf310aa9a1ed8d9ede3d", "status": "affected", "versionType": "git"}, {"version": "5.15.181", "lessThan": "5.15.224", "status": "affected", "versionType": "semver"}, {"version": "6.1.136", "lessThan": "6.1.191", "status": "affected", "versionType": "semver"}, {"version": "6.6.89", "lessThan": "6.6.160", "status": "affected", "versionType": "semver"}, {"version": "6.12.26", "lessThan": "6.12.113", "status": "affected", "versionType": "semver"}, {"version": "5.4.293", "lessThan": "5.5", "status": "affected", "versionType": "semver"}, {"version": "5.10.237", "lessThan": "5.11", "status": "affected", "versionType": "semver"}, {"version": "6.14.5", "lessThan": "6.15", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/usb/dwc3/core.h", "drivers/usb/dwc3/ep0.c", "drivers/usb/dwc3/gadget.c"], "versions": [{"version": "6.15", "status": "affected"}, {"version": "0", "lessThan": "6.15", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.224", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.191", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.113", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.56", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.10", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.181", "versionEndExcluding": "5.15.224"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.136", "versionEndExcluding": "6.1.191"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.89", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.12.26", "versionEndExcluding": "6.12.113"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "6.18.56"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.2.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4.293"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.237"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.14.5"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/2c41e442ff6304532bf369aa618b23c8a474feb4"}, {"url": "https://git.kernel.org/stable/c/86b9c867fb061a147df05ff0d9bb69dd3d79f49a"}, {"url": "https://git.kernel.org/stable/c/6cd82563bb270e03fe2f91324660ea14e3ce5d1a"}, {"url": "https://git.kernel.org/stable/c/96918ca25ff467c25675478fc79393df4ae9d74c"}, {"url": "https://git.kernel.org/stable/c/ba927133b301894e7d24099afbb701887c8cd2f1"}, {"url": "https://git.kernel.org/stable/c/f51cadb02b439850ab411df0a2cf4288a66d42e2"}, {"url": "https://git.kernel.org/stable/c/1ff77cbefe5a653ea12874c213ea4bd0d72c1067"}], "title": "usb: dwc3: gadget: fix IRQ storm on invalid event buffer count", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/usb/dwc3/core.h", "drivers/usb/dwc3/ep0.c", "drivers/usb/dwc3/gadget.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "2c41e442ff6304532bf369aa618b23c8a474feb4", "status": "affected", "version": "c0079630f268843a25ed75226169cba40e0d8880", "versionType": "git"}, {"lessThan": "86b9c867fb061a147df05ff0d9bb69dd3d79f49a", "status": "affected", "version": "a44547015287a19001384fe94dbff84c92ce4ee1", "versionType": "git"}, {"lessThan": "6cd82563bb270e03fe2f91324660ea14e3ce5d1a", "status": "affected", "version": "c4d80e41cb42008dceb35e5dbf52574d93beac0d", "versionType": "git"}, {"lessThan": "96918ca25ff467c25675478fc79393df4ae9d74c", "status": "affected", "version": "52a7c9d930b95aa8b1620edaba4818040c32631f", "versionType": "git"}, {"lessThan": "ba927133b301894e7d24099afbb701887c8cd2f1", "status": "affected", "version": "63ccd26cd1f6600421795f6ca3e625076be06c9f", "versionType": "git"}, {"lessThan": "f51cadb02b439850ab411df0a2cf4288a66d42e2", "status": "affected", "version": "63ccd26cd1f6600421795f6ca3e625076be06c9f", "versionType": "git"}, {"lessThan": "1ff77cbefe5a653ea12874c213ea4bd0d72c1067", "status": "affected", "version": "63ccd26cd1f6600421795f6ca3e625076be06c9f", "versionType": "git"}, {"status": "affected", "version": "015c39f38e69a491d2abd5e98869a500a9459b3b", "versionType": "git"}, {"status": "affected", "version": "b43225948b231b3f331194010f84512bee4d9f59", "versionType": "git"}, {"status": "affected", "version": "99d655119b870ee60e4dbf310aa9a1ed8d9ede3d", "versionType": "git"}, {"lessThan": "5.15.224", "status": "affected", "version": "5.15.181", "versionType": "semver"}, {"lessThan": "6.1.191", "status": "affected", "version": "6.1.136", "versionType": "semver"}, {"lessThan": "6.6.160", "status": "affected", "version": "6.6.89", "versionType": "semver"}, {"lessThan": "6.12.113", "status": "affected", "version": "6.12.26", "versionType": "semver"}, {"lessThan": "5.5", "status": "affected", "version": "5.4.293", "versionType": "semver"}, {"lessThan": "5.11", "status": "affected", "version": "5.10.237", "versionType": "semver"}, {"lessThan": "6.15", "status": "affected", "version": "6.14.5", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/usb/dwc3/core.h", "drivers/usb/dwc3/ep0.c", "drivers/usb/dwc3/gadget.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.15"}, {"lessThan": "6.15", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.224", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.191", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.113", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.56", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.10", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: gadget: fix IRQ storm on invalid event buffer count\n\nWhen dwc3_check_event_buf() reads a GEVNTCOUNT value exceeding the\nevent buffer length, commit 63ccd26cd1f6 (\"usb: dwc3: gadget: check\nthat event count does not exceed event buffer length\") returns IRQ_NONE\nwithout writing back GEVNTCOUNT. Since the DWC3 interrupt is\nlevel-triggered, the uncleared IRQ source keeps the line asserted,\ncausing a tight IRQ storm that accumulates 99,900 unhandled interrupts\nand triggers spurious.c:184 BUG -> kernel panic.\n\nThe resulting call stack:\n __report_bad_irq+0xac/0xc8\n note_interrupt+0x340/0x468\n handle_irq_event+0xac/0xc0\n handle_fasteoi_irq+0x120/0x228\n gic_handle_irq+0x68/0x108\n ...\n kernel BUG at kernel/irq/spurious.c:184\n\nTo reproduce, write a bogus value exceeding the event buffer length\ndirectly to the GEVNTCOUNT register:\n\n devmem <DWC3_BASE + 0xc40c> 4 0x1004\n\nWrite the bogus count back to GEVNTCOUNT to clear the IRQ source,\nconsistent with the stale event clearing pattern in\ndwc3_event_buffers_setup(), and schedule error recovery to\nreinitialize the controller."}], "id": "CVE-2026-98767", "lastModified": "2026-10-30T13:21:26.350", "metrics": {}, "published": "2026-10-18T16:17:30.550", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1ff77cbefe5a653ea12874c213ea4bd0d72c1067"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2c41e442ff6304532bf369aa618b23c8a474feb4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6cd82563bb270e03fe2f91324660ea14e3ce5d1a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/86b9c867fb061a147df05ff0d9bb69dd3d79f49a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/96918ca25ff467c25675478fc79393df4ae9d74c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ba927133b301894e7d24099afbb701887c8cd2f1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f51cadb02b439850ab411df0a2cf4288a66d42e2"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: usb: dwc3: gadget: fix IRQ storm on invalid event buffer count", "id": "2555069", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2555069"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.1", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-390", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nusb: dwc3: gadget: fix IRQ storm on invalid event buffer count\nWhen dwc3_check_event_buf() reads a GEVNTCOUNT value exceeding the\nevent buffer length, commit 63ccd26cd1f6 (\"usb: dwc3: gadget: check\nthat event count does not exceed event buffer length\") returns IRQ_NONE\nwithout writing back GEVNTCOUNT. Since the DWC3 interrupt is\nlevel-triggered, the uncleared IRQ source keeps the line asserted,\ncausing a tight IRQ storm that accumulates 99,900 unhandled interrupts\nand triggers spurious.c:184 BUG -> kernel panic.\nThe resulting call stack:\n__report_bad_irq+0xac/0xc8\nnote_interrupt+0x340/0x468\nhandle_irq_event+0xac/0xc0\nhandle_fasteoi_irq+0x120/0x228\ngic_handle_irq+0x68/0x108\n...\nkernel BUG at kernel/irq/spurious.c:184\nTo reproduce, write a bogus value exceeding the event buffer length\ndirectly to the GEVNTCOUNT register:\ndevmem <DWC3_BASE + 0xc40c> 4 0x1004\nWrite the bogus count back to GEVNTCOUNT to clear the IRQ source,\nconsistent with the stale event clearing pattern in\ndwc3_event_buffers_setup(), and schedule error recovery to\nreinitialize the controller.", "A flaw was found in the Linux kernel's DWC3 USB gadget driver. When an invalid event buffer count exceeding the buffer size is encountered, the driver fails to acknowledge and clear the hardware interrupt source before returning. This leaves the interrupt line continuously asserted, triggering an interrupt request (IRQ) storm of unhandled interrupts. This condition ultimately causes a kernel panic, resulting in a system Denial of Service (DoS)."], "name": "CVE-2026-98767", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98767\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98767\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98767.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[52a7c9d930b95aa8b1620edaba4818040c32631f,96918ca25ff467c25675478fc79393df4ae9d74c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[63ccd26cd1f6600421795f6ca3e625076be06c9f,ba927133b301894e7d24099afbb701887c8cd2f1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[63ccd26cd1f6600421795f6ca3e625076be06c9f,f51cadb02b439850ab411df0a2cf4288a66d42e2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[63ccd26cd1f6600421795f6ca3e625076be06c9f,1ff77cbefe5a653ea12874c213ea4bd0d72c1067)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[015c39f38e69a491d2abd5e98869a500a9459b3b,*]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b43225948b231b3f331194010f84512bee4d9f59,*]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c0079630f268843a25ed75226169cba40e0d8880,*]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[a44547015287a19001384fe94dbff84c92ce4ee1,*]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c4d80e41cb42008dceb35e5dbf52574d93beac0d,*]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[99d655119b870ee60e4dbf310aa9a1ed8d9ede3d,*]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.12.26,6.12.113)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.4.293,5.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.10.237,5.11)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.15.181,5.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[6.1.136,6.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[6.6.89,6.7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[6.14.5,6.15)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.15"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.15)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.113,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.56,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.10,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-18T20:00:12.041361+00:00", "updated": "2026-10-23T23:00:13.549264+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}