CVE-2026-98955

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98955", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.382Z", "datePublished": "2026-10-23T12:19:15.287Z", "dateUpdated": "2026-10-30T12:40:30.324Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:40:30.324Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nflow_dissector: avoid u16 truncation of skb->len when computing thoff\n\n__skb_flow_dissect() computes key_control->thoff using:\n\n key_control->thoff = min_t(u16, nhoff, skb ? skb->len : hlen);\n\nmin_t(u16, ...) casts both arguments to u16 before comparing them.\nWhenever skb->len (or hlen) modulo 65536 is smaller than nhoff, the\ntruncated length wins and thoff is set to a bogus small value, even\nwhen the dissection succeeded. For example, an IPv4/TCP frame with\nskb->len == 65540 and nhoff == 34 gets thoff == 4, so callers such as\nskb_probe_transport_header() point the transport header inside the\nEthernet header.\n\nSuch skbs are not exotic:\n- At the time of commit d0c081b49137 (\"flow_dissector: properly cap\n thoff field\"), AF_PACKET with PACKET_VNET_HDR could already build GSO\n skbs larger than 64KB (MTU checks are skipped for GSO, and\n alloc_skb_with_frags() accepted up to MAX_SKB_FRAGS (17) order-0\n pages on top of the linear part).\n- BIG TCP now makes skbs larger than 64KB common.\n- The following patch makes tun_get_user() dissect IFF_TAP frames\n before eth_type_trans() pulls the Ethernet header, so a GSO frame\n carrying a 65522..65535 byte L3 packet will be dissected with\n skb->len in [65536, 65549].\n\nCompare as u32 instead. If the resulting offset cannot be represented\nin the u16 key_control->thoff, cap it to U16_MAX and report the\ndissection as failed rather than silently returning a wrong transport\noffset. thoff is still set on failure, as some callers (such as\neth_get_headlen()) use it regardless of the return value."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/core/flow_dissector.c"], "versions": [{"version": "d0c081b49137cd3200f2023c0875723be66e7ce5", "lessThan": "3f6000fdf8a57b9786669869af8a3e050b541bf3", "status": "affected", "versionType": "git"}, {"version": "d0c081b49137cd3200f2023c0875723be66e7ce5", "lessThan": "2c2f82b696c5e877f60ea77b7784e906a5e63014", "status": "affected", "versionType": "git"}, {"version": "d0c081b49137cd3200f2023c0875723be66e7ce5", "lessThan": "d44e66f5dd99319a32e378b610af7fcf78da985a", "status": "affected", "versionType": "git"}, {"version": "d0c081b49137cd3200f2023c0875723be66e7ce5", "lessThan": "d9e08836d06c84abb18470c94b12b131eaccdc7d", "status": "affected", "versionType": "git"}, {"version": "d0c081b49137cd3200f2023c0875723be66e7ce5", "lessThan": "50d0cd575cab763f833d6ac6eb6550b23a0b3dae", "status": "affected", "versionType": "git"}, {"version": "d0c081b49137cd3200f2023c0875723be66e7ce5", "lessThan": "9993e6a0ac1b5b3101ffba702cacb9f42b9909d8", "status": "affected", "versionType": "git"}, {"version": "d0c081b49137cd3200f2023c0875723be66e7ce5", "lessThan": "52efce4755a4b8b82039caa773645ffc80b25362", "status": "affected", "versionType": "git"}, {"version": "d0c081b49137cd3200f2023c0875723be66e7ce5", "lessThan": "99bda1ecbd56905f8bd934b9cdccd3bd251192b1", "status": "affected", "versionType": "git"}, {"version": "d35cd5e279881ec36ff8cd82a2d9caebc0cce3fc", "status": "affected", "versionType": "git"}, {"version": "eecfa2eeefe3caef4c8d6b2284f6066c76ab26a1", "status": "affected", "versionType": "git"}, {"version": "80f327285cab6ab8e10c3ea03278add5dd99fb02", "status": "affected", "versionType": "git"}, {"version": "4.4.114", "lessThan": "4.5", "status": "affected", "versionType": "semver"}, {"version": "4.9.79", "lessThan": "4.10", "status": "affected", "versionType": "semver"}, {"version": "4.14.16", "lessThan": "4.15", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/core/flow_dissector.c"], "versions": [{"version": "4.15", "status": "affected"}, {"version": "0", "lessThan": "4.15", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.273", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.224", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.191", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.113", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.57", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.11", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "5.10.273"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "5.15.224"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "6.1.191"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "6.12.113"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "6.18.57"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "7.2.11"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "7.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.4.114"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.9.79"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14.16"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/3f6000fdf8a57b9786669869af8a3e050b541bf3"}, {"url": "https://git.kernel.org/stable/c/2c2f82b696c5e877f60ea77b7784e906a5e63014"}, {"url": "https://git.kernel.org/stable/c/d44e66f5dd99319a32e378b610af7fcf78da985a"}, {"url": "https://git.kernel.org/stable/c/d9e08836d06c84abb18470c94b12b131eaccdc7d"}, {"url": "https://git.kernel.org/stable/c/50d0cd575cab763f833d6ac6eb6550b23a0b3dae"}, {"url": "https://git.kernel.org/stable/c/9993e6a0ac1b5b3101ffba702cacb9f42b9909d8"}, {"url": "https://git.kernel.org/stable/c/52efce4755a4b8b82039caa773645ffc80b25362"}, {"url": "https://git.kernel.org/stable/c/99bda1ecbd56905f8bd934b9cdccd3bd251192b1"}], "title": "flow_dissector: avoid u16 truncation of skb->len when computing thoff", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["net/core/flow_dissector.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "3f6000fdf8a57b9786669869af8a3e050b541bf3", "status": "affected", "version": "d0c081b49137cd3200f2023c0875723be66e7ce5", "versionType": "git"}, {"lessThan": "2c2f82b696c5e877f60ea77b7784e906a5e63014", "status": "affected", "version": "d0c081b49137cd3200f2023c0875723be66e7ce5", "versionType": "git"}, {"lessThan": "d44e66f5dd99319a32e378b610af7fcf78da985a", "status": "affected", "version": "d0c081b49137cd3200f2023c0875723be66e7ce5", "versionType": "git"}, {"lessThan": "d9e08836d06c84abb18470c94b12b131eaccdc7d", "status": "affected", "version": "d0c081b49137cd3200f2023c0875723be66e7ce5", "versionType": "git"}, {"lessThan": "50d0cd575cab763f833d6ac6eb6550b23a0b3dae", "status": "affected", "version": "d0c081b49137cd3200f2023c0875723be66e7ce5", "versionType": "git"}, {"lessThan": "9993e6a0ac1b5b3101ffba702cacb9f42b9909d8", "status": "affected", "version": "d0c081b49137cd3200f2023c0875723be66e7ce5", "versionType": "git"}, {"lessThan": "52efce4755a4b8b82039caa773645ffc80b25362", "status": "affected", "version": "d0c081b49137cd3200f2023c0875723be66e7ce5", "versionType": "git"}, {"lessThan": "99bda1ecbd56905f8bd934b9cdccd3bd251192b1", "status": "affected", "version": "d0c081b49137cd3200f2023c0875723be66e7ce5", "versionType": "git"}, {"status": "affected", "version": "d35cd5e279881ec36ff8cd82a2d9caebc0cce3fc", "versionType": "git"}, {"status": "affected", "version": "eecfa2eeefe3caef4c8d6b2284f6066c76ab26a1", "versionType": "git"}, {"status": "affected", "version": "80f327285cab6ab8e10c3ea03278add5dd99fb02", "versionType": "git"}, {"lessThan": "4.5", "status": "affected", "version": "4.4.114", "versionType": "semver"}, {"lessThan": "4.10", "status": "affected", "version": "4.9.79", "versionType": "semver"}, {"lessThan": "4.15", "status": "affected", "version": "4.14.16", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["net/core/flow_dissector.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.15"}, {"lessThan": "4.15", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.273", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.224", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.191", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.113", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.57", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.11", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nflow_dissector: avoid u16 truncation of skb->len when computing thoff\n\n__skb_flow_dissect() computes key_control->thoff using:\n\n key_control->thoff = min_t(u16, nhoff, skb ? skb->len : hlen);\n\nmin_t(u16, ...) casts both arguments to u16 before comparing them.\nWhenever skb->len (or hlen) modulo 65536 is smaller than nhoff, the\ntruncated length wins and thoff is set to a bogus small value, even\nwhen the dissection succeeded. For example, an IPv4/TCP frame with\nskb->len == 65540 and nhoff == 34 gets thoff == 4, so callers such as\nskb_probe_transport_header() point the transport header inside the\nEthernet header.\n\nSuch skbs are not exotic:\n- At the time of commit d0c081b49137 (\"flow_dissector: properly cap\n thoff field\"), AF_PACKET with PACKET_VNET_HDR could already build GSO\n skbs larger than 64KB (MTU checks are skipped for GSO, and\n alloc_skb_with_frags() accepted up to MAX_SKB_FRAGS (17) order-0\n pages on top of the linear part).\n- BIG TCP now makes skbs larger than 64KB common.\n- The following patch makes tun_get_user() dissect IFF_TAP frames\n before eth_type_trans() pulls the Ethernet header, so a GSO frame\n carrying a 65522..65535 byte L3 packet will be dissected with\n skb->len in [65536, 65549].\n\nCompare as u32 instead. If the resulting offset cannot be represented\nin the u16 key_control->thoff, cap it to U16_MAX and report the\ndissection as failed rather than silently returning a wrong transport\noffset. thoff is still set on failure, as some callers (such as\neth_get_headlen()) use it regardless of the return value."}], "id": "CVE-2026-98955", "lastModified": "2026-10-30T13:21:32.687", "metrics": {}, "published": "2026-10-23T13:17:16.740", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2c2f82b696c5e877f60ea77b7784e906a5e63014"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3f6000fdf8a57b9786669869af8a3e050b541bf3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/50d0cd575cab763f833d6ac6eb6550b23a0b3dae"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/52efce4755a4b8b82039caa773645ffc80b25362"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9993e6a0ac1b5b3101ffba702cacb9f42b9909d8"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/99bda1ecbd56905f8bd934b9cdccd3bd251192b1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d44e66f5dd99319a32e378b610af7fcf78da985a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d9e08836d06c84abb18470c94b12b131eaccdc7d"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: flow_dissector: avoid u16 truncation of skb->len when computing thoff", "id": "2559648", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2559648"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.9", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-681", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nflow_dissector: avoid u16 truncation of skb->len when computing thoff\n__skb_flow_dissect() computes key_control->thoff using:\nkey_control->thoff = min_t(u16, nhoff, skb ? skb->len : hlen);\nmin_t(u16, ...) casts both arguments to u16 before comparing them.\nWhenever skb->len (or hlen) modulo 65536 is smaller than nhoff, the\ntruncated length wins and thoff is set to a bogus small value, even\nwhen the dissection succeeded. For example, an IPv4/TCP frame with\nskb->len == 65540 and nhoff == 34 gets thoff == 4, so callers such as\nskb_probe_transport_header() point the transport header inside the\nEthernet header.\nSuch skbs are not exotic:\n- At the time of commit d0c081b49137 (\"flow_dissector: properly cap\nthoff field\"), AF_PACKET with PACKET_VNET_HDR could already build GSO\nskbs larger than 64KB (MTU checks are skipped for GSO, and\nalloc_skb_with_frags() accepted up to MAX_SKB_FRAGS (17) order-0\npages on top of the linear part).\n- BIG TCP now makes skbs larger than 64KB common.\n- The following patch makes tun_get_user() dissect IFF_TAP frames\nbefore eth_type_trans() pulls the Ethernet header, so a GSO frame\ncarrying a 65522..65535 byte L3 packet will be dissected with\nskb->len in [65536, 65549].\nCompare as u32 instead. If the resulting offset cannot be represented\nin the u16 key_control->thoff, cap it to U16_MAX and report the\ndissection as failed rather than silently returning a wrong transport\noffset. thoff is still set on failure, as some callers (such as\neth_get_headlen()) use it regardless of the return value.", "A flaw was found in the Linux kernel. An integer truncation issue in the network flow dissector component occurs when calculating transport header offsets for network packets exceeding 64 kilobytes. An attacker could exploit this flaw by transmitting specially sized network frames, causing the kernel to compute an incorrect transport header offset. This miscalculation can disrupt packet processing, potentially leading to a Denial of Service (DoS) or system instability."], "name": "CVE-2026-98955", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-23T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98955\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98955\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98955.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d0c081b49137cd3200f2023c0875723be66e7ce5,d9e08836d06c84abb18470c94b12b131eaccdc7d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d0c081b49137cd3200f2023c0875723be66e7ce5,50d0cd575cab763f833d6ac6eb6550b23a0b3dae)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d0c081b49137cd3200f2023c0875723be66e7ce5,9993e6a0ac1b5b3101ffba702cacb9f42b9909d8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d0c081b49137cd3200f2023c0875723be66e7ce5,52efce4755a4b8b82039caa773645ffc80b25362)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d0c081b49137cd3200f2023c0875723be66e7ce5,99bda1ecbd56905f8bd934b9cdccd3bd251192b1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "d35cd5e279881ec36ff8cd82a2d9caebc0cce3fc"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "eecfa2eeefe3caef4c8d6b2284f6066c76ab26a1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "80f327285cab6ab8e10c3ea03278add5dd99fb02"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.4.114,4.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.9.79,4.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.14.16,4.15)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.15"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.15)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.160,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.113,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.57,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.11,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d0c081b49137cd3200f2023c0875723be66e7ce5,d9e08836d06c84abb18470c94b12b131eaccdc7d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d0c081b49137cd3200f2023c0875723be66e7ce5,50d0cd575cab763f833d6ac6eb6550b23a0b3dae)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d0c081b49137cd3200f2023c0875723be66e7ce5,9993e6a0ac1b5b3101ffba702cacb9f42b9909d8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d0c081b49137cd3200f2023c0875723be66e7ce5,52efce4755a4b8b82039caa773645ffc80b25362)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d0c081b49137cd3200f2023c0875723be66e7ce5,99bda1ecbd56905f8bd934b9cdccd3bd251192b1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "d35cd5e279881ec36ff8cd82a2d9caebc0cce3fc"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "eecfa2eeefe3caef4c8d6b2284f6066c76ab26a1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "80f327285cab6ab8e10c3ea03278add5dd99fb02"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.4.114,4.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.9.79,4.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.14.16,4.15)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.15"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.15)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.160,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.113,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.57,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.11,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-23T17:15:07.226687+00:00", "updated": "2026-10-29T22:00:09.211350+00:00", "vendors": ["linux", "linux$PRODUCT$linux", "linux$PRODUCT$linux_kernel"]}