CVE-2026-99088

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-99088", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.390Z", "datePublished": "2026-10-26T14:51:58.460Z", "dateUpdated": "2026-10-30T12:41:39.655Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:41:39.655Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: openvswitch: validate transport header presence in set_ipv6_addr\n\nWhen executing IPv6 address rewrite actions on IPv6 fragments,\nset_ipv6_addr() calls update_ipv6_checksum(). If parse_ipv6hdr()\nprocesses a non-first IPv6 fragment, it sets key->ip.proto to\nNEXTHDR_FRAGMENT and returns early without calling\nskb_set_transport_header().\n\nupdate_ipv6_checksum() unconditionally evaluates skb_transport_offset()\non entry before checking l4_proto. Because skb->transport_header is\nuninitialized, this triggers a warning under CONFIG_DEBUG_NET=y although\nit is completely harmless.\n\nFix this by returning early in update_ipv6_checksum() if l4_proto is\nNEXTHDR_FRAGMENT. This avoids reading the uninitialized transport offset\nfor fragments while preserving the debug warning for any other protocol\nwhere the transport header is unexpectedly missing.\n\nSee the syzbot trace:\n\n!skb_transport_header_was_set(skb)\nWARNING: ./include/linux/skbuff.h:3075 at skb_transport_header include/linux/skbuff.h:3075 [inline], CPU#1: syz-executor463/5635\nWARNING: ./include/linux/skbuff.h:3075 at skb_transport_offset include/linux/skbuff.h:3250 [inline], CPU#1: syz-executor463/5635\nWARNING: ./include/linux/skbuff.h:3075 at update_ipv6_checksum net/openvswitch/actions.c:361 [inline], CPU#1: syz-executor463/5635\nWARNING: ./include/linux/skbuff.h:3075 at set_ipv6_addr+0x462/0x660 net/openvswitch/actions.c:399, CPU#1: syz-executor463/5635\n[...]\nRIP: 0010:skb_transport_header include/linux/skbuff.h:3075 [inline]\nRIP: 0010:skb_transport_offset include/linux/skbuff.h:3250 [inline]\nRIP: 0010:update_ipv6_checksum net/openvswitch/actions.c:361 [inline]\nRIP: 0010:set_ipv6_addr+0x462/0x660 net/openvswitch/actions.c:399\n[...]\nCall Trace:\n <TASK>\n set_ipv6 net/openvswitch/actions.c:531 [inline]\n do_execute_actions+0x557e/0x8600 net/openvswitch/actions.c:1366\n ovs_execute_actions+0xde/0x520 net/openvswitch/actions.c:1592\n ovs_packet_cmd_execute+0xb4f/0xf10 net/openvswitch/datapath.c:705\n genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114\n genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209\n netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2572\n genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218\n netlink_unicast+0x7bd/0x940 net/netlink/af_netlink.c:1361\n netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1916\n sock_sendmsg_nosec+0x14e/0x190 net/socket.c:800"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/openvswitch/actions.c"], "versions": [{"version": "3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b", "lessThan": "1efa6842e94aa70237446b31fbe2bc16586809c3", "status": "affected", "versionType": "git"}, {"version": "3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b", "lessThan": "ad4258db21e801a7aae614afca89a2e39283080d", "status": "affected", "versionType": "git"}, {"version": "3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b", "lessThan": "54cb98ed23866205926298621e04169f50665b59", "status": "affected", "versionType": "git"}, {"version": "3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b", "lessThan": "b7b80d204abdc258006f9e17c92b363ab13bb599", "status": "affected", "versionType": "git"}, {"version": "3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b", "lessThan": "6774af7cd17be8f0d0f70de3a749d381b4f2e9da", "status": "affected", "versionType": "git"}, {"version": "3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b", "lessThan": "2594795fd832f0253826d64ff8976b8ff5fbfe9f", "status": "affected", "versionType": "git"}, {"version": "3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b", "lessThan": "6b8897ba0733f88f0360ea48a970f373f9142de0", "status": "affected", "versionType": "git"}, {"version": "3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b", "lessThan": "3c6a4b11330fe424557538a98fca9f0a4c5bf313", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/openvswitch/actions.c"], "versions": [{"version": "3.8", "status": "affected"}, {"version": "0", "lessThan": "3.8", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.273", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.224", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.191", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.113", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.57", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.11", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8", "versionEndExcluding": "5.10.273"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8", "versionEndExcluding": "5.15.224"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8", "versionEndExcluding": "6.1.191"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8", "versionEndExcluding": "6.12.113"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8", "versionEndExcluding": "6.18.57"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8", "versionEndExcluding": "7.2.11"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/1efa6842e94aa70237446b31fbe2bc16586809c3"}, {"url": "https://git.kernel.org/stable/c/ad4258db21e801a7aae614afca89a2e39283080d"}, {"url": "https://git.kernel.org/stable/c/54cb98ed23866205926298621e04169f50665b59"}, {"url": "https://git.kernel.org/stable/c/b7b80d204abdc258006f9e17c92b363ab13bb599"}, {"url": "https://git.kernel.org/stable/c/6774af7cd17be8f0d0f70de3a749d381b4f2e9da"}, {"url": "https://git.kernel.org/stable/c/2594795fd832f0253826d64ff8976b8ff5fbfe9f"}, {"url": "https://git.kernel.org/stable/c/6b8897ba0733f88f0360ea48a970f373f9142de0"}, {"url": "https://git.kernel.org/stable/c/3c6a4b11330fe424557538a98fca9f0a4c5bf313"}], "title": "net: openvswitch: validate transport header presence in set_ipv6_addr", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["net/openvswitch/actions.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "1efa6842e94aa70237446b31fbe2bc16586809c3", "status": "affected", "version": "3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b", "versionType": "git"}, {"lessThan": "ad4258db21e801a7aae614afca89a2e39283080d", "status": "affected", "version": "3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b", "versionType": "git"}, {"lessThan": "54cb98ed23866205926298621e04169f50665b59", "status": "affected", "version": "3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b", "versionType": "git"}, {"lessThan": "b7b80d204abdc258006f9e17c92b363ab13bb599", "status": "affected", "version": "3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b", "versionType": "git"}, {"lessThan": "6774af7cd17be8f0d0f70de3a749d381b4f2e9da", "status": "affected", "version": "3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b", "versionType": "git"}, {"lessThan": "2594795fd832f0253826d64ff8976b8ff5fbfe9f", "status": "affected", "version": "3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b", "versionType": "git"}, {"lessThan": "6b8897ba0733f88f0360ea48a970f373f9142de0", "status": "affected", "version": "3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b", "versionType": "git"}, {"lessThan": "3c6a4b11330fe424557538a98fca9f0a4c5bf313", "status": "affected", "version": "3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["net/openvswitch/actions.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "3.8"}, {"lessThan": "3.8", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.273", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.224", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.191", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.113", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.57", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.11", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: openvswitch: validate transport header presence in set_ipv6_addr\n\nWhen executing IPv6 address rewrite actions on IPv6 fragments,\nset_ipv6_addr() calls update_ipv6_checksum(). If parse_ipv6hdr()\nprocesses a non-first IPv6 fragment, it sets key->ip.proto to\nNEXTHDR_FRAGMENT and returns early without calling\nskb_set_transport_header().\n\nupdate_ipv6_checksum() unconditionally evaluates skb_transport_offset()\non entry before checking l4_proto. Because skb->transport_header is\nuninitialized, this triggers a warning under CONFIG_DEBUG_NET=y although\nit is completely harmless.\n\nFix this by returning early in update_ipv6_checksum() if l4_proto is\nNEXTHDR_FRAGMENT. This avoids reading the uninitialized transport offset\nfor fragments while preserving the debug warning for any other protocol\nwhere the transport header is unexpectedly missing.\n\nSee the syzbot trace:\n\n!skb_transport_header_was_set(skb)\nWARNING: ./include/linux/skbuff.h:3075 at skb_transport_header include/linux/skbuff.h:3075 [inline], CPU#1: syz-executor463/5635\nWARNING: ./include/linux/skbuff.h:3075 at skb_transport_offset include/linux/skbuff.h:3250 [inline], CPU#1: syz-executor463/5635\nWARNING: ./include/linux/skbuff.h:3075 at update_ipv6_checksum net/openvswitch/actions.c:361 [inline], CPU#1: syz-executor463/5635\nWARNING: ./include/linux/skbuff.h:3075 at set_ipv6_addr+0x462/0x660 net/openvswitch/actions.c:399, CPU#1: syz-executor463/5635\n[...]\nRIP: 0010:skb_transport_header include/linux/skbuff.h:3075 [inline]\nRIP: 0010:skb_transport_offset include/linux/skbuff.h:3250 [inline]\nRIP: 0010:update_ipv6_checksum net/openvswitch/actions.c:361 [inline]\nRIP: 0010:set_ipv6_addr+0x462/0x660 net/openvswitch/actions.c:399\n[...]\nCall Trace:\n <TASK>\n set_ipv6 net/openvswitch/actions.c:531 [inline]\n do_execute_actions+0x557e/0x8600 net/openvswitch/actions.c:1366\n ovs_execute_actions+0xde/0x520 net/openvswitch/actions.c:1592\n ovs_packet_cmd_execute+0xb4f/0xf10 net/openvswitch/datapath.c:705\n genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114\n genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209\n netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2572\n genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218\n netlink_unicast+0x7bd/0x940 net/netlink/af_netlink.c:1361\n netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1916\n sock_sendmsg_nosec+0x14e/0x190 net/socket.c:800"}], "id": "CVE-2026-99088", "lastModified": "2026-10-30T13:21:44.530", "metrics": {}, "published": "2026-10-26T15:16:47.517", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1efa6842e94aa70237446b31fbe2bc16586809c3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2594795fd832f0253826d64ff8976b8ff5fbfe9f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3c6a4b11330fe424557538a98fca9f0a4c5bf313"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/54cb98ed23866205926298621e04169f50665b59"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6774af7cd17be8f0d0f70de3a749d381b4f2e9da"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6b8897ba0733f88f0360ea48a970f373f9142de0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ad4258db21e801a7aae614afca89a2e39283080d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b7b80d204abdc258006f9e17c92b363ab13bb599"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: net: openvswitch: validate transport header presence in set_ipv6_addr", "id": "2560834", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2560834"}, "csaw": false, "cvss3": {"cvss3_base_score": "3.7", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-908", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnet: openvswitch: validate transport header presence in set_ipv6_addr\nWhen executing IPv6 address rewrite actions on IPv6 fragments,\nset_ipv6_addr() calls update_ipv6_checksum(). If parse_ipv6hdr()\nprocesses a non-first IPv6 fragment, it sets key->ip.proto to\nNEXTHDR_FRAGMENT and returns early without calling\nskb_set_transport_header().\nupdate_ipv6_checksum() unconditionally evaluates skb_transport_offset()\non entry before checking l4_proto. Because skb->transport_header is\nuninitialized, this triggers a warning under CONFIG_DEBUG_NET=y although\nit is completely harmless.\nFix this by returning early in update_ipv6_checksum() if l4_proto is\nNEXTHDR_FRAGMENT. This avoids reading the uninitialized transport offset\nfor fragments while preserving the debug warning for any other protocol\nwhere the transport header is unexpectedly missing.\nSee the syzbot trace:\n!skb_transport_header_was_set(skb)\nWARNING: ./include/linux/skbuff.h:3075 at skb_transport_header include/linux/skbuff.h:3075 [inline], CPU#1: syz-executor463/5635\nWARNING: ./include/linux/skbuff.h:3075 at skb_transport_offset include/linux/skbuff.h:3250 [inline], CPU#1: syz-executor463/5635\nWARNING: ./include/linux/skbuff.h:3075 at update_ipv6_checksum net/openvswitch/actions.c:361 [inline], CPU#1: syz-executor463/5635\nWARNING: ./include/linux/skbuff.h:3075 at set_ipv6_addr+0x462/0x660 net/openvswitch/actions.c:399, CPU#1: syz-executor463/5635\n[...]\nRIP: 0010:skb_transport_header include/linux/skbuff.h:3075 [inline]\nRIP: 0010:skb_transport_offset include/linux/skbuff.h:3250 [inline]\nRIP: 0010:update_ipv6_checksum net/openvswitch/actions.c:361 [inline]\nRIP: 0010:set_ipv6_addr+0x462/0x660 net/openvswitch/actions.c:399\n[...]\nCall Trace:\n<TASK>\nset_ipv6 net/openvswitch/actions.c:531 [inline]\ndo_execute_actions+0x557e/0x8600 net/openvswitch/actions.c:1366\novs_execute_actions+0xde/0x520 net/openvswitch/actions.c:1592\novs_packet_cmd_execute+0xb4f/0xf10 net/openvswitch/datapath.c:705\ngenl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114\ngenl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209\nnetlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2572\ngenl_rcv+0x28/0x40 net/netlink/genetlink.c:1218\nnetlink_unicast+0x7bd/0x940 net/netlink/af_netlink.c:1361\nnetlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1916\nsock_sendmsg_nosec+0x14e/0x190 net/socket.c:800", "A flaw was found in the Linux kernel's Open vSwitch component. When performing address rewriting actions on non-first IPv6 packet fragments, the system attempts to calculate checksums using an uninitialized transport header offset. An attacker sending specially crafted IPv6 network traffic could trigger this flaw, potentially causing kernel warnings or leading to a denial of service (DoS) if the system is configured to halt on warnings."], "name": "CVE-2026-99088", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-26T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-99088\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-99088\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-99088.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b,b7b80d204abdc258006f9e17c92b363ab13bb599)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b,6774af7cd17be8f0d0f70de3a749d381b4f2e9da)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b,2594795fd832f0253826d64ff8976b8ff5fbfe9f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b,6b8897ba0733f88f0360ea48a970f373f9142de0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b,3c6a4b11330fe424557538a98fca9f0a4c5bf313)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.8"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,3.8)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.160,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.113,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.57,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.11,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b,b7b80d204abdc258006f9e17c92b363ab13bb599)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b,6774af7cd17be8f0d0f70de3a749d381b4f2e9da)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b,2594795fd832f0253826d64ff8976b8ff5fbfe9f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b,6b8897ba0733f88f0360ea48a970f373f9142de0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b,3c6a4b11330fe424557538a98fca9f0a4c5bf313)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.8"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,3.8)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.160,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.113,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.57,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.11,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-26T16:45:14.918229+00:00", "updated": "2026-10-29T15:00:22.025310+00:00", "vendors": ["linux", "linux$PRODUCT$linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-457", "CWE-908"]}