CVE-2026-99140

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-99140", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.395Z", "datePublished": "2026-10-28T10:34:51.421Z", "dateUpdated": "2026-10-30T12:42:12.896Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:42:12.896Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Fix hist trigger timestamps for buffered events\n\nSyzkaller triggered a WARN_ON_ONCE(!nest) warning:\n\n WARNING: kernel/trace/ring_buffer.c:821 at ring_buffer_event_time_stamp\n Call trace:\n ring_buffer_event_time_stamp\n hist_field_timestamp\n hist_fn_call\n event_hist_trigger\n event_triggers_call\n __event_trigger_test_discard\n trace_event_buffer_commit\n do_trace_event_raw_event_sched_switch\n trace_event_raw_event_sched_switch\n\nThe warning is probabilistically reproducible and is related to syzkaller\nexecuting the following commands:\n\n echo 'prev_pid == 999999' > events/sched/sched_switch/filter\n echo 'hist:keys=common_timestamp' > events/sched/sched_switch/trigger\n\nThe specific triggering process is as follows:\n\nCPU 0 CPU 1\n(context switching) (echo 'hist:keys=common_timestamp' > \\\n events/sched/sched_switch/trigger)\ndo_trace_event_raw_event_##call\n trace_event_buffer_lock_reserve\n if (!tr->no_filter_buffering_ref &&\n trace_file->flags & EVENT_FILE_FL_FILTERED)\n return entry; // return directly\n event_hist_trigger_parse\n hist_register_trigger\n tracing_set_filter_buffering(file->tr, true);\n tr->no_filter_buffering_ref++;\n __trace_buffer_lock_reserve\n rb_start_commit\n local_inc(&cpu_buffer->committing); // skipped and not executed\n trace_event_buffer_commit\n __event_trigger_test_discard\n event_triggers_call\n event_hist_trigger\n hist_fn_call\n hist_field_timestamp\n ring_buffer_event_time_stamp\n nest = local_read(&cpu_buffer->committing);\n WARN_ON_ONCE(!nest) // trigger warning\n\nThe root cause is that when an event file has a filter attached and the\nhist trigger has not yet been attached, trace_event_buffer_lock_reserve()\nwrites the event into the per-CPU trace_buffered_event temp buffer instead\nof reserving it in the ring buffer, so cpu_buffer->committing is not\nincremented. When the event is later processed at commit time by a hist\ntrigger, hist_field_timestamp() -> ring_buffer_event_time_stamp() sees a\nzero committing count, triggering WARN_ON_ONCE(!nest).\n\ntracing_event_time_stamp() was added by commit d8279bfc5e959 (\"tracing:\nAdd tracing_event_time_stamp() API\") for exactly this case: if the event\nis the per-CPU trace_buffered_event, it returns the current ring buffer\ntimestamp. But it never gained a caller. Use it in hist_field_timestamp(),\nso that a hist trigger that races onto a buffered event records the\ncurrent time, which is only marginally later than when the event was\nrecorded, instead of warning and recording a bogus timestamp."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["kernel/trace/trace_events_hist.c"], "versions": [{"version": "b94bc80df64823e676b506f8de7dcf6a688d681e", "lessThan": "b3a94a79047d3fc9385b3709cb2b86f4a26ed0c3", "status": "affected", "versionType": "git"}, {"version": "b94bc80df64823e676b506f8de7dcf6a688d681e", "lessThan": "71c5c7420478d94d6eb0b427f66fa41bbda651e3", "status": "affected", "versionType": "git"}, {"version": "b94bc80df64823e676b506f8de7dcf6a688d681e", "lessThan": "ab320f6aa3769480f735ed0ad026c4a61799b7bc", "status": "affected", "versionType": "git"}, {"version": "b94bc80df64823e676b506f8de7dcf6a688d681e", "lessThan": "af192a356e9830a0df231b590ad6fb1fc28c9315", "status": "affected", "versionType": "git"}, {"version": "b94bc80df64823e676b506f8de7dcf6a688d681e", "lessThan": "09c7cce2e59e6b3b1807520bcb1980c561f15d1e", "status": "affected", "versionType": "git"}, {"version": "b94bc80df64823e676b506f8de7dcf6a688d681e", "lessThan": "89e90b16aadd6e66bd0323bc8dfc76a62e756b57", "status": "affected", "versionType": "git"}, {"version": "b94bc80df64823e676b506f8de7dcf6a688d681e", "lessThan": "9414ca3b99e5a7f1f3bf51c2a01b383e1b355dd0", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["kernel/trace/trace_events_hist.c"], "versions": [{"version": "5.13", "status": "affected"}, {"version": "0", "lessThan": "5.13", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.224", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.191", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.161", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.115", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.59", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.13", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.13", "versionEndExcluding": "5.15.224"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.13", "versionEndExcluding": "6.1.191"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.13", "versionEndExcluding": "6.6.161"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.13", "versionEndExcluding": "6.12.115"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.13", "versionEndExcluding": "6.18.59"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.13", "versionEndExcluding": "7.2.13"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.13", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/b3a94a79047d3fc9385b3709cb2b86f4a26ed0c3"}, {"url": "https://git.kernel.org/stable/c/71c5c7420478d94d6eb0b427f66fa41bbda651e3"}, {"url": "https://git.kernel.org/stable/c/ab320f6aa3769480f735ed0ad026c4a61799b7bc"}, {"url": "https://git.kernel.org/stable/c/af192a356e9830a0df231b590ad6fb1fc28c9315"}, {"url": "https://git.kernel.org/stable/c/09c7cce2e59e6b3b1807520bcb1980c561f15d1e"}, {"url": "https://git.kernel.org/stable/c/89e90b16aadd6e66bd0323bc8dfc76a62e756b57"}, {"url": "https://git.kernel.org/stable/c/9414ca3b99e5a7f1f3bf51c2a01b383e1b355dd0"}], "title": "tracing: Fix hist trigger timestamps for buffered events", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["kernel/trace/trace_events_hist.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "b3a94a79047d3fc9385b3709cb2b86f4a26ed0c3", "status": "affected", "version": "b94bc80df64823e676b506f8de7dcf6a688d681e", "versionType": "git"}, {"lessThan": "71c5c7420478d94d6eb0b427f66fa41bbda651e3", "status": "affected", "version": "b94bc80df64823e676b506f8de7dcf6a688d681e", "versionType": "git"}, {"lessThan": "ab320f6aa3769480f735ed0ad026c4a61799b7bc", "status": "affected", "version": "b94bc80df64823e676b506f8de7dcf6a688d681e", "versionType": "git"}, {"lessThan": "af192a356e9830a0df231b590ad6fb1fc28c9315", "status": "affected", "version": "b94bc80df64823e676b506f8de7dcf6a688d681e", "versionType": "git"}, {"lessThan": "09c7cce2e59e6b3b1807520bcb1980c561f15d1e", "status": "affected", "version": "b94bc80df64823e676b506f8de7dcf6a688d681e", "versionType": "git"}, {"lessThan": "89e90b16aadd6e66bd0323bc8dfc76a62e756b57", "status": "affected", "version": "b94bc80df64823e676b506f8de7dcf6a688d681e", "versionType": "git"}, {"lessThan": "9414ca3b99e5a7f1f3bf51c2a01b383e1b355dd0", "status": "affected", "version": "b94bc80df64823e676b506f8de7dcf6a688d681e", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["kernel/trace/trace_events_hist.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.13"}, {"lessThan": "5.13", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.224", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.191", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.161", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.115", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.59", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.13", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Fix hist trigger timestamps for buffered events\n\nSyzkaller triggered a WARN_ON_ONCE(!nest) warning:\n\n WARNING: kernel/trace/ring_buffer.c:821 at ring_buffer_event_time_stamp\n Call trace:\n ring_buffer_event_time_stamp\n hist_field_timestamp\n hist_fn_call\n event_hist_trigger\n event_triggers_call\n __event_trigger_test_discard\n trace_event_buffer_commit\n do_trace_event_raw_event_sched_switch\n trace_event_raw_event_sched_switch\n\nThe warning is probabilistically reproducible and is related to syzkaller\nexecuting the following commands:\n\n echo 'prev_pid == 999999' > events/sched/sched_switch/filter\n echo 'hist:keys=common_timestamp' > events/sched/sched_switch/trigger\n\nThe specific triggering process is as follows:\n\nCPU 0 CPU 1\n(context switching) (echo 'hist:keys=common_timestamp' > \\\n events/sched/sched_switch/trigger)\ndo_trace_event_raw_event_##call\n trace_event_buffer_lock_reserve\n if (!tr->no_filter_buffering_ref &&\n trace_file->flags & EVENT_FILE_FL_FILTERED)\n return entry; // return directly\n event_hist_trigger_parse\n hist_register_trigger\n tracing_set_filter_buffering(file->tr, true);\n tr->no_filter_buffering_ref++;\n __trace_buffer_lock_reserve\n rb_start_commit\n local_inc(&cpu_buffer->committing); // skipped and not executed\n trace_event_buffer_commit\n __event_trigger_test_discard\n event_triggers_call\n event_hist_trigger\n hist_fn_call\n hist_field_timestamp\n ring_buffer_event_time_stamp\n nest = local_read(&cpu_buffer->committing);\n WARN_ON_ONCE(!nest) // trigger warning\n\nThe root cause is that when an event file has a filter attached and the\nhist trigger has not yet been attached, trace_event_buffer_lock_reserve()\nwrites the event into the per-CPU trace_buffered_event temp buffer instead\nof reserving it in the ring buffer, so cpu_buffer->committing is not\nincremented. When the event is later processed at commit time by a hist\ntrigger, hist_field_timestamp() -> ring_buffer_event_time_stamp() sees a\nzero committing count, triggering WARN_ON_ONCE(!nest).\n\ntracing_event_time_stamp() was added by commit d8279bfc5e959 (\"tracing:\nAdd tracing_event_time_stamp() API\") for exactly this case: if the event\nis the per-CPU trace_buffered_event, it returns the current ring buffer\ntimestamp. But it never gained a caller. Use it in hist_field_timestamp(),\nso that a hist trigger that races onto a buffered event records the\ncurrent time, which is only marginally later than when the event was\nrecorded, instead of warning and recording a bogus timestamp."}], "id": "CVE-2026-99140", "lastModified": "2026-10-30T13:21:48.270", "metrics": {}, "published": "2026-10-28T11:17:33.960", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/09c7cce2e59e6b3b1807520bcb1980c561f15d1e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/71c5c7420478d94d6eb0b427f66fa41bbda651e3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/89e90b16aadd6e66bd0323bc8dfc76a62e756b57"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9414ca3b99e5a7f1f3bf51c2a01b383e1b355dd0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ab320f6aa3769480f735ed0ad026c4a61799b7bc"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/af192a356e9830a0df231b590ad6fb1fc28c9315"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b3a94a79047d3fc9385b3709cb2b86f4a26ed0c3"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: kernel: Denial of Service via race condition in tracing subsystem", "id": "2562656", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562656"}, "csaw": false, "cvss3": {"cvss3_base_score": "1.9", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-366", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ntracing: Fix hist trigger timestamps for buffered events\nSyzkaller triggered a WARN_ON_ONCE(!nest) warning:\nWARNING: kernel/trace/ring_buffer.c:821 at ring_buffer_event_time_stamp\nCall trace:\nring_buffer_event_time_stamp\nhist_field_timestamp\nhist_fn_call\nevent_hist_trigger\nevent_triggers_call\n__event_trigger_test_discard\ntrace_event_buffer_commit\ndo_trace_event_raw_event_sched_switch\ntrace_event_raw_event_sched_switch\nThe warning is probabilistically reproducible and is related to syzkaller\nexecuting the following commands:\necho 'prev_pid == 999999' > events/sched/sched_switch/filter\necho 'hist:keys=common_timestamp' > events/sched/sched_switch/trigger\nThe specific triggering process is as follows:\nCPU 0 CPU 1\n(context switching) (echo 'hist:keys=common_timestamp' > \\\nevents/sched/sched_switch/trigger)\ndo_trace_event_raw_event_##call\ntrace_event_buffer_lock_reserve\nif (!tr->no_filter_buffering_ref &&\ntrace_file->flags & EVENT_FILE_FL_FILTERED)\nreturn entry; // return directly\nevent_hist_trigger_parse\nhist_register_trigger\ntracing_set_filter_buffering(file->tr, true);\ntr->no_filter_buffering_ref++;\n__trace_buffer_lock_reserve\nrb_start_commit\nlocal_inc(&cpu_buffer->committing); // skipped and not executed\ntrace_event_buffer_commit\n__event_trigger_test_discard\nevent_triggers_call\nevent_hist_trigger\nhist_fn_call\nhist_field_timestamp\nring_buffer_event_time_stamp\nnest = local_read(&cpu_buffer->committing);\nWARN_ON_ONCE(!nest) // trigger warning\nThe root cause is that when an event file has a filter attached and the\nhist trigger has not yet been attached, trace_event_buffer_lock_reserve()\nwrites the event into the per-CPU trace_buffered_event temp buffer instead\nof reserving it in the ring buffer, so cpu_buffer->committing is not\nincremented. When the event is later processed at commit time by a hist\ntrigger, hist_field_timestamp() -> ring_buffer_event_time_stamp() sees a\nzero committing count, triggering WARN_ON_ONCE(!nest).\ntracing_event_time_stamp() was added by commit d8279bfc5e959 (\"tracing:\nAdd tracing_event_time_stamp() API\") for exactly this case: if the event\nis the per-CPU trace_buffered_event, it returns the current ring buffer\ntimestamp. But it never gained a caller. Use it in hist_field_timestamp(),\nso that a hist trigger that races onto a buffered event records the\ncurrent time, which is only marginally later than when the event was\nrecorded, instead of warning and recording a bogus timestamp.", "A flaw was found in the Linux kernel's tracing subsystem. A local user with access to the tracing interface can cause a Denial of Service (DoS) due to a race condition when attaching histogram triggers to filtered events. Under specific timing conditions, buffered trace events are processed without expected reservation tracking, triggering an internal kernel warning that can halt the system if configured to panic on warnings, as well as produce inaccurate timestamps."], "name": "CVE-2026-99140", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-28T10:34:51Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-99140\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-99140\nhttps://git.kernel.org/stable/c/09c7cce2e59e6b3b1807520bcb1980c561f15d1e\nhttps://git.kernel.org/stable/c/89e90b16aadd6e66bd0323bc8dfc76a62e756b57\nhttps://git.kernel.org/stable/c/9414ca3b99e5a7f1f3bf51c2a01b383e1b355dd0"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b94bc80df64823e676b506f8de7dcf6a688d681e,09c7cce2e59e6b3b1807520bcb1980c561f15d1e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b94bc80df64823e676b506f8de7dcf6a688d681e,89e90b16aadd6e66bd0323bc8dfc76a62e756b57)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b94bc80df64823e676b506f8de7dcf6a688d681e,9414ca3b99e5a7f1f3bf51c2a01b383e1b355dd0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.13"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,5.13)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.59,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.13,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b94bc80df64823e676b506f8de7dcf6a688d681e,09c7cce2e59e6b3b1807520bcb1980c561f15d1e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b94bc80df64823e676b506f8de7dcf6a688d681e,89e90b16aadd6e66bd0323bc8dfc76a62e756b57)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b94bc80df64823e676b506f8de7dcf6a688d681e,9414ca3b99e5a7f1f3bf51c2a01b383e1b355dd0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.13"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,5.13)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.59,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.13,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-28T11:45:09.958127+00:00", "updated": "2026-10-30T05:30:09.655456+00:00", "vendors": ["linux", "linux$PRODUCT$linux", "linux$PRODUCT$linux_kernel"]}