Vulnerability-Lookup

RHSA-2026:85000

Vulnerability from csaf_redhat - Published: 2026-10-19 12:40 - Updated: 2026-10-20 04:43

Summary

Red Hat Security Advisory: kernel security update

Severity

Important

Notes

Topic: An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745) * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581) * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450) * kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493) * kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924) * kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922) * kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920) * kernel: kernel: strparser: use-after-free via msg_timer_work rearm after strp_done() cancellation () For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-68745

A flaw was found in the Linux kernel's qla2xxx SCSI driver. This vulnerability occurs when commands sent to the firmware (FW) are not properly cleared after a chip reset. A local attacker could exploit a race condition during direct memory access (DMA) unmapping, leading to a kernel panic. This can result in a system crash and a Denial of Service (DoS).

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-366 - Race Condition within a Thread

Affected products

Fixed 50 products

Product	Version	Remediation
Unresolved product id: BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-31581

A flaw was found in the Linux kernel's ALSA 6fire USB audio device driver. During the disconnection process of a 6fire USB audio device, a use-after-free vulnerability occurs. This happens when the system attempts to write to memory that has already been deallocated, which can lead to memory corruption and potentially cause system instability or a denial of service.

6.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 50 products, the same list as for CVE-2025-68745

Threats

Impact Moderate

CVE-2026-43450

A flaw was found in the Linux kernel's `nfnetlink_cthelper` component. This vulnerability, an out-of-bounds read, occurs in the `nfnl_cthelper_dump_table()` function when a network connection tracking helper is removed during a dump operation, leading to a bypassed bounds check. A local attacker could exploit this to cause a system crash (denial of service) or potentially access sensitive information from kernel memory.

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 50 products, the same list as for CVE-2025-68745

Threats

Impact Moderate

CVE-2026-43493

A flaw was found in the Linux kernel's `pcrypt` component. This vulnerability involves how the system handles certain requests, specifically `MAY_BACKLOG` requests, which can indicate a temporary busy state. If not properly managed, the system's processing of these requests could lead to resource exhaustion or instability.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 50 products, the same list as for CVE-2025-68745

Threats

Impact Moderate

CVE-2026-63920

A flaw was found in the Linux kernel's IPv6 networking stack. An unprivileged local user could exploit a vulnerability in how IPv6 extension header lengths are handled. By manipulating these headers using nftables, an attacker can trigger an out-of-bounds read, leading to information disclosure from kernel memory.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 50 products, the same list as for CVE-2025-68745

Threats

Impact Moderate

CVE-2026-63922

A flaw was found in the Linux kernel's IPv6 extension header processing. When processing the Home Address Option (HAO), the cached network header pointer may become invalid if the packet's memory is reallocated. This can lead to incorrect parsing of subsequent IPv6 Type-Length-Value (TLV) options, potentially causing unexpected network behavior or a denial of service.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 50 products, the same list as for CVE-2025-68745

Threats

Impact Important

CVE-2026-63924

A flaw was found in the Linux kernel's handling of IPv6 extended headers. Specifically, the `ipv6_hop_jumbo()` function, which processes jumbo payloads, can modify internal packet buffer (skb) pointers. However, the network header (nh) pointer is not recomputed after these modifications. This oversight could lead to incorrect data processing, potentially causing system instability or a denial of service (DoS) due to malformed packets.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 50 products, the same list as for CVE-2025-68745

Threats

Impact Important

References

46 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:85000	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2425039	external
https://bugzilla.redhat.com/show_bug.cgi?id=2461471	external
https://bugzilla.redhat.com/show_bug.cgi?id=2468228	external
https://bugzilla.redhat.com/show_bug.cgi?id=2479812	external
https://bugzilla.redhat.com/show_bug.cgi?id=2502326	external
https://bugzilla.redhat.com/show_bug.cgi?id=2502327	external
https://bugzilla.redhat.com/show_bug.cgi?id=2502330	external
https://bugzilla.redhat.com/show_bug.cgi?id=2540872	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-68745	self
https://bugzilla.redhat.com/show_bug.cgi?id=2425039	external
https://www.cve.org/CVERecord?id=CVE-2025-68745	external
https://nvd.nist.gov/vuln/detail/CVE-2025-68745	external
https://lore.kernel.org/linux-cve-announce/202512…	external
https://access.redhat.com/security/cve/CVE-2026-31581	self
https://bugzilla.redhat.com/show_bug.cgi?id=2461471	external
https://www.cve.org/CVERecord?id=CVE-2026-31581	external
https://nvd.nist.gov/vuln/detail/CVE-2026-31581	external
https://lore.kernel.org/linux-cve-announce/202604…	external
https://access.redhat.com/security/cve/CVE-2026-43450	self
https://bugzilla.redhat.com/show_bug.cgi?id=2468228	external
https://www.cve.org/CVERecord?id=CVE-2026-43450	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43450	external
https://lore.kernel.org/linux-cve-announce/202605…	external
https://access.redhat.com/security/cve/CVE-2026-43493	self
https://bugzilla.redhat.com/show_bug.cgi?id=2479812	external
https://www.cve.org/CVERecord?id=CVE-2026-43493	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43493	external
https://git.kernel.org/pub/scm/linux/security/vul…	external
https://access.redhat.com/security/cve/CVE-2026-63920	self
https://bugzilla.redhat.com/show_bug.cgi?id=2502330	external
https://www.cve.org/CVERecord?id=CVE-2026-63920	external
https://nvd.nist.gov/vuln/detail/CVE-2026-63920	external
https://lore.kernel.org/linux-cve-announce/202607…	external
https://access.redhat.com/security/cve/CVE-2026-63922	self
https://bugzilla.redhat.com/show_bug.cgi?id=2502327	external
https://www.cve.org/CVERecord?id=CVE-2026-63922	external
https://nvd.nist.gov/vuln/detail/CVE-2026-63922	external
https://lore.kernel.org/linux-cve-announce/202607…	external
https://access.redhat.com/security/cve/CVE-2026-63924	self
https://bugzilla.redhat.com/show_bug.cgi?id=2502326	external
https://www.cve.org/CVERecord?id=CVE-2026-63924	external
https://nvd.nist.gov/vuln/detail/CVE-2026-63924	external
https://lore.kernel.org/linux-cve-announce/202607…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745)\n\n* kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581)\n\n* kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)\n\n* kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493)\n\n* kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)\n\n* kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)\n\n* kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)\n\n* kernel: kernel: strparser: use-after-free via msg_timer_work rearm after strp_done() cancellation ()\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:85000",
        "url": "https://access.redhat.com/errata/RHSA-2026:85000"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2425039",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425039"
      },
      {
        "category": "external",
        "summary": "2461471",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461471"
      },
      {
        "category": "external",
        "summary": "2468228",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468228"
      },
      {
        "category": "external",
        "summary": "2479812",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479812"
      },
      {
        "category": "external",
        "summary": "2502326",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502326"
      },
      {
        "category": "external",
        "summary": "2502327",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502327"
      },
      {
        "category": "external",
        "summary": "2502330",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502330"
      },
      {
        "category": "external",
        "summary": "2540872",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2540872"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_85000.json"
      }
    ],
    "title": "Red Hat Security Advisory: kernel security update",
    "tracking": {
      "current_release_date": "2026-10-20T04:43:33+00:00",
      "generator": {
        "date": "2026-10-20T04:43:33+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:85000",
      "initial_release_date": "2026-10-19T12:40:26+00:00",
      "revision_history": [
        {
          "date": "2026-10-19T12:40:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-19T12:40:26+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-20T04:43:33+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
                  "product_id": "BaseOS-8.6.0.Z.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:8.6::baseos"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
                  "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftool@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "kernel-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-core@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-core@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-devel@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-modules@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-modules-extra@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-devel@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-modules@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-modules-extra@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-tools@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-tools-libs@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "perf-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "perf-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perf@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-perf@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftool-debuginfo@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-debuginfo@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debuginfo@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debuginfo-common-x86_64@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-tools-debuginfo@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perf-debuginfo@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                "product": {
                  "name": "python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_id": "python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-perf-debuginfo@4.18.0-372.223.1.el8_6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-0:4.18.0-372.223.1.el8_6.src",
                "product": {
                  "name": "kernel-0:4.18.0-372.223.1.el8_6.src",
                  "product_id": "kernel-0:4.18.0-372.223.1.el8_6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel@4.18.0-372.223.1.el8_6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
                "product": {
                  "name": "kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
                  "product_id": "kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-abi-stablelists@4.18.0-372.223.1.el8_6?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
                "product": {
                  "name": "kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
                  "product_id": "kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-doc@4.18.0-372.223.1.el8_6?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:4.18.0-372.223.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src"
        },
        "product_reference": "kernel-0:4.18.0-372.223.1.el8_6.src",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch"
        },
        "product_reference": "kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-core-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:4.18.0-372.223.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch"
        },
        "product_reference": "kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "perf-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-perf-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:4.18.0-372.223.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src"
        },
        "product_reference": "kernel-0:4.18.0-372.223.1.el8_6.src",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch"
        },
        "product_reference": "kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-core-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:4.18.0-372.223.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch"
        },
        "product_reference": "kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "perf-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-perf-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        },
        "product_reference": "python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-68745",
      "cwe": {
        "id": "CWE-366",
        "name": "Race Condition within a Thread"
      },
      "discovery_date": "2025-12-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2425039"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s qla2xxx SCSI driver. This vulnerability occurs when commands sent to the firmware (FW) are not properly cleared after a chip reset. A local attacker could exploit a race condition during direct memory access (DMA) unmapping, leading to a kernel panic. This can result in a system crash and a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A moderate flaw was found in the Linux kernel\u0027s qla2xxx SCSI driver, affecting the kernel and kernel-rt components in Red Hat Enterprise Linux 8, 9, and 10. Commands sent to the firmware were not properly cleared after a chip reset, and a race condition between two CPUs concurrently performing DMA unmapping in qlt_unmap_sg() could trigger a kernel BUG_ON, resulting in a kernel panic. A local attacker able to trigger the chip reset and racing DMA unmap paths could exploit this condition to crash the system, causing a denial of service; confidentiality and integrity are not impacted. Red Hat Enterprise Linux 7 Extended Lifecycle Support and Red Hat In-Vehicle OS 1 are not affected because the vulnerable code is not present in those releases. Fixes for the affected Red Hat Enterprise Linux 8, 9, and 10 streams are being pursued by the Red Hat kernel team, and updates have already shipped or are in progress for several streams. Red Hat rates this flaw Moderate severity with a CVSS 4.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H), which differs significantly from the Critical 9.8 score in the upstream CVE record. The upstream score reflects a network-reachable vector with full confidentiality, integrity, and availability impact that is not supported by the technical evidence: exploitation requires local access and a high-complexity race condition, and only availability is affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-68745"
        },
        {
          "category": "external",
          "summary": "RHBZ#2425039",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425039"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-68745",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-68745"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68745",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68745"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-cve-announce/2025122416-CVE-2025-68745-69b5@gregkh/T",
          "url": "https://lore.kernel.org/linux-cve-announce/2025122416-CVE-2025-68745-69b5@gregkh/T"
        }
      ],
      "release_date": "2025-12-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T12:40:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85000"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, if the `qla2xxx` SCSI driver is not required, it can be prevented from loading by blacklisting the module. This can be achieved by creating a modprobe configuration file.\n\n1. Create a file named `/etc/modprobe.d/blacklist-qla2xxx.conf` with the following content:\n```\nblacklist qla2xxx\ninstall qla2xxx /bin/true\n```\n2. Rebuild the initial ramdisk:\n```bash\ndracut -f -v\n```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation will prevent the `qla2xxx` module from loading, which may impact systems relying on QLogic Fibre Channel HBAs. A system reboot is required for the changes to take full effect.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset"
    },
    {
      "cve": "CVE-2026-31581",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2026-04-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2461471"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s ALSA 6fire USB audio device driver. During the disconnection process of a 6fire USB audio device, a use-after-free vulnerability occurs. This happens when the system attempts to write to memory that has already been deallocated, which can lead to memory corruption and potentially cause system instability or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: ALSA: 6fire: fix use-after-free on disconnect",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The 6fire USB audio disconnect path could touch freed memory; upstream hardens teardown ordering. Red Hat customers using this rare interface should update kernels. Optional mitigation is unloading the 6fire ALSA USB driver module where unused.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-31581"
        },
        {
          "category": "external",
          "summary": "RHBZ#2461471",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461471"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-31581",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-31581"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-31581",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31581"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-cve-announce/2026042411-CVE-2026-31581-9bc2@gregkh/T",
          "url": "https://lore.kernel.org/linux-cve-announce/2026042411-CVE-2026-31581-9bc2@gregkh/T"
        }
      ],
      "release_date": "2026-04-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T12:40:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85000"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, prevent the snd_usb_6fire module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: ALSA: 6fire: fix use-after-free on disconnect"
    },
    {
      "cve": "CVE-2026-43450",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-05-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2468228"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s `nfnetlink_cthelper` component. This vulnerability, an out-of-bounds read, occurs in the `nfnl_cthelper_dump_table()` function when a network connection tracking helper is removed during a dump operation, leading to a bypassed bounds check. A local attacker could exploit this to cause a system crash (denial of service) or potentially access sensitive information from kernel memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43450"
        },
        {
          "category": "external",
          "summary": "RHBZ#2468228",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468228"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43450",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43450"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43450",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43450"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-cve-announce/2026050857-CVE-2026-43450-8919@gregkh/T",
          "url": "https://lore.kernel.org/linux-cve-announce/2026050857-CVE-2026-43450-8919@gregkh/T"
        }
      ],
      "release_date": "2026-05-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T12:40:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85000"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()"
    },
    {
      "cve": "CVE-2026-43493",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-05-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2479812"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s `pcrypt` component. This vulnerability involves how the system handles certain requests, specifically `MAY_BACKLOG` requests, which can indicate a temporary busy state. If not properly managed, the system\u0027s processing of these requests could lead to resource exhaustion or instability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43493"
        },
        {
          "category": "external",
          "summary": "RHBZ#2479812",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479812"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43493",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43493"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43493",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43493"
        },
        {
          "category": "external",
          "summary": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43493.mbox",
          "url": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43493.mbox"
        }
      ],
      "release_date": "2026-05-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T12:40:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85000"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests"
    },
    {
      "cve": "CVE-2026-63920",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2502330"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s IPv6 networking stack. An unprivileged local user could exploit a vulnerability in how IPv6 extension header lengths are handled. By manipulating these headers using nftables, an attacker can trigger an out-of-bounds read, leading to information disclosure from kernel memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: ipv6: validate extension header length before copying to cmsg",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-63920"
        },
        {
          "category": "external",
          "summary": "RHBZ#2502330",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502330"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63920",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63920"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63920",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63920"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-cve-announce/2026071948-CVE-2026-63920-54a7@gregkh/T",
          "url": "https://lore.kernel.org/linux-cve-announce/2026071948-CVE-2026-63920-54a7@gregkh/T"
        }
      ],
      "release_date": "2026-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T12:40:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85000"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: ipv6: validate extension header length before copying to cmsg"
    },
    {
      "cve": "CVE-2026-63922",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2026-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2502327"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s IPv6 extension header processing. When processing the Home Address Option (HAO), the cached network header pointer may become invalid if the packet\u0027s memory is reallocated. This can lead to incorrect parsing of subsequent IPv6 Type-Length-Value (TLV) options, potentially causing unexpected network behavior or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: ipv6: exthdrs: refresh nh after handling HAO option",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-63922"
        },
        {
          "category": "external",
          "summary": "RHBZ#2502327",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502327"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63922",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63922"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63922",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63922"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-cve-announce/2026071948-CVE-2026-63922-5716@gregkh/T",
          "url": "https://lore.kernel.org/linux-cve-announce/2026071948-CVE-2026-63922-5716@gregkh/T"
        }
      ],
      "release_date": "2026-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T12:40:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85000"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: ipv6: exthdrs: refresh nh after handling HAO option"
    },
    {
      "cve": "CVE-2026-63924",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2026-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2502326"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s handling of IPv6 extended headers. Specifically, the `ipv6_hop_jumbo()` function, which processes jumbo payloads, can modify internal packet buffer (skb) pointers. However, the network header (nh) pointer is not recomputed after these modifications. This oversight could lead to incorrect data processing, potentially causing system instability or a denial of service (DoS) due to malformed packets.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-63924"
        },
        {
          "category": "external",
          "summary": "RHBZ#2502326",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502326"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63924",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63924"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63924",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63924"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-cve-announce/2026071948-CVE-2026-63924-ec60@gregkh/T",
          "url": "https://lore.kernel.org/linux-cve-announce/2026071948-CVE-2026-63924-ec60@gregkh/T"
        }
      ],
      "release_date": "2026-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T12:40:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:85000"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.223.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.223.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.223.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()"
    }
  ]
}

CVE-2025-68745 (GCVE-0-2025-68745)

Vulnerability from cvelistv5 – Published: 2025-12-24 12:09 – Updated: 2026-10-16 15:09

Title

scsi: qla2xxx: Clear cmds after chip reset

Summary

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handling and host reset handling") caused two problems: 1. Commands sent to FW, after chip reset got stuck and never freed as FW is not going to respond to them anymore. 2. BUG_ON(cmd->sg_mapped) in qlt_free_cmd(). Commit 26f9ce53817a ("scsi: qla2xxx: Fix missed DMA unmap for aborted commands") attempted to fix this, but introduced another bug under different circumstances when two different CPUs were racing to call qlt_unmap_sg() at the same time: BUG_ON(!valid_dma_direction(dir)) in dma_unmap_sg_attrs(). So revert "scsi: qla2xxx: Fix missed DMA unmap for aborted commands" and partially revert "scsi: qla2xxx: target: Fix offline port handling and host reset handling" at __qla2x00_abort_all_cmds.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-16 15:04 UTC

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6996 records in the last 180 days details

References

2 references

URL	Tags
https://git.kernel.org/stable/c/5c1fb3fd05da3d55b…
https://git.kernel.org/stable/c/d46c69a087aa3d151…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: aefed3e5548f28e5fecafda6604fcbc65484dbaa , < 5c1fb3fd05da3d55b8cbc42d7d660b313cbdc936 (git) Affected: aefed3e5548f28e5fecafda6604fcbc65484dbaa , < d46c69a087aa3d1513f7a78f871b80251ea0c1ae (git) Affected: eb67b7a23d357f578578e737cb6412ae2384f352 (git) Affected: ec9639d92c1e10d4bc667e842753d85e21683d5c (git) Affected: e6e957f552d5b696879a31e5b0e2a9120e1ea86e (git) Affected: 4.9.316 , < 4.10 (semver) Affected: 4.14.281 , < 4.15 (semver) Affected: 4.19.245 , < 4.20 (semver)
Linux	Linux	Affected: 5.2 Unaffected: 0 , < 5.2 (semver) Unaffected: 6.18.2 , ≤ 6.18.* (semver) Unaffected: 6.19 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-68745",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-16T15:04:59.378599Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T15:09:43.983Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/qla2xxx/qla_os.c",
            "drivers/scsi/qla2xxx/qla_target.c",
            "drivers/scsi/qla2xxx/qla_target.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5c1fb3fd05da3d55b8cbc42d7d660b313cbdc936",
              "status": "affected",
              "version": "aefed3e5548f28e5fecafda6604fcbc65484dbaa",
              "versionType": "git"
            },
            {
              "lessThan": "d46c69a087aa3d1513f7a78f871b80251ea0c1ae",
              "status": "affected",
              "version": "aefed3e5548f28e5fecafda6604fcbc65484dbaa",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "eb67b7a23d357f578578e737cb6412ae2384f352",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "ec9639d92c1e10d4bc667e842753d85e21683d5c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "e6e957f552d5b696879a31e5b0e2a9120e1ea86e",
              "versionType": "git"
            },
            {
              "lessThan": "4.10",
              "status": "affected",
              "version": "4.9.316",
              "versionType": "semver"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.281",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.245",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/qla2xxx/qla_os.c",
            "drivers/scsi/qla2xxx/qla_target.c",
            "drivers/scsi/qla2xxx/qla_target.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.2"
            },
            {
              "lessThan": "5.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.2",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.9.316",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.281",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.245",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Clear cmds after chip reset\n\nCommit aefed3e5548f (\"scsi: qla2xxx: target: Fix offline port handling\nand host reset handling\") caused two problems:\n\n1. Commands sent to FW, after chip reset got stuck and never freed as FW\n   is not going to respond to them anymore.\n\n2. BUG_ON(cmd-\u003esg_mapped) in qlt_free_cmd().  Commit 26f9ce53817a\n   (\"scsi: qla2xxx: Fix missed DMA unmap for aborted commands\")\n   attempted to fix this, but introduced another bug under different\n   circumstances when two different CPUs were racing to call\n   qlt_unmap_sg() at the same time: BUG_ON(!valid_dma_direction(dir)) in\n   dma_unmap_sg_attrs().\n\nSo revert \"scsi: qla2xxx: Fix missed DMA unmap for aborted commands\" and\npartially revert \"scsi: qla2xxx: target: Fix offline port handling and\nhost reset handling\" at __qla2x00_abort_all_cmds."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - A remote Fibre Channel/FCoE initiator can reach the vulnerable command lifecycle by sending FCP I/O and ABTS/TMR frames, without local host access.\nAC:L - The initiator can keep large PI/DIF I/O active while repeatedly issuing abort or reset requests, controlling both sides of the abort-versus-completion race.\nPR:N - Dynamic/demo ACL configurations admit fabric initiators without credentials, and WWPN-based session establishment requires no privilege on the target host.\nUI:N - Exploitation requires only attacker-generated fabric traffic and no victim action during the attack.\nS:U - The vulnerable driver and the affected kernel memory and storage resources belong to the same security authority.\nC:H - Concurrent unmapping can double-free shared DIF CRC-context and DSD objects, producing overlapping firmware-visible DMA contexts that can expose kernel or cross-command data.\nI:H - The DMA-pool double-free and concurrent DSD list deletion can corrupt kernel memory or redirect device DMA, potentially enabling arbitrary modification or code execution.\nA:H - The reported paths reach kernel BUG assertions, while reset-time command leaks can permanently exhaust resources; either can crash or render the target unavailable."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:11:14.649Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/5c1fb3fd05da3d55b8cbc42d7d660b313cbdc936"
        },
        {
          "url": "https://git.kernel.org/stable/c/d46c69a087aa3d1513f7a78f871b80251ea0c1ae"
        }
      ],
      "title": "scsi: qla2xxx: Clear cmds after chip reset",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-68745",
    "datePublished": "2025-12-24T12:09:41.517Z",
    "dateReserved": "2025-12-24T10:30:51.031Z",
    "dateUpdated": "2026-10-16T15:09:43.983Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-31581 (GCVE-0-2026-31581)

Vulnerability from cvelistv5 – Published: 2026-04-24 14:42 – Updated: 2026-06-14 17:42

Title

ALSA: 6fire: fix use-after-free on disconnect

Summary

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix use-after-free on disconnect In usb6fire_chip_abort(), the chip struct is allocated as the card's private data (via snd_card_new with sizeof(struct sfire_chip)). When snd_card_free_when_closed() is called and no file handles are open, the card and embedded chip are freed synchronously. The subsequent chip->card = NULL write then hits freed slab memory. Call trace: usb6fire_chip_abort sound/usb/6fire/chip.c:59 [inline] usb6fire_chip_disconnect+0x348/0x358 sound/usb/6fire/chip.c:182 usb_unbind_interface+0x1a8/0x88c drivers/usb/core/driver.c:458 ... hub_event+0x1a04/0x4518 drivers/usb/core/hub.c:5953 Fix by moving the card lifecycle out of usb6fire_chip_abort() and into usb6fire_chip_disconnect(). The card pointer is saved in a local before any teardown, snd_card_disconnect() is called first to prevent new opens, URBs are aborted while chip is still valid, and snd_card_free_when_closed() is called last so chip is never accessed after the card may be freed.

Severity

No CVSS data available.

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6996 records in the last 180 days details

References

9 references

URL	Tags
https://git.kernel.org/stable/c/e719232f4552e29de…
https://git.kernel.org/stable/c/e247a0e01d15ed420…
https://git.kernel.org/stable/c/ba88461f7653636c4…
https://git.kernel.org/stable/c/e88354b381e2006de…
https://git.kernel.org/stable/c/af75b486f7e883e34…
https://git.kernel.org/stable/c/d21e8a2af4869b589…
https://git.kernel.org/stable/c/3dc20d1981d6a67d8…
https://git.kernel.org/stable/c/51f6532790b74ffdd…
https://git.kernel.org/stable/c/b9c826916fdce6419…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: f2d06d4e129e2508e356136f99bb20a332ff1a00 , < e719232f4552e29de8027a83918ea94434be87af (git) Affected: b889a7d68d7e76b8795b754a75c91a2d561d5e8c , < e247a0e01d15ed420f77ec5e2335721bf430a5b3 (git) Affected: ea8cc56db659cf0ae57073e32a4735ead7bd7ee3 , < ba88461f7653636c48321ca993006a74724c2f41 (git) Affected: b754e831a94f82f2593af806741392903f359168 , < e88354b381e2006de63d6b052ed7005c9a47d00e (git) Affected: 57860a80f03f9dc69a34a5c37b0941ad032a0a8c , < af75b486f7e883e3422ece23c8d727e6815144a0 (git) Affected: a0810c3d6dd2d29a9b92604d682eacd2902ce947 , < d21e8a2af4869b5890b34e081d5aeadc93e9cd5c (git) Affected: a0810c3d6dd2d29a9b92604d682eacd2902ce947 , < 3dc20d1981d6a67d8184498a5da272942dde1e65 (git) Affected: a0810c3d6dd2d29a9b92604d682eacd2902ce947 , < 51f6532790b74ffdd6970bc848358a2838c1c185 (git) Affected: a0810c3d6dd2d29a9b92604d682eacd2902ce947 , < b9c826916fdce6419b94eb0cd8810fdac18c2386 (git) Affected: 74357d0b5cd3ef544752bc9f21cbeee4902fae6c (git) Affected: 273eec23467dfbfbd0e4c10302579ba441fb1e13 (git) Affected: 0df7f4b5cc10f5adf98be0845372e9eef7bb5b09 (git) Affected: 5.10.231 , < 5.10.258 (semver) Affected: 5.15.174 , < 5.15.209 (semver) Affected: 6.1.120 , < 6.1.175 (semver) Affected: 6.6.64 , < 6.6.136 (semver) Affected: 6.12.2 , < 6.12.83 (semver) Affected: 4.19.325 , < 4.20 (semver) Affected: 5.4.287 , < 5.5 (semver) Affected: 6.11.11 , < 6.12 (semver)
Linux	Linux	Affected: 6.13 Unaffected: 0 , < 6.13 (semver) Unaffected: 5.10.258 , ≤ 5.10.* (semver) Unaffected: 5.15.209 , ≤ 5.15.* (semver) Unaffected: 6.1.175 , ≤ 6.1.* (semver) Unaffected: 6.6.136 , ≤ 6.6.* (semver) Unaffected: 6.12.83 , ≤ 6.12.* (semver) Unaffected: 6.18.24 , ≤ 6.18.* (semver) Unaffected: 6.19.14 , ≤ 6.19.* (semver) Unaffected: 7.0.1 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "sound/usb/6fire/chip.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e719232f4552e29de8027a83918ea94434be87af",
              "status": "affected",
              "version": "f2d06d4e129e2508e356136f99bb20a332ff1a00",
              "versionType": "git"
            },
            {
              "lessThan": "e247a0e01d15ed420f77ec5e2335721bf430a5b3",
              "status": "affected",
              "version": "b889a7d68d7e76b8795b754a75c91a2d561d5e8c",
              "versionType": "git"
            },
            {
              "lessThan": "ba88461f7653636c48321ca993006a74724c2f41",
              "status": "affected",
              "version": "ea8cc56db659cf0ae57073e32a4735ead7bd7ee3",
              "versionType": "git"
            },
            {
              "lessThan": "e88354b381e2006de63d6b052ed7005c9a47d00e",
              "status": "affected",
              "version": "b754e831a94f82f2593af806741392903f359168",
              "versionType": "git"
            },
            {
              "lessThan": "af75b486f7e883e3422ece23c8d727e6815144a0",
              "status": "affected",
              "version": "57860a80f03f9dc69a34a5c37b0941ad032a0a8c",
              "versionType": "git"
            },
            {
              "lessThan": "d21e8a2af4869b5890b34e081d5aeadc93e9cd5c",
              "status": "affected",
              "version": "a0810c3d6dd2d29a9b92604d682eacd2902ce947",
              "versionType": "git"
            },
            {
              "lessThan": "3dc20d1981d6a67d8184498a5da272942dde1e65",
              "status": "affected",
              "version": "a0810c3d6dd2d29a9b92604d682eacd2902ce947",
              "versionType": "git"
            },
            {
              "lessThan": "51f6532790b74ffdd6970bc848358a2838c1c185",
              "status": "affected",
              "version": "a0810c3d6dd2d29a9b92604d682eacd2902ce947",
              "versionType": "git"
            },
            {
              "lessThan": "b9c826916fdce6419b94eb0cd8810fdac18c2386",
              "status": "affected",
              "version": "a0810c3d6dd2d29a9b92604d682eacd2902ce947",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "74357d0b5cd3ef544752bc9f21cbeee4902fae6c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "273eec23467dfbfbd0e4c10302579ba441fb1e13",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "0df7f4b5cc10f5adf98be0845372e9eef7bb5b09",
              "versionType": "git"
            },
            {
              "lessThan": "5.10.258",
              "status": "affected",
              "version": "5.10.231",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.209",
              "status": "affected",
              "version": "5.15.174",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.175",
              "status": "affected",
              "version": "6.1.120",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.136",
              "status": "affected",
              "version": "6.6.64",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.83",
              "status": "affected",
              "version": "6.12.2",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.325",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.287",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12",
              "status": "affected",
              "version": "6.11.11",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "sound/usb/6fire/chip.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.13"
            },
            {
              "lessThan": "6.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.136",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.83",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.24",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "5.10.231",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "5.15.174",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "6.1.120",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.136",
                  "versionStartIncluding": "6.6.64",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.83",
                  "versionStartIncluding": "6.12.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.24",
                  "versionStartIncluding": "6.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.14",
                  "versionStartIncluding": "6.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.1",
                  "versionStartIncluding": "6.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "6.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.325",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.287",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.11.11",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: 6fire: fix use-after-free on disconnect\n\nIn usb6fire_chip_abort(), the chip struct is allocated as the card\u0027s\nprivate data (via snd_card_new with sizeof(struct sfire_chip)).  When\nsnd_card_free_when_closed() is called and no file handles are open, the\ncard and embedded chip are freed synchronously.  The subsequent\nchip-\u003ecard = NULL write then hits freed slab memory.\n\nCall trace:\n  usb6fire_chip_abort sound/usb/6fire/chip.c:59 [inline]\n  usb6fire_chip_disconnect+0x348/0x358 sound/usb/6fire/chip.c:182\n  usb_unbind_interface+0x1a8/0x88c drivers/usb/core/driver.c:458\n  ...\n  hub_event+0x1a04/0x4518 drivers/usb/core/hub.c:5953\n\nFix by moving the card lifecycle out of usb6fire_chip_abort() and into\nusb6fire_chip_disconnect().  The card pointer is saved in a local\nbefore any teardown, snd_card_disconnect() is called first to prevent\nnew opens, URBs are aborted while chip is still valid, and\nsnd_card_free_when_closed() is called last so chip is never accessed\nafter the card may be freed."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-14T17:42:07.970Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e719232f4552e29de8027a83918ea94434be87af"
        },
        {
          "url": "https://git.kernel.org/stable/c/e247a0e01d15ed420f77ec5e2335721bf430a5b3"
        },
        {
          "url": "https://git.kernel.org/stable/c/ba88461f7653636c48321ca993006a74724c2f41"
        },
        {
          "url": "https://git.kernel.org/stable/c/e88354b381e2006de63d6b052ed7005c9a47d00e"
        },
        {
          "url": "https://git.kernel.org/stable/c/af75b486f7e883e3422ece23c8d727e6815144a0"
        },
        {
          "url": "https://git.kernel.org/stable/c/d21e8a2af4869b5890b34e081d5aeadc93e9cd5c"
        },
        {
          "url": "https://git.kernel.org/stable/c/3dc20d1981d6a67d8184498a5da272942dde1e65"
        },
        {
          "url": "https://git.kernel.org/stable/c/51f6532790b74ffdd6970bc848358a2838c1c185"
        },
        {
          "url": "https://git.kernel.org/stable/c/b9c826916fdce6419b94eb0cd8810fdac18c2386"
        }
      ],
      "title": "ALSA: 6fire: fix use-after-free on disconnect",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-31581",
    "datePublished": "2026-04-24T14:42:11.557Z",
    "dateReserved": "2026-03-09T15:48:24.119Z",
    "dateUpdated": "2026-06-14T17:42:07.970Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43450 (GCVE-0-2026-43450)

Vulnerability from cvelistv5 – Published: 2026-05-08 14:22 – Updated: 2026-05-11 22:24

Title

netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

Summary

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() nfnl_cthelper_dump_table() has a 'goto restart' that jumps to a label inside the for loop body. When the "last" helper saved in cb->args[1] is deleted between dump rounds, every entry fails the (cur != last) check, so cb->args[1] is never cleared. The for loop finishes with cb->args[0] == nf_ct_helper_hsize, and the 'goto restart' jumps back into the loop body bypassing the bounds check, causing an 8-byte out-of-bounds read on nf_ct_helper_hash[nf_ct_helper_hsize]. The 'goto restart' block was meant to re-traverse the current bucket when "last" is no longer found, but it was placed after the for loop instead of inside it. Move the block into the for loop body so that the restart only occurs while cb->args[0] is still within bounds. BUG: KASAN: slab-out-of-bounds in nfnl_cthelper_dump_table+0x9f/0x1b0 Read of size 8 at addr ffff888104ca3000 by task poc_cthelper/131 Call Trace: nfnl_cthelper_dump_table+0x9f/0x1b0 netlink_dump+0x333/0x880 netlink_recvmsg+0x3e2/0x4b0 sock_recvmsg+0xde/0xf0 __sys_recvfrom+0x150/0x200 __x64_sys_recvfrom+0x76/0x90 do_syscall_64+0xc3/0x6e0 Allocated by task 1: __kvmalloc_node_noprof+0x21b/0x700 nf_ct_alloc_hashtable+0x65/0xd0 nf_conntrack_helper_init+0x21/0x60 nf_conntrack_init_start+0x18d/0x300 nf_conntrack_standalone_init+0x12/0xc0

Severity

No CVSS data available.

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6996 records in the last 180 days details

References

8 references

URL	Tags
https://git.kernel.org/stable/c/0605e1985a95d4334…
https://git.kernel.org/stable/c/92441f6d9405a0c18…
https://git.kernel.org/stable/c/3cc328ffc32ddb389…
https://git.kernel.org/stable/c/4a1f6ee69267a5f52…
https://git.kernel.org/stable/c/894c5780ddadd5fde…
https://git.kernel.org/stable/c/05018cd9370f77bb1…
https://git.kernel.org/stable/c/61b3a1f8621df1a59…
https://git.kernel.org/stable/c/6dcee8496d53165b2…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 12f7a505331e6b2754684b509f2ac8f0011ce644 , < 0605e1985a95d4334a67869aee45a47e82301abf (git) Affected: 12f7a505331e6b2754684b509f2ac8f0011ce644 , < 92441f6d9405a0c18d03f278b395e782f79a4a30 (git) Affected: 12f7a505331e6b2754684b509f2ac8f0011ce644 , < 3cc328ffc32ddb389cba7b78b6aa95d995c2876e (git) Affected: 12f7a505331e6b2754684b509f2ac8f0011ce644 , < 4a1f6ee69267a5f524102c028981410eeacfa3da (git) Affected: 12f7a505331e6b2754684b509f2ac8f0011ce644 , < 894c5780ddadd5fde0e16f66587918e6be1504c4 (git) Affected: 12f7a505331e6b2754684b509f2ac8f0011ce644 , < 05018cd9370f77bb18fbf6e15ff33c7a06f10b3c (git) Affected: 12f7a505331e6b2754684b509f2ac8f0011ce644 , < 61b3a1f8621df1a5928118313f133996f6a786db (git) Affected: 12f7a505331e6b2754684b509f2ac8f0011ce644 , < 6dcee8496d53165b2d8a5909b3050b62ae71fe89 (git)
Linux	Linux	Affected: 3.6 Unaffected: 0 , < 3.6 (semver) Unaffected: 5.10.253 , ≤ 5.10.* (semver) Unaffected: 5.15.203 , ≤ 5.15.* (semver) Unaffected: 6.1.167 , ≤ 6.1.* (semver) Unaffected: 6.6.130 , ≤ 6.6.* (semver) Unaffected: 6.12.78 , ≤ 6.12.* (semver) Unaffected: 6.18.19 , ≤ 6.18.* (semver) Unaffected: 6.19.9 , ≤ 6.19.* (semver) Unaffected: 7.0 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/netfilter/nfnetlink_cthelper.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "0605e1985a95d4334a67869aee45a47e82301abf",
              "status": "affected",
              "version": "12f7a505331e6b2754684b509f2ac8f0011ce644",
              "versionType": "git"
            },
            {
              "lessThan": "92441f6d9405a0c18d03f278b395e782f79a4a30",
              "status": "affected",
              "version": "12f7a505331e6b2754684b509f2ac8f0011ce644",
              "versionType": "git"
            },
            {
              "lessThan": "3cc328ffc32ddb389cba7b78b6aa95d995c2876e",
              "status": "affected",
              "version": "12f7a505331e6b2754684b509f2ac8f0011ce644",
              "versionType": "git"
            },
            {
              "lessThan": "4a1f6ee69267a5f524102c028981410eeacfa3da",
              "status": "affected",
              "version": "12f7a505331e6b2754684b509f2ac8f0011ce644",
              "versionType": "git"
            },
            {
              "lessThan": "894c5780ddadd5fde0e16f66587918e6be1504c4",
              "status": "affected",
              "version": "12f7a505331e6b2754684b509f2ac8f0011ce644",
              "versionType": "git"
            },
            {
              "lessThan": "05018cd9370f77bb18fbf6e15ff33c7a06f10b3c",
              "status": "affected",
              "version": "12f7a505331e6b2754684b509f2ac8f0011ce644",
              "versionType": "git"
            },
            {
              "lessThan": "61b3a1f8621df1a5928118313f133996f6a786db",
              "status": "affected",
              "version": "12f7a505331e6b2754684b509f2ac8f0011ce644",
              "versionType": "git"
            },
            {
              "lessThan": "6dcee8496d53165b2d8a5909b3050b62ae71fe89",
              "status": "affected",
              "version": "12f7a505331e6b2754684b509f2ac8f0011ce644",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/netfilter/nfnetlink_cthelper.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.6"
            },
            {
              "lessThan": "3.6",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.253",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.203",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.167",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.130",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.78",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.253",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.203",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.167",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.130",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.78",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.19",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.9",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()\n\nnfnl_cthelper_dump_table() has a \u0027goto restart\u0027 that jumps to a label\ninside the for loop body.  When the \"last\" helper saved in cb-\u003eargs[1]\nis deleted between dump rounds, every entry fails the (cur != last)\ncheck, so cb-\u003eargs[1] is never cleared.  The for loop finishes with\ncb-\u003eargs[0] == nf_ct_helper_hsize, and the \u0027goto restart\u0027 jumps back\ninto the loop body bypassing the bounds check, causing an 8-byte\nout-of-bounds read on nf_ct_helper_hash[nf_ct_helper_hsize].\n\nThe \u0027goto restart\u0027 block was meant to re-traverse the current bucket\nwhen \"last\" is no longer found, but it was placed after the for loop\ninstead of inside it.  Move the block into the for loop body so that\nthe restart only occurs while cb-\u003eargs[0] is still within bounds.\n\n BUG: KASAN: slab-out-of-bounds in nfnl_cthelper_dump_table+0x9f/0x1b0\n Read of size 8 at addr ffff888104ca3000 by task poc_cthelper/131\n Call Trace:\n  nfnl_cthelper_dump_table+0x9f/0x1b0\n  netlink_dump+0x333/0x880\n  netlink_recvmsg+0x3e2/0x4b0\n  sock_recvmsg+0xde/0xf0\n  __sys_recvfrom+0x150/0x200\n  __x64_sys_recvfrom+0x76/0x90\n  do_syscall_64+0xc3/0x6e0\n\n Allocated by task 1:\n  __kvmalloc_node_noprof+0x21b/0x700\n  nf_ct_alloc_hashtable+0x65/0xd0\n  nf_conntrack_helper_init+0x21/0x60\n  nf_conntrack_init_start+0x18d/0x300\n  nf_conntrack_standalone_init+0x12/0xc0"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T22:24:49.527Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/0605e1985a95d4334a67869aee45a47e82301abf"
        },
        {
          "url": "https://git.kernel.org/stable/c/92441f6d9405a0c18d03f278b395e782f79a4a30"
        },
        {
          "url": "https://git.kernel.org/stable/c/3cc328ffc32ddb389cba7b78b6aa95d995c2876e"
        },
        {
          "url": "https://git.kernel.org/stable/c/4a1f6ee69267a5f524102c028981410eeacfa3da"
        },
        {
          "url": "https://git.kernel.org/stable/c/894c5780ddadd5fde0e16f66587918e6be1504c4"
        },
        {
          "url": "https://git.kernel.org/stable/c/05018cd9370f77bb18fbf6e15ff33c7a06f10b3c"
        },
        {
          "url": "https://git.kernel.org/stable/c/61b3a1f8621df1a5928118313f133996f6a786db"
        },
        {
          "url": "https://git.kernel.org/stable/c/6dcee8496d53165b2d8a5909b3050b62ae71fe89"
        }
      ],
      "title": "netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43450",
    "datePublished": "2026-05-08T14:22:15.915Z",
    "dateReserved": "2026-05-01T14:12:56.010Z",
    "dateUpdated": "2026-05-11T22:24:49.527Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43493 (GCVE-0-2026-43493)

Vulnerability from cvelistv5 – Published: 2026-05-19 10:44 – Updated: 2026-10-19 19:26

Title

crypto: pcrypt - Fix handling of MAY_BACKLOG requests

Summary

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix handling of MAY_BACKLOG requests MAY_BACKLOG requests can return EBUSY. Handle them by checking for that value and filtering out EINPROGRESS notifications.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-16 15:17 UTC

CWE

CWE-390 - Detection of Error Condition Without Action

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6996 records in the last 180 days details

References

9 references

URL	Tags
https://git.kernel.org/stable/c/ae7e95638d956d556…
https://git.kernel.org/stable/c/1d7f07df450bac330…
https://git.kernel.org/stable/c/76641449b28979ebd…
https://git.kernel.org/stable/c/9f1cbca178c03188e…
https://git.kernel.org/stable/c/eb34e243df57e32f4…
https://git.kernel.org/stable/c/77d55bc8675ee851e…
https://git.kernel.org/stable/c/46271895ddfb1ba41…
https://git.kernel.org/stable/c/915b692e6cb723aac…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

3 products

Vendor	Product	Version
Linux	Linux	Affected: 5a1436beec5744029f3ac90b6fe71a698dcd6155 , < ae7e95638d956d556d74b9abb9e780d3bd3dcd9e (git) Affected: 5a1436beec5744029f3ac90b6fe71a698dcd6155 , < 1d7f07df450bac3301938fbc4251f2611be4084e (git) Affected: 5a1436beec5744029f3ac90b6fe71a698dcd6155 , < 76641449b28979ebd6c02e9598367e119e385236 (git) Affected: 5a1436beec5744029f3ac90b6fe71a698dcd6155 , < 9f1cbca178c03188e201ed175251372149bb25f2 (git) Affected: 5a1436beec5744029f3ac90b6fe71a698dcd6155 , < eb34e243df57e32f4c08fa191f3602ea19076276 (git) Affected: 5a1436beec5744029f3ac90b6fe71a698dcd6155 , < 77d55bc8675ee851ed639dc9be77325a8024cf67 (git) Affected: 5a1436beec5744029f3ac90b6fe71a698dcd6155 , < 46271895ddfb1ba41f89f7e0dffbe9c2bcf7380a (git) Affected: 5a1436beec5744029f3ac90b6fe71a698dcd6155 , < 915b692e6cb723aac658c25eb82c58fd81235110 (git)
Linux	Linux	Affected: 2.6.34 Unaffected: 0 , < 2.6.34 (semver) Unaffected: 5.10.258 , ≤ 5.10.* (semver) Unaffected: 5.15.209 , ≤ 5.15.* (semver) Unaffected: 6.1.175 , ≤ 6.1.* (semver) Unaffected: 6.6.140 , ≤ 6.6.* (semver) Unaffected: 6.12.86 , ≤ 6.12.* (semver) Unaffected: 6.18.27 , ≤ 6.18.* (semver) Unaffected: 7.0.4 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix)
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T01:19:26.688Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html"
          }
        ],
        "x_adpType": "supplier"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-43493",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-16T15:17:44.453814Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-390",
                "description": "CWE-390 Detection of Error Condition Without Action",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T19:26:37.700Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "crypto/pcrypt.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ae7e95638d956d556d74b9abb9e780d3bd3dcd9e",
              "status": "affected",
              "version": "5a1436beec5744029f3ac90b6fe71a698dcd6155",
              "versionType": "git"
            },
            {
              "lessThan": "1d7f07df450bac3301938fbc4251f2611be4084e",
              "status": "affected",
              "version": "5a1436beec5744029f3ac90b6fe71a698dcd6155",
              "versionType": "git"
            },
            {
              "lessThan": "76641449b28979ebd6c02e9598367e119e385236",
              "status": "affected",
              "version": "5a1436beec5744029f3ac90b6fe71a698dcd6155",
              "versionType": "git"
            },
            {
              "lessThan": "9f1cbca178c03188e201ed175251372149bb25f2",
              "status": "affected",
              "version": "5a1436beec5744029f3ac90b6fe71a698dcd6155",
              "versionType": "git"
            },
            {
              "lessThan": "eb34e243df57e32f4c08fa191f3602ea19076276",
              "status": "affected",
              "version": "5a1436beec5744029f3ac90b6fe71a698dcd6155",
              "versionType": "git"
            },
            {
              "lessThan": "77d55bc8675ee851ed639dc9be77325a8024cf67",
              "status": "affected",
              "version": "5a1436beec5744029f3ac90b6fe71a698dcd6155",
              "versionType": "git"
            },
            {
              "lessThan": "46271895ddfb1ba41f89f7e0dffbe9c2bcf7380a",
              "status": "affected",
              "version": "5a1436beec5744029f3ac90b6fe71a698dcd6155",
              "versionType": "git"
            },
            {
              "lessThan": "915b692e6cb723aac658c25eb82c58fd81235110",
              "status": "affected",
              "version": "5a1436beec5744029f3ac90b6fe71a698dcd6155",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "crypto/pcrypt.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.34"
            },
            {
              "lessThan": "2.6.34",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.86",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.27",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.86",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.27",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.4",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: pcrypt - Fix handling of MAY_BACKLOG requests\n\nMAY_BACKLOG requests can return EBUSY.  Handle them by checking\nfor that value and filtering out EINPROGRESS notifications."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - pcrypt AEAD can sit under network-facing kernel crypto consumers such as kTLS/TIPC that process peer-supplied records or packets. In the highest reasonable deployment, a remote peer can drive the vulnerable encrypt/decrypt path through network traffic.\nAC:L - The trigger is child crypto backlog behavior under `CRYPTO_TFM_REQ_MAY_BACKLOG`; an attacker can induce queue pressure with concurrent requests or traffic. There is no race that depends on conditions outside the attacker\u0027s control.\nPR:N - The network-facing path requires no kernel privileges from the remote peer. The local AF_ALG AEAD path also has no capability gate, but the higher-severity network scenario is defensible.\nUI:N - No victim interaction is required once the affected crypto consumer is configured. The attacker only sends data or submits crypto requests.\nS:U - The bug corrupts kernel crypto/request state within the same kernel security authority. It is not a VM escape, IOMMU bypass, or other scope-changing boundary crossing.\nC:H - Mishandling `-EBUSY` can complete and free the request while the child request remains queued, leading to use-after-free on later callbacks. A kernel UAF is reasonably exploitable for high-impact information disclosure.\nI:H - The stale callback reuses freed request/padata memory and can drive list operations and completion paths on attacker-reclaimed objects. This is memory corruption with a plausible path to arbitrary write or control-flow corruption.\nA:H - At minimum, the premature completion and later queued callback can dereference or manipulate freed kernel memory. That can produce kernel oops/panic or list corruption, giving high availability impact."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:28:16.602Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ae7e95638d956d556d74b9abb9e780d3bd3dcd9e"
        },
        {
          "url": "https://git.kernel.org/stable/c/1d7f07df450bac3301938fbc4251f2611be4084e"
        },
        {
          "url": "https://git.kernel.org/stable/c/76641449b28979ebd6c02e9598367e119e385236"
        },
        {
          "url": "https://git.kernel.org/stable/c/9f1cbca178c03188e201ed175251372149bb25f2"
        },
        {
          "url": "https://git.kernel.org/stable/c/eb34e243df57e32f4c08fa191f3602ea19076276"
        },
        {
          "url": "https://git.kernel.org/stable/c/77d55bc8675ee851ed639dc9be77325a8024cf67"
        },
        {
          "url": "https://git.kernel.org/stable/c/46271895ddfb1ba41f89f7e0dffbe9c2bcf7380a"
        },
        {
          "url": "https://git.kernel.org/stable/c/915b692e6cb723aac658c25eb82c58fd81235110"
        }
      ],
      "title": "crypto: pcrypt - Fix handling of MAY_BACKLOG requests",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43493",
    "datePublished": "2026-05-19T10:44:25.402Z",
    "dateReserved": "2026-05-01T14:12:56.013Z",
    "dateUpdated": "2026-10-19T19:26:37.700Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-63920 (GCVE-0-2026-63920)

Vulnerability from cvelistv5 – Published: 2026-07-19 14:55 – Updated: 2026-10-19 20:17

Title

ipv6: validate extension header length before copying to cmsg

Summary

In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header length before copying to cmsg ip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR} cmsgs (and their IPV6_2292* legacy counterparts) by trusting the on-wire hdrlen byte (ptr[1]) when computing the put_cmsg() length. The length was validated only at parse time (ipv6_parse_hopopts(), etc.). An nftables payload-write expression can rewrite hdrlen after parsing and before the skb reaches recvmsg; the write itself is in-bounds but put_cmsg() then reads up to ((hdrlen+1) << 3) = 2040 bytes from an 8-byte header. nftables is reachable from an unprivileged user namespace, so this is an unprivileged slab-out-of-bounds read: BUG: KASAN: slab-out-of-bounds in put_cmsg+0x3ac/0x540 put_cmsg+0x3ac/0x540 udpv6_recvmsg+0xca0/0x1250 sock_recvmsg+0xdf/0x190 ____sys_recvmsg+0x1b1/0x620 Add ipv6_get_exthdr_len() which validates that at least two bytes are accessible before reading the hdrlen field, then checks the computed length against skb_tail_pointer(skb), returning 0 on failure. Extension headers are kept in the linear skb area by pskb_may_pull() during input, so skb_tail_pointer() is the correct bound. Use ipv6_get_exthdr_len() at all non-AH call sites: the five standalone cmsg blocks (HbH, 2292HbH, 2292DSTOPTS x2, 2292RTHDR) and the three standard cases in the extension-header walk loop (DSTOPTS, ROUTING, default). AH retains an inline bounds check because its length formula differs ((ptr[1]+2)<<2). The walk loop also gets a pre-read bounds check at the top to validate ptr before any case accesses ptr[0] or ptr[1]. When the walk loop detects a corrupted header, return from the function instead of continuing to process later socket options.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-16 15:33 UTC

CWE

CWE-125 - Out-of-bounds Read

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6996 records in the last 180 days details

References

8 references

URL	Tags
https://git.kernel.org/stable/c/81394827dfb72772c…
https://git.kernel.org/stable/c/931b4a1f13408c250…
https://git.kernel.org/stable/c/08464413e628803bd…
https://git.kernel.org/stable/c/a29768d56eb3798c0…
https://git.kernel.org/stable/c/0d330eff318c0f44d…
https://git.kernel.org/stable/c/a35daeabb43368623…
https://git.kernel.org/stable/c/eb18a1b1644e4cad9…
https://git.kernel.org/stable/c/dd433671fef381fda…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 81394827dfb72772c50d0ae3bdfa094428a5d76d (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 931b4a1f13408c2507719890f78f7227c34a0282 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 08464413e628803bd10cb1df68d0138665f2f885 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < a29768d56eb3798c052ad3281b05596e695a17af (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 0d330eff318c0f44d4fb0ad2c2aef38f87f24c90 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < a35daeabb433686234b010ebf7b53778dbd6c9b8 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < eb18a1b1644e4cad978df2131e2bb9a2e6886992 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < dd433671fef381fdaf7b530c631e6b782d66e224 (git)
Linux	Linux	Affected: 2.6.12 Unaffected: 0 , < 2.6.12 (semver) Unaffected: 5.10.259 , ≤ 5.10.* (semver) Unaffected: 5.15.210 , ≤ 5.15.* (semver) Unaffected: 6.1.176 , ≤ 6.1.* (semver) Unaffected: 6.6.143 , ≤ 6.6.* (semver) Unaffected: 6.12.93 , ≤ 6.12.* (semver) Unaffected: 6.18.35 , ≤ 6.18.* (semver) Unaffected: 7.0.12 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-63920",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-16T15:33:23.448048Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T20:17:56.265Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/datagram.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "81394827dfb72772c50d0ae3bdfa094428a5d76d",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "931b4a1f13408c2507719890f78f7227c34a0282",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "08464413e628803bd10cb1df68d0138665f2f885",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "a29768d56eb3798c052ad3281b05596e695a17af",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "0d330eff318c0f44d4fb0ad2c2aef38f87f24c90",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "a35daeabb433686234b010ebf7b53778dbd6c9b8",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "eb18a1b1644e4cad978df2131e2bb9a2e6886992",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "dd433671fef381fdaf7b530c631e6b782d66e224",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/datagram.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.12"
            },
            {
              "lessThan": "2.6.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.259",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.210",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.176",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.143",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.93",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.35",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.259",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.210",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.176",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.143",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.93",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.35",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.12",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: validate extension header length before copying to cmsg\n\nip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR}\ncmsgs (and their IPV6_2292* legacy counterparts) by trusting the\non-wire hdrlen byte (ptr[1]) when computing the put_cmsg() length.\nThe length was validated only at parse time (ipv6_parse_hopopts(),\netc.).  An nftables payload-write expression can rewrite hdrlen after\nparsing and before the skb reaches recvmsg; the write itself is\nin-bounds but put_cmsg() then reads up to ((hdrlen+1) \u003c\u003c 3) = 2040\nbytes from an 8-byte header.  nftables is reachable from an\nunprivileged user namespace, so this is an unprivileged\nslab-out-of-bounds read:\n\n  BUG: KASAN: slab-out-of-bounds in put_cmsg+0x3ac/0x540\n   put_cmsg+0x3ac/0x540\n   udpv6_recvmsg+0xca0/0x1250\n   sock_recvmsg+0xdf/0x190\n   ____sys_recvmsg+0x1b1/0x620\n\nAdd ipv6_get_exthdr_len() which validates that at least two bytes\nare accessible before reading the hdrlen field, then checks the\ncomputed length against skb_tail_pointer(skb), returning 0 on\nfailure.  Extension headers are kept in the linear skb area by\npskb_may_pull() during input, so skb_tail_pointer() is the correct\nbound.\n\nUse ipv6_get_exthdr_len() at all non-AH call sites: the five\nstandalone cmsg blocks (HbH, 2292HbH, 2292DSTOPTS x2, 2292RTHDR)\nand the three standard cases in the extension-header walk loop\n(DSTOPTS, ROUTING, default).  AH retains an inline bounds check\nbecause its length formula differs ((ptr[1]+2)\u003c\u003c2).\n\nThe walk loop also gets a pre-read bounds check at the top to\nvalidate ptr before any case accesses ptr[0] or ptr[1].\n\nWhen the walk loop detects a corrupted header, return from the\nfunction instead of continuing to process later socket options."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - Exploitation requires local syscalls (nftables netlink to install a payload-set rule, setsockopt for IPV6_RECV* options, and recvmsg). Although the trigger packet is received over IPv6, the mandatory nftables corruption step is classified as Local per kernel guidance.\nAC:L - The attacker fully controls the nftables payload-set rule, the on-wire extension header, socket receive options, and the recvmsg call, making the slab out-of-bounds read reliably reproducible without races or external conditions.\nPR:L - An unprivileged local user can create a user+network namespace, obtain CAP_NET_ADMIN there, configure nftables, open a UDPv6/raw socket with extension-header cmsg options, and trigger the bug without real root in the initial namespace.\nUI:N - No victim interaction is required; the attacker can send the crafted IPv6 datagram and call recvmsg on their own socket to trigger the out-of-bounds read.\nS:U - Impact is confined to kernel memory disclosure and potential kernel instability within the same kernel security domain; it does not cross a VM/host or IOMMU boundary.\nC:H - put_cmsg() can copy up to 2040 bytes past the actual extension header into userspace ancillary data, leaking adjacent slab/kernel memory (confirmed by KASAN slab-out-of-bounds in put_cmsg).\nI:N - The bug is an out-of-bounds read that copies kernel data to userspace; it does not modify kernel memory, corrupt control structures, or provide a write primitive.\nA:H - The out-of-bounds slab read can provoke a KASAN fault/kernel oops during put_cmsg(), and repeated triggering can deny availability of the affected system."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:37:14.814Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/81394827dfb72772c50d0ae3bdfa094428a5d76d"
        },
        {
          "url": "https://git.kernel.org/stable/c/931b4a1f13408c2507719890f78f7227c34a0282"
        },
        {
          "url": "https://git.kernel.org/stable/c/08464413e628803bd10cb1df68d0138665f2f885"
        },
        {
          "url": "https://git.kernel.org/stable/c/a29768d56eb3798c052ad3281b05596e695a17af"
        },
        {
          "url": "https://git.kernel.org/stable/c/0d330eff318c0f44d4fb0ad2c2aef38f87f24c90"
        },
        {
          "url": "https://git.kernel.org/stable/c/a35daeabb433686234b010ebf7b53778dbd6c9b8"
        },
        {
          "url": "https://git.kernel.org/stable/c/eb18a1b1644e4cad978df2131e2bb9a2e6886992"
        },
        {
          "url": "https://git.kernel.org/stable/c/dd433671fef381fdaf7b530c631e6b782d66e224"
        }
      ],
      "title": "ipv6: validate extension header length before copying to cmsg",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-63920",
    "datePublished": "2026-07-19T14:55:22.813Z",
    "dateReserved": "2026-07-19T07:54:57.020Z",
    "dateUpdated": "2026-10-19T20:17:56.265Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-63922 (GCVE-0-2026-63922)

Vulnerability from cvelistv5 – Published: 2026-07-19 14:55 – Updated: 2026-10-19 20:17

Title

ipv6: exthdrs: refresh nh after handling HAO option

Summary

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs. ipv6_dest_hao() may call pskb_expand_head() for a cloned skb, which can move the skb head and invalidate the cached network header pointer. Refresh nh after ipv6_dest_hao() returns so any trailing padding or TLVs are parsed from the current skb head. This matches the existing pattern used in ip6_parse_tlv() after helpers that can modify skb header storage.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-16 15:33 UTC

CWE

CWE-416 - Use After Free

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6996 records in the last 180 days details

References

8 references

URL	Tags
https://git.kernel.org/stable/c/b3ac54e5c905f86d2…
https://git.kernel.org/stable/c/f8aabed3ff3e98692…
https://git.kernel.org/stable/c/1a11eb7431e3d2882…
https://git.kernel.org/stable/c/12d957979e4a80016…
https://git.kernel.org/stable/c/ff375ed1cba813923…
https://git.kernel.org/stable/c/751db1b802a067b7f…
https://git.kernel.org/stable/c/9b6dcc0a39fd71752…
https://git.kernel.org/stable/c/f7b52afe3592eae66…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: a831f5bbc89a9978795504be9e1ff412043f8f77 , < b3ac54e5c905f86d22b502eacb5686a282c5659f (git) Affected: a831f5bbc89a9978795504be9e1ff412043f8f77 , < f8aabed3ff3e986920cf02a2a2785e08e586b234 (git) Affected: a831f5bbc89a9978795504be9e1ff412043f8f77 , < 1a11eb7431e3d2882f5bd5939c5a9bbc65ccf4d1 (git) Affected: a831f5bbc89a9978795504be9e1ff412043f8f77 , < 12d957979e4a800167842f1b42be6a606d227ebe (git) Affected: a831f5bbc89a9978795504be9e1ff412043f8f77 , < ff375ed1cba81392346c5bfbf0bb7a13b2946f99 (git) Affected: a831f5bbc89a9978795504be9e1ff412043f8f77 , < 751db1b802a067b7fff25880f4e9f9152a171538 (git) Affected: a831f5bbc89a9978795504be9e1ff412043f8f77 , < 9b6dcc0a39fd71752937f0b6b3973e1416085dcf (git) Affected: a831f5bbc89a9978795504be9e1ff412043f8f77 , < f7b52afe3592eae66e160586b45a3f2242972c63 (git)
Linux	Linux	Affected: 2.6.19 Unaffected: 0 , < 2.6.19 (semver) Unaffected: 5.10.259 , ≤ 5.10.* (semver) Unaffected: 5.15.210 , ≤ 5.15.* (semver) Unaffected: 6.1.176 , ≤ 6.1.* (semver) Unaffected: 6.6.143 , ≤ 6.6.* (semver) Unaffected: 6.12.93 , ≤ 6.12.* (semver) Unaffected: 6.18.35 , ≤ 6.18.* (semver) Unaffected: 7.0.12 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-63922",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-16T15:33:28.158927Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T20:17:56.594Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/exthdrs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "b3ac54e5c905f86d22b502eacb5686a282c5659f",
              "status": "affected",
              "version": "a831f5bbc89a9978795504be9e1ff412043f8f77",
              "versionType": "git"
            },
            {
              "lessThan": "f8aabed3ff3e986920cf02a2a2785e08e586b234",
              "status": "affected",
              "version": "a831f5bbc89a9978795504be9e1ff412043f8f77",
              "versionType": "git"
            },
            {
              "lessThan": "1a11eb7431e3d2882f5bd5939c5a9bbc65ccf4d1",
              "status": "affected",
              "version": "a831f5bbc89a9978795504be9e1ff412043f8f77",
              "versionType": "git"
            },
            {
              "lessThan": "12d957979e4a800167842f1b42be6a606d227ebe",
              "status": "affected",
              "version": "a831f5bbc89a9978795504be9e1ff412043f8f77",
              "versionType": "git"
            },
            {
              "lessThan": "ff375ed1cba81392346c5bfbf0bb7a13b2946f99",
              "status": "affected",
              "version": "a831f5bbc89a9978795504be9e1ff412043f8f77",
              "versionType": "git"
            },
            {
              "lessThan": "751db1b802a067b7fff25880f4e9f9152a171538",
              "status": "affected",
              "version": "a831f5bbc89a9978795504be9e1ff412043f8f77",
              "versionType": "git"
            },
            {
              "lessThan": "9b6dcc0a39fd71752937f0b6b3973e1416085dcf",
              "status": "affected",
              "version": "a831f5bbc89a9978795504be9e1ff412043f8f77",
              "versionType": "git"
            },
            {
              "lessThan": "f7b52afe3592eae66e160586b45a3f2242972c63",
              "status": "affected",
              "version": "a831f5bbc89a9978795504be9e1ff412043f8f77",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/exthdrs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.19"
            },
            {
              "lessThan": "2.6.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.259",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.210",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.176",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.143",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.93",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.35",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.259",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.210",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.176",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.143",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.93",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.35",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.12",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: exthdrs: refresh nh after handling HAO option\n\nip6_parse_tlv() caches skb_network_header(skb) in nh while walking\nIPv6 TLVs.\n\nipv6_dest_hao() may call pskb_expand_head() for a cloned skb, which can\nmove the skb head and invalidate the cached network header pointer.\nRefresh nh after ipv6_dest_hao() returns so any trailing padding or TLVs\nare parsed from the current skb head.\n\nThis matches the existing pattern used in ip6_parse_tlv() after helpers\nthat can modify skb header storage."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The bug is reached on the standard IPv6 input path (ipv6_rcv \u2192 ip6_input \u2192 ip6_protocol_deliver_rcu \u2192 ipv6_destopt_rcv) when a remotely sent IPv6 packet carries a Destination Options header processed by ip6_parse_tlv().\nAC:L - The attacker fully controls the crafted IPv6 Destination Options layout (HAO TLV followed by trailing TLVs/padding); once CONFIG_IPV6_MIP6 and matching XFRM state exist on the target, triggering the stale-pointer condition is a reliable single-packet attack without races or victim-specific timing.\nPR:N - No local privileges or authentication are required; any remote host that can deliver IPv6 traffic to a listening interface can reach this pre-authentication receive-path parser (destopt_protocol uses INET6_PROTO_NOPOLICY).\nUI:N - Exploitation requires only sending a malicious IPv6 packet; no victim interaction such as opening files, clicking links, or mounting filesystems is needed.\nS:U - Impact is confined to kernel memory corruption and privilege escalation within the kernel\u2019s security authority; it does not cross VM, container, or IOMMU boundaries.\nC:H - After pskb_expand_head() frees the old skb head, ip6_parse_tlv() continues parsing trailing TLVs through the stale nh pointer, causing out-of-bounds/use-after-free reads of kernel heap memory that can disclose sensitive kernel data.\nI:H - Use-after-free of the skb head buffer during TLV parsing is heap memory corruption that can be leveraged for arbitrary kernel writes and control-flow hijacking, not merely a bounded parse error.\nA:H - Reading through the stale network-header pointer into freed or invalid memory can cause kernel oops/panic or unrecoverable instability, satisfying high availability impact even before full exploitation."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:37:16.967Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/b3ac54e5c905f86d22b502eacb5686a282c5659f"
        },
        {
          "url": "https://git.kernel.org/stable/c/f8aabed3ff3e986920cf02a2a2785e08e586b234"
        },
        {
          "url": "https://git.kernel.org/stable/c/1a11eb7431e3d2882f5bd5939c5a9bbc65ccf4d1"
        },
        {
          "url": "https://git.kernel.org/stable/c/12d957979e4a800167842f1b42be6a606d227ebe"
        },
        {
          "url": "https://git.kernel.org/stable/c/ff375ed1cba81392346c5bfbf0bb7a13b2946f99"
        },
        {
          "url": "https://git.kernel.org/stable/c/751db1b802a067b7fff25880f4e9f9152a171538"
        },
        {
          "url": "https://git.kernel.org/stable/c/9b6dcc0a39fd71752937f0b6b3973e1416085dcf"
        },
        {
          "url": "https://git.kernel.org/stable/c/f7b52afe3592eae66e160586b45a3f2242972c63"
        }
      ],
      "title": "ipv6: exthdrs: refresh nh after handling HAO option",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-63922",
    "datePublished": "2026-07-19T14:55:24.268Z",
    "dateReserved": "2026-07-19T07:54:57.021Z",
    "dateUpdated": "2026-10-19T20:17:56.594Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-63924 (GCVE-0-2026-63924)

Vulnerability from cvelistv5 – Published: 2026-07-19 14:55 – Updated: 2026-10-19 20:17

Title

ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()

Summary

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers. Let's recompute nh pointer to make sure any change won't mess things up.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-16 15:33 UTC

CWE

CWE-822 - Untrusted Pointer Dereference

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6996 records in the last 180 days details

References

8 references

URL	Tags
https://git.kernel.org/stable/c/b3ac54e5c905f86d2…
https://git.kernel.org/stable/c/645b99b1a185c91a7…
https://git.kernel.org/stable/c/9e883eaa878f4337b…
https://git.kernel.org/stable/c/bddaa4dfc7f36e1ee…
https://git.kernel.org/stable/c/72af7beae774e46ed…
https://git.kernel.org/stable/c/c512e1c819dfbf6ae…
https://git.kernel.org/stable/c/2b56bbd928c030894…
https://git.kernel.org/stable/c/d47548a3663909593…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < b3ac54e5c905f86d22b502eacb5686a282c5659f (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 645b99b1a185c91a79bdac4c5de0f91b212d64f0 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 9e883eaa878f4337b5873c706efb5a192364ed18 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < bddaa4dfc7f36e1ee343a0622f69288af2b9ace9 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 72af7beae774e46ed543f3f2f267bf0a141bfcdd (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < c512e1c819dfbf6ae95ee7a44b65b9ad98979157 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < 2b56bbd928c030894c270cd33d60286326919458 (git) Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 , < d47548a36639095939f4747d4c43f2271366f565 (git)
Linux	Linux	Affected: 2.6.12 Unaffected: 0 , < 2.6.12 (semver) Unaffected: 5.10.259 , ≤ 5.10.* (semver) Unaffected: 5.15.210 , ≤ 5.15.* (semver) Unaffected: 6.1.176 , ≤ 6.1.* (semver) Unaffected: 6.6.143 , ≤ 6.6.* (semver) Unaffected: 6.12.93 , ≤ 6.12.* (semver) Unaffected: 6.18.35 , ≤ 6.18.* (semver) Unaffected: 7.0.12 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-63924",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-16T15:33:33.023391Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-822",
                "description": "CWE-822 Untrusted Pointer Dereference",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T20:17:56.915Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/exthdrs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "b3ac54e5c905f86d22b502eacb5686a282c5659f",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "645b99b1a185c91a79bdac4c5de0f91b212d64f0",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "9e883eaa878f4337b5873c706efb5a192364ed18",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "bddaa4dfc7f36e1ee343a0622f69288af2b9ace9",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "72af7beae774e46ed543f3f2f267bf0a141bfcdd",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "c512e1c819dfbf6ae95ee7a44b65b9ad98979157",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "2b56bbd928c030894c270cd33d60286326919458",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "d47548a36639095939f4747d4c43f2271366f565",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/exthdrs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.12"
            },
            {
              "lessThan": "2.6.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.259",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.210",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.176",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.143",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.93",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.35",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.259",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.210",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.176",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.143",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.93",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.35",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.12",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "2.6.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()\n\nipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers.\nLet\u0027s recompute nh pointer to make sure any change won\u0027t mess things up."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The bug is in the IPv6 input path (ipv6_rcv \u2192 ip6_rcv_core \u2192 ipv6_parse_hopopts) triggered by a crafted IPv6 packet with hop-by-hop options containing a Jumbo Payload TLV, reachable from any remote peer that can deliver IPv6 to the host.\nAC:L - An attacker fully controls the crafted IPv6 packet (HBH layout, jumbo length, trailing TLVs) and can send it repeatedly; once the skb is cloned/shared during receive and pskb_trim_rcsum reallocates the head, the stale-pointer UAF is deterministically triggered without races or victim-specific state.\nPR:N - No authentication or local privileges are required; any unauthenticated remote host that can send IPv6 traffic to a listening interface reaches the vulnerable receive handler with no capability or namespace checks along the path.\nUI:N - Exploitation requires only delivery of a malicious IPv6 packet and does not depend on any victim user action such as opening files, clicking links, or mounting filesystems.\nS:U - Impact is confined to kernel memory corruption and privilege escalation within the same kernel security domain; it does not cross a VM, container, or IOMMU boundary by itself.\nC:H - Continued HBH TLV parsing through the stale nh pointer is a use-after-free read of freed skb head memory, which per kernel guidance enables arbitrary kernel memory disclosure when the freed slab is reused.\nI:H - Stale-pointer UAF during TLV length/type parsing can yield unbounded out-of-bounds reads and corrupt subsequent parsing state, providing memory corruption primitives that can be developed into arbitrary kernel writes or code execution.\nA:H - Dereferencing the freed network-header pointer during TLV parsing can cause immediate kernel oops/panic from invalid memory access, and UAF-triggered parsing errors reliably drop or crash the receive path."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:37:19.118Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/b3ac54e5c905f86d22b502eacb5686a282c5659f"
        },
        {
          "url": "https://git.kernel.org/stable/c/645b99b1a185c91a79bdac4c5de0f91b212d64f0"
        },
        {
          "url": "https://git.kernel.org/stable/c/9e883eaa878f4337b5873c706efb5a192364ed18"
        },
        {
          "url": "https://git.kernel.org/stable/c/bddaa4dfc7f36e1ee343a0622f69288af2b9ace9"
        },
        {
          "url": "https://git.kernel.org/stable/c/72af7beae774e46ed543f3f2f267bf0a141bfcdd"
        },
        {
          "url": "https://git.kernel.org/stable/c/c512e1c819dfbf6ae95ee7a44b65b9ad98979157"
        },
        {
          "url": "https://git.kernel.org/stable/c/2b56bbd928c030894c270cd33d60286326919458"
        },
        {
          "url": "https://git.kernel.org/stable/c/d47548a36639095939f4747d4c43f2271366f565"
        }
      ],
      "title": "ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-63924",
    "datePublished": "2026-07-19T14:55:25.702Z",
    "dateReserved": "2026-07-19T07:54:57.021Z",
    "dateUpdated": "2026-10-19T20:17:56.915Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:85000

CVE-2025-68745 (GCVE-0-2025-68745)

CVE-2026-31581 (GCVE-0-2026-31581)

CVE-2026-43450 (GCVE-0-2026-43450)

CVE-2026-43493 (GCVE-0-2026-43493)

CVE-2026-63920 (GCVE-0-2026-63920)

CVE-2026-63922 (GCVE-0-2026-63922)

CVE-2026-63924 (GCVE-0-2026-63924)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour