{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Red Hat Enterprise Linux for x86_64 10 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 9 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian 9 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for ARM 64 10 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian 10 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - AUS 9.6 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - AUS 8.6 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian 8 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems 8 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - TUS 8.6 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - TUS 8.8 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - AUS 9.4 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for ARM 64 8 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for x86_64 8 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 9 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for x86_64 10 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - AUS 8.4 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Real Time for NFV 8 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - AUS 9.2 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 8 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems 9 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 8 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for x86_64 9 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Real Time 8 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 10 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems 10 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for ARM 64 9 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-31402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31402"
    },
    {
      "name": "CVE-2025-68741",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68741"
    },
    {
      "name": "CVE-2026-23136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23136"
    },
    {
      "name": "CVE-2026-31431",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31431"
    },
    {
      "name": "CVE-2026-23401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23401"
    },
    {
      "name": "CVE-2025-40252",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40252"
    },
    {
      "name": "CVE-2026-23270",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23270"
    },
    {
      "name": "CVE-2025-37861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-37861"
    },
    {
      "name": "CVE-2026-23191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23191"
    },
    {
      "name": "CVE-2025-68724",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68724"
    },
    {
      "name": "CVE-2024-41073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-41073"
    },
    {
      "name": "CVE-2026-23243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23243"
    },
    {
      "name": "CVE-2026-23193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23193"
    },
    {
      "name": "CVE-2026-31419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31419"
    },
    {
      "name": "CVE-2026-31532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31532"
    },
    {
      "name": "CVE-2024-53216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-53216"
    },
    {
      "name": "CVE-2026-23097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23097"
    },
    {
      "name": "CVE-2025-71238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71238"
    }
  ],
  "initial_release_date": "2026-05-07T00:00:00",
  "last_revision_date": "2026-05-07T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0549",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-05-07T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau Linux de Red Hat. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Red Hat",
  "vendor_advisories": [
    {
      "published_at": "2026-05-06",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:14301",
      "url": "https://access.redhat.com/errata/RHSA-2026:14301"
    },
    {
      "published_at": "2026-05-06",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:14339",
      "url": "https://access.redhat.com/errata/RHSA-2026:14339"
    },
    {
      "published_at": "2026-05-06",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:13932",
      "url": "https://access.redhat.com/errata/RHSA-2026:13932"
    },
    {
      "published_at": "2026-05-05",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:13664",
      "url": "https://access.redhat.com/errata/RHSA-2026:13664"
    },
    {
      "published_at": "2026-05-05",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:13681",
      "url": "https://access.redhat.com/errata/RHSA-2026:13681"
    },
    {
      "published_at": "2026-05-04",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:13565",
      "url": "https://access.redhat.com/errata/RHSA-2026:13565"
    },
    {
      "published_at": "2026-05-05",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:13577",
      "url": "https://access.redhat.com/errata/RHSA-2026:13577"
    },
    {
      "published_at": "2026-05-05",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:13887",
      "url": "https://access.redhat.com/errata/RHSA-2026:13887"
    },
    {
      "published_at": "2026-05-06",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:14137",
      "url": "https://access.redhat.com/errata/RHSA-2026:14137"
    },
    {
      "published_at": "2026-05-05",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:13578",
      "url": "https://access.redhat.com/errata/RHSA-2026:13578"
    },
    {
      "published_at": "2026-05-06",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:14165",
      "url": "https://access.redhat.com/errata/RHSA-2026:14165"
    },
    {
      "published_at": "2026-05-06",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:14230",
      "url": "https://access.redhat.com/errata/RHSA-2026:14230"
    },
    {
      "published_at": "2026-05-05",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:13734",
      "url": "https://access.redhat.com/errata/RHSA-2026:13734"
    },
    {
      "published_at": "2026-05-04",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:13566",
      "url": "https://access.redhat.com/errata/RHSA-2026:13566"
    },
    {
      "published_at": "2026-05-06",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:13936",
      "url": "https://access.redhat.com/errata/RHSA-2026:13936"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Debian bullsey versions ant\u00e9rieures 5.10.251-4",
      "product": {
        "name": "Debian",
        "vendor": {
          "name": "Debian",
          "scada": false
        }
      }
    },
    {
      "description": "Debian trixie versions ant\u00e9rieures \u00e0 6.12.86-1",
      "product": {
        "name": "Debian",
        "vendor": {
          "name": "Debian",
          "scada": false
        }
      }
    },
    {
      "description": "Debian bullsey versions ant\u00e9rieures \u00e0 6.1.170-3~deb11u1",
      "product": {
        "name": "Debian",
        "vendor": {
          "name": "Debian",
          "scada": false
        }
      }
    },
    {
      "description": "Debian bookworm versions ant\u00e9rieures \u00e0 6.1.170-3",
      "product": {
        "name": "Debian",
        "vendor": {
          "name": "Debian",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-23468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23468"
    },
    {
      "name": "CVE-2026-43284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43284"
    },
    {
      "name": "CVE-2025-38584",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38584"
    },
    {
      "name": "CVE-2026-43500",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43500"
    },
    {
      "name": "CVE-2026-31419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31419"
    },
    {
      "name": "CVE-2026-31715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31715"
    },
    {
      "name": "CVE-2026-31709",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31709"
    }
  ],
  "initial_release_date": "2026-05-15T00:00:00",
  "last_revision_date": "2026-05-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0605",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-05-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau Linux de Debian. Elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Debian ",
  "vendor_advisories": [
    {
      "published_at": "2026-05-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Debian LTS msg00016",
      "url": "https://lists.debian.org/debian-lts-announce/2026/05/msg00016.html"
    },
    {
      "published_at": "2026-05-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Debian msg0016",
      "url": "https://lists.debian.org/debian-security-announce/2026/msg00164.html"
    },
    {
      "published_at": "2026-05-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Debian msg00169",
      "url": "https://lists.debian.org/debian-security-announce/2026/msg00169.html"
    },
    {
      "published_at": "2026-05-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Debian LTS msg00018",
      "url": "https://lists.debian.org/debian-lts-announce/2026/05/msg00018.html"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Ubuntu 16.04 ESM",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 20.04 ESM",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 24.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 18.04 ESM",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 25.10",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 14.04 ESM",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 22.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-23198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23198"
    },
    {
      "name": "CVE-2026-43078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43078"
    },
    {
      "name": "CVE-2024-50142",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50142"
    },
    {
      "name": "CVE-2026-23202",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23202"
    },
    {
      "name": "CVE-2026-23260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23260"
    },
    {
      "name": "CVE-2026-23167",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23167"
    },
    {
      "name": "CVE-2026-23129",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23129"
    },
    {
      "name": "CVE-2025-38201",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38201"
    },
    {
      "name": "CVE-2025-71134",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71134"
    },
    {
      "name": "CVE-2026-23098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23098"
    },
    {
      "name": "CVE-2025-68749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68749"
    },
    {
      "name": "CVE-2025-71139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71139"
    },
    {
      "name": "CVE-2026-23126",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23126"
    },
    {
      "name": "CVE-2026-23054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23054"
    },
    {
      "name": "CVE-2026-23159",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23159"
    },
    {
      "name": "CVE-2025-68725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68725"
    },
    {
      "name": "CVE-2023-2640",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2640"
    },
    {
      "name": "CVE-2026-23069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23069"
    },
    {
      "name": "CVE-2023-53421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-53421"
    },
    {
      "name": "CVE-2026-22992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22992"
    },
    {
      "name": "CVE-2025-71191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71191"
    },
    {
      "name": "CVE-2025-40039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40039"
    },
    {
      "name": "CVE-2026-23020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23020"
    },
    {
      "name": "CVE-2026-23187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23187"
    },
    {
      "name": "CVE-2026-23136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23136"
    },
    {
      "name": "CVE-2026-23139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23139"
    },
    {
      "name": "CVE-2025-71189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71189"
    },
    {
      "name": "CVE-2025-38408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38408"
    },
    {
      "name": "CVE-2025-71088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71088"
    },
    {
      "name": "CVE-2026-23179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23179"
    },
    {
      "name": "CVE-2026-23090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23090"
    },
    {
      "name": "CVE-2026-23035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23035"
    },
    {
      "name": "CVE-2026-23258",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23258"
    },
    {
      "name": "CVE-2026-23064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23064"
    },
    {
      "name": "CVE-2025-38591",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38591"
    },
    {
      "name": "CVE-2026-23061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23061"
    },
    {
      "name": "CVE-2026-23059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23059"
    },
    {
      "name": "CVE-2026-23135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23135"
    },
    {
      "name": "CVE-2026-23047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23047"
    },
    {
      "name": "CVE-2025-68365",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68365"
    },
    {
      "name": "CVE-2026-23119",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23119"
    },
    {
      "name": "CVE-2026-23173",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23173"
    },
    {
      "name": "CVE-2026-23123",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23123"
    },
    {
      "name": "CVE-2026-31431",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31431"
    },
    {
      "name": "CVE-2026-23094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23094"
    },
    {
      "name": "CVE-2026-23049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23049"
    },
    {
      "name": "CVE-2025-71090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71090"
    },
    {
      "name": "CVE-2026-23101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23101"
    },
    {
      "name": "CVE-2026-23099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23099"
    },
    {
      "name": "CVE-2025-71142",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71142"
    },
    {
      "name": "CVE-2023-53520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-53520"
    },
    {
      "name": "CVE-2026-23085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23085"
    },
    {
      "name": "CVE-2026-23209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23209"
    },
    {
      "name": "CVE-2025-40082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40082"
    },
    {
      "name": "CVE-2026-23150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23150"
    },
    {
      "name": "CVE-2026-23163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23163"
    },
    {
      "name": "CVE-2024-50304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50304"
    },
    {
      "name": "CVE-2026-23057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23057"
    },
    {
      "name": "CVE-2025-37926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-37926"
    },
    {
      "name": "CVE-2026-43033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43033"
    },
    {
      "name": "CVE-2026-23166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23166"
    },
    {
      "name": "CVE-2026-22991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22991"
    },
    {
      "name": "CVE-2026-23264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23264"
    },
    {
      "name": "CVE-2025-71144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71144"
    },
    {
      "name": "CVE-2026-23256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23256"
    },
    {
      "name": "CVE-2026-23116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23116"
    },
    {
      "name": "CVE-2025-71200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71200"
    },
    {
      "name": "CVE-2026-22980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22980"
    },
    {
      "name": "CVE-2026-23172",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23172"
    },
    {
      "name": "CVE-2026-23133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23133"
    },
    {
      "name": "CVE-2026-23131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23131"
    },
    {
      "name": "CVE-2026-23212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23212"
    },
    {
      "name": "CVE-2026-23032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23032"
    },
    {
      "name": "CVE-2026-23170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23170"
    },
    {
      "name": "CVE-2026-23204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23204"
    },
    {
      "name": "CVE-2026-23019",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23019"
    },
    {
      "name": "CVE-2026-23273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23273"
    },
    {
      "name": "CVE-2025-71188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71188"
    },
    {
      "name": "CVE-2026-23125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23125"
    },
    {
      "name": "CVE-2025-38057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38057"
    },
    {
      "name": "CVE-2026-23005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23005"
    },
    {
      "name": "CVE-2026-23214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23214"
    },
    {
      "name": "CVE-2026-23030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23030"
    },
    {
      "name": "CVE-2026-23178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23178"
    },
    {
      "name": "CVE-2026-22997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22997"
    },
    {
      "name": "CVE-2023-53662",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-53662"
    },
    {
      "name": "CVE-2025-71196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71196"
    },
    {
      "name": "CVE-2024-27388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27388"
    },
    {
      "name": "CVE-2026-31533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31533"
    },
    {
      "name": "CVE-2026-23191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23191"
    },
    {
      "name": "CVE-2026-23078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23078"
    },
    {
      "name": "CVE-2025-71220",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71220"
    },
    {
      "name": "CVE-2026-23103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23103"
    },
    {
      "name": "CVE-2025-71199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71199"
    },
    {
      "name": "CVE-2023-32629",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32629"
    },
    {
      "name": "CVE-2025-68358",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68358"
    },
    {
      "name": "CVE-2026-23180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23180"
    },
    {
      "name": "CVE-2026-23006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23006"
    },
    {
      "name": "CVE-2025-71195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71195"
    },
    {
      "name": "CVE-2026-22994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22994"
    },
    {
      "name": "CVE-2026-23083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23083"
    },
    {
      "name": "CVE-2026-23262",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23262"
    },
    {
      "name": "CVE-2026-23088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23088"
    },
    {
      "name": "CVE-2026-23108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23108"
    },
    {
      "name": "CVE-2025-71180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71180"
    },
    {
      "name": "CVE-2025-38232",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38232"
    },
    {
      "name": "CVE-2025-71194",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71194"
    },
    {
      "name": "CVE-2026-23200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23200"
    },
    {
      "name": "CVE-2026-22999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22999"
    },
    {
      "name": "CVE-2026-23068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23068"
    },
    {
      "name": "CVE-2026-23089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23089"
    },
    {
      "name": "CVE-2026-23216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23216"
    },
    {
      "name": "CVE-2025-71225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71225"
    },
    {
      "name": "CVE-2026-23071",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23071"
    },
    {
      "name": "CVE-2026-23056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23056"
    },
    {
      "name": "CVE-2026-43077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43077"
    },
    {
      "name": "CVE-2024-49938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49938"
    },
    {
      "name": "CVE-2026-23063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23063"
    },
    {
      "name": "CVE-2026-23073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23073"
    },
    {
      "name": "CVE-2026-23058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23058"
    },
    {
      "name": "CVE-2025-71182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71182"
    },
    {
      "name": "CVE-2026-23038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23038"
    },
    {
      "name": "CVE-2024-50008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50008"
    },
    {
      "name": "CVE-2026-22990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22990"
    },
    {
      "name": "CVE-2026-23000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23000"
    },
    {
      "name": "CVE-2025-71186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71186"
    },
    {
      "name": "CVE-2026-23176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23176"
    },
    {
      "name": "CVE-2026-23026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23026"
    },
    {
      "name": "CVE-2026-23128",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23128"
    },
    {
      "name": "CVE-2025-71190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71190"
    },
    {
      "name": "CVE-2026-23140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23140"
    },
    {
      "name": "CVE-2026-23107",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23107"
    },
    {
      "name": "CVE-2026-22978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22978"
    },
    {
      "name": "CVE-2025-71141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71141"
    },
    {
      "name": "CVE-2026-23146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23146"
    },
    {
      "name": "CVE-2026-23037",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23037"
    },
    {
      "name": "CVE-2026-23001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23001"
    },
    {
      "name": "CVE-2025-71224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71224"
    },
    {
      "name": "CVE-2026-23193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23193"
    },
    {
      "name": "CVE-2022-49033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49033"
    },
    {
      "name": "CVE-2023-54207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-54207"
    },
    {
      "name": "CVE-2026-23215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23215"
    },
    {
      "name": "CVE-2026-23025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23025"
    },
    {
      "name": "CVE-2026-23151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23151"
    },
    {
      "name": "CVE-2026-22982",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22982"
    },
    {
      "name": "CVE-2026-23205",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23205"
    },
    {
      "name": "CVE-2025-71222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71222"
    },
    {
      "name": "CVE-2026-31504",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31504"
    },
    {
      "name": "CVE-2026-23142",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23142"
    },
    {
      "name": "CVE-2026-23213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23213"
    },
    {
      "name": "CVE-2026-23091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23091"
    },
    {
      "name": "CVE-2025-71192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71192"
    },
    {
      "name": "CVE-2026-23121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23121"
    },
    {
      "name": "CVE-2026-23274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23274"
    },
    {
      "name": "CVE-2025-71152",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71152"
    },
    {
      "name": "CVE-2026-23144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23144"
    },
    {
      "name": "CVE-2026-23087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23087"
    },
    {
      "name": "CVE-2026-31419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31419"
    },
    {
      "name": "CVE-2025-71185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71185"
    },
    {
      "name": "CVE-2025-71268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71268"
    },
    {
      "name": "CVE-2026-23096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23096"
    },
    {
      "name": "CVE-2025-68351",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68351"
    },
    {
      "name": "CVE-2025-40149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40149"
    },
    {
      "name": "CVE-2025-40164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40164"
    },
    {
      "name": "CVE-2026-23164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23164"
    },
    {
      "name": "CVE-2026-23124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23124"
    },
    {
      "name": "CVE-2026-23257",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23257"
    },
    {
      "name": "CVE-2025-71160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71160"
    },
    {
      "name": "CVE-2024-58096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-58096"
    },
    {
      "name": "CVE-2025-71162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71162"
    },
    {
      "name": "CVE-2026-23075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23075"
    },
    {
      "name": "CVE-2026-23120",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23120"
    },
    {
      "name": "CVE-2025-68803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68803"
    },
    {
      "name": "CVE-2026-22996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22996"
    },
    {
      "name": "CVE-2026-23168",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23168"
    },
    {
      "name": "CVE-2024-50004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50004"
    },
    {
      "name": "CVE-2026-23105",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23105"
    },
    {
      "name": "CVE-2026-22976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22976"
    },
    {
      "name": "CVE-2024-35862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35862"
    },
    {
      "name": "CVE-2026-23141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23141"
    },
    {
      "name": "CVE-2026-23065",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23065"
    },
    {
      "name": "CVE-2026-23182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23182"
    },
    {
      "name": "CVE-2026-23086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23086"
    },
    {
      "name": "CVE-2025-38125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38125"
    },
    {
      "name": "CVE-2026-23261",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23261"
    },
    {
      "name": "CVE-2026-23156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23156"
    },
    {
      "name": "CVE-2025-71193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71193"
    },
    {
      "name": "CVE-2026-23095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23095"
    },
    {
      "name": "CVE-2025-71163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71163"
    },
    {
      "name": "CVE-2026-23062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23062"
    },
    {
      "name": "CVE-2026-23160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23160"
    },
    {
      "name": "CVE-2025-71155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71155"
    },
    {
      "name": "CVE-2026-22984",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22984"
    },
    {
      "name": "CVE-2026-23206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23206"
    },
    {
      "name": "CVE-2024-58097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-58097"
    },
    {
      "name": "CVE-2026-23033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23033"
    },
    {
      "name": "CVE-2026-22977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22977"
    },
    {
      "name": "CVE-2026-23145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23145"
    },
    {
      "name": "CVE-2026-23003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23003"
    },
    {
      "name": "CVE-2026-23076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23076"
    },
    {
      "name": "CVE-2025-68823",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68823"
    },
    {
      "name": "CVE-2026-23394",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23394"
    },
    {
      "name": "CVE-2026-23010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23010"
    },
    {
      "name": "CVE-2026-23112",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23112"
    },
    {
      "name": "CVE-2026-23084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23084"
    },
    {
      "name": "CVE-2026-23190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23190"
    },
    {
      "name": "CVE-2026-22979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22979"
    },
    {
      "name": "CVE-2026-23011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23011"
    },
    {
      "name": "CVE-2026-23110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23110"
    },
    {
      "name": "CVE-2025-68817",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68817"
    },
    {
      "name": "CVE-2026-23148",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23148"
    },
    {
      "name": "CVE-2025-71197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71197"
    },
    {
      "name": "CVE-2026-23031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23031"
    },
    {
      "name": "CVE-2025-71127",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71127"
    },
    {
      "name": "CVE-2026-23102",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23102"
    },
    {
      "name": "CVE-2026-22998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22998"
    },
    {
      "name": "CVE-2026-23050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23050"
    },
    {
      "name": "CVE-2025-68340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68340"
    },
    {
      "name": "CVE-2026-23113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23113"
    },
    {
      "name": "CVE-2026-23097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23097"
    },
    {
      "name": "CVE-2025-71198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71198"
    },
    {
      "name": "CVE-2026-23231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23231"
    },
    {
      "name": "CVE-2026-23021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23021"
    },
    {
      "name": "CVE-2026-23093",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23093"
    },
    {
      "name": "CVE-2025-71183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71183"
    },
    {
      "name": "CVE-2024-50060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-50060"
    },
    {
      "name": "CVE-2025-68211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68211"
    },
    {
      "name": "CVE-2026-23053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23053"
    },
    {
      "name": "CVE-2025-71184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71184"
    },
    {
      "name": "CVE-2026-23080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23080"
    },
    {
      "name": "CVE-2026-23351",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23351"
    },
    {
      "name": "CVE-2026-23254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23254"
    }
  ],
  "initial_release_date": "2026-05-22T00:00:00",
  "last_revision_date": "2026-05-22T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0638",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-05-22T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau Linux d\u0027Ubuntu. Elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux d\u0027Ubuntu",
  "vendor_advisories": [
    {
      "published_at": "2026-05-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8273-1",
      "url": "https://ubuntu.com/security/notices/USN-8273-1"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8289-1",
      "url": "https://ubuntu.com/security/notices/USN-8289-1"
    },
    {
      "published_at": "2026-05-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8278-1",
      "url": "https://ubuntu.com/security/notices/USN-8278-1"
    },
    {
      "published_at": "2026-05-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8275-1",
      "url": "https://ubuntu.com/security/notices/USN-8275-1"
    },
    {
      "published_at": "2026-05-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8280-1",
      "url": "https://ubuntu.com/security/notices/USN-8280-1"
    },
    {
      "published_at": "2026-05-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8279-1",
      "url": "https://ubuntu.com/security/notices/USN-8279-1"
    },
    {
      "published_at": "2026-05-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8254-3",
      "url": "https://ubuntu.com/security/notices/USN-8254-3"
    },
    {
      "published_at": "2026-05-21",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8291-1",
      "url": "https://ubuntu.com/security/notices/USN-8291-1"
    },
    {
      "published_at": "2026-05-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8277-1",
      "url": "https://ubuntu.com/security/notices/USN-8277-1"
    },
    {
      "published_at": "2026-05-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8255-3",
      "url": "https://ubuntu.com/security/notices/USN-8255-3"
    },
    {
      "published_at": "2026-05-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8274-1",
      "url": "https://ubuntu.com/security/notices/USN-8274-1"
    },
    {
      "published_at": "2026-05-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8281-1",
      "url": "https://ubuntu.com/security/notices/USN-8281-1"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - AUS 8.6 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian 8 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems 8 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - TUS 8.6 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - TUS 8.8 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for ARM 64 8 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for x86_64 8 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - AUS 8.4 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Real Time for NFV 8 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 8 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 8 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Real Time 8 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 10 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-43284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43284"
    },
    {
      "name": "CVE-2026-23401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23401"
    },
    {
      "name": "CVE-2025-38024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38024"
    },
    {
      "name": "CVE-2026-23191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23191"
    },
    {
      "name": "CVE-2025-21999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21999"
    },
    {
      "name": "CVE-2026-46300",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46300"
    },
    {
      "name": "CVE-2026-23243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23243"
    },
    {
      "name": "CVE-2026-31419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31419"
    },
    {
      "name": "CVE-2026-31532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31532"
    },
    {
      "name": "CVE-2026-46333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46333"
    },
    {
      "name": "CVE-2025-71238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71238"
    }
  ],
  "initial_release_date": "2026-05-22T00:00:00",
  "last_revision_date": "2026-05-22T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0640",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-05-22T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau Linux de Red Hat. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Red Hat",
  "vendor_advisories": [
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:19711",
      "url": "https://access.redhat.com/errata/RHSA-2026:19711"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:19664",
      "url": "https://access.redhat.com/errata/RHSA-2026:19664"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:19521",
      "url": "https://access.redhat.com/errata/RHSA-2026:19521"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:19540",
      "url": "https://access.redhat.com/errata/RHSA-2026:19540"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:19875",
      "url": "https://access.redhat.com/errata/RHSA-2026:19875"
    },
    {
      "published_at": "2026-05-21",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:20130",
      "url": "https://access.redhat.com/errata/RHSA-2026:20130"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:19705",
      "url": "https://access.redhat.com/errata/RHSA-2026:19705"
    },
    {
      "published_at": "2026-05-15",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:17795",
      "url": "https://access.redhat.com/errata/RHSA-2026:17795"
    },
    {
      "published_at": "2026-05-21",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:20051",
      "url": "https://access.redhat.com/errata/RHSA-2026:20051"
    },
    {
      "published_at": "2026-05-21",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:20299",
      "url": "https://access.redhat.com/errata/RHSA-2026:20299"
    },
    {
      "published_at": "2026-05-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2026:19666",
      "url": "https://access.redhat.com/errata/RHSA-2026:19666"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D97173A0-CD12-4773-B2F5-A9037AAB0383",
              "versionEndExcluding": "5.11",
              "versionStartIncluding": "5.10.94",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE141E86-782B-4D36-B214-2FB7AC66A083",
              "versionEndExcluding": "5.16",
              "versionStartIncluding": "5.15.17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7532EA4E-6958-4B4C-8270-4601DA8D95B6",
              "versionEndExcluding": "5.17",
              "versionStartIncluding": "5.16.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E9F33D27-F3AA-49EF-8A71-D0AA86C50602",
              "versionEndExcluding": "6.12.86",
              "versionStartIncluding": "5.17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9DF8BCE-36D3-475D-9D21-19E4F02F9029",
              "versionEndExcluding": "6.18.22",
              "versionStartIncluding": "6.13",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A2B9540-02D5-41B4-B16A-82AF66FD4F36",
              "versionEndExcluding": "6.19.12",
              "versionStartIncluding": "6.19",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "F253B622-8837-4245-BCE5-A7BF8FC76A16",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*",
              "matchCriteriaId": "F666C8D8-6538-46D4-B318-87610DE64C34",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*",
              "matchCriteriaId": "02259FDA-961B-47BC-AE7F-93D7EC6E90C2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*",
              "matchCriteriaId": "58A9FEFF-C040-420D-8F0A-BFDAAA1DF258",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*",
              "matchCriteriaId": "1D2315C0-D46F-4F85-9754-F9E5E11374A6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bonding: fix use-after-free in bond_xmit_broadcast()\n\nbond_xmit_broadcast() reuses the original skb for the last slave\n(determined by bond_is_last_slave()) and clones it for others.\nConcurrent slave enslave/release can mutate the slave list during\nRCU-protected iteration, changing which slave is \"last\" mid-loop.\nThis causes the original skb to be double-consumed (double-freed).\n\nReplace the racy bond_is_last_slave() check with a simple index\ncomparison (i + 1 == slaves_count) against the pre-snapshot slave\ncount taken via READ_ONCE() before the loop.  This preserves the\nzero-copy optimization for the last slave while making the \"last\"\ndetermination stable against concurrent list mutations.\n\nThe UAF can trigger the following crash:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in skb_clone\nRead of size 8 at addr ffff888100ef8d40 by task exploit/147\n\nCPU: 1 UID: 0 PID: 147 Comm: exploit Not tainted 7.0.0-rc3+ #4 PREEMPTLAZY\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl (lib/dump_stack.c:123)\n print_report (mm/kasan/report.c:379 mm/kasan/report.c:482)\n kasan_report (mm/kasan/report.c:597)\n skb_clone (include/linux/skbuff.h:1724 include/linux/skbuff.h:1792 include/linux/skbuff.h:3396 net/core/skbuff.c:2108)\n bond_xmit_broadcast (drivers/net/bonding/bond_main.c:5334)\n bond_start_xmit (drivers/net/bonding/bond_main.c:5567 drivers/net/bonding/bond_main.c:5593)\n dev_hard_start_xmit (include/linux/netdevice.h:5325 include/linux/netdevice.h:5334 net/core/dev.c:3871 net/core/dev.c:3887)\n __dev_queue_xmit (include/linux/netdevice.h:3601 net/core/dev.c:4838)\n ip6_finish_output2 (include/net/neighbour.h:540 include/net/neighbour.h:554 net/ipv6/ip6_output.c:136)\n ip6_finish_output (net/ipv6/ip6_output.c:208 net/ipv6/ip6_output.c:219)\n ip6_output (net/ipv6/ip6_output.c:250)\n ip6_send_skb (net/ipv6/ip6_output.c:1985)\n udp_v6_send_skb (net/ipv6/udp.c:1442)\n udpv6_sendmsg (net/ipv6/udp.c:1733)\n __sys_sendto (net/socket.c:730 net/socket.c:742 net/socket.c:2206)\n __x64_sys_sendto (net/socket.c:2209)\n do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)\n entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)\n \u003c/TASK\u003e\n\nAllocated by task 147:\n\nFreed by task 147:\n\nThe buggy address belongs to the object at ffff888100ef8c80\n which belongs to the cache skbuff_head_cache of size 224\nThe buggy address is located 192 bytes inside of\n freed 224-byte region [ffff888100ef8c80, ffff888100ef8d60)\n\nMemory state around the buggy address:\n ffff888100ef8c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc\n ffff888100ef8c80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n\u003effff888100ef8d00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n                                                    ^\n ffff888100ef8d80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb\n ffff888100ef8e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n=================================================================="
    }
  ],
  "id": "CVE-2026-31419",
  "lastModified": "2026-05-20T19:32:49.557",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "type": "Secondary"
      }
    ]
  },
  "published": "2026-04-13T14:16:11.447",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/2884bf72fb8f03409e423397319205de48adca16"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/3453882f36c40d2339267093676585a89808a73d"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/d4cc7e4c80b1634c7b1497574a2fdb18df6c026c"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/f5b94654a4a19891a8108d66ef166de6c028c6cd"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2026-31419"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-416"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-04-13T14:16:11Z",
    "severity": "HIGH"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bonding: fix use-after-free in bond_xmit_broadcast()\n\nbond_xmit_broadcast() reuses the original skb for the last slave\n(determined by bond_is_last_slave()) and clones it for others.\nConcurrent slave enslave/release can mutate the slave list during\nRCU-protected iteration, changing which slave is \"last\" mid-loop.\nThis causes the original skb to be double-consumed (double-freed).\n\nReplace the racy bond_is_last_slave() check with a simple index\ncomparison (i + 1 == slaves_count) against the pre-snapshot slave\ncount taken via READ_ONCE() before the loop.  This preserves the\nzero-copy optimization for the last slave while making the \"last\"\ndetermination stable against concurrent list mutations.\n\nThe UAF can trigger the following crash:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in skb_clone\nRead of size 8 at addr ffff888100ef8d40 by task exploit/147\n\nCPU: 1 UID: 0 PID: 147 Comm: exploit Not tainted 7.0.0-rc3+ #4 PREEMPTLAZY\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl (lib/dump_stack.c:123)\n print_report (mm/kasan/report.c:379 mm/kasan/report.c:482)\n kasan_report (mm/kasan/report.c:597)\n skb_clone (include/linux/skbuff.h:1724 include/linux/skbuff.h:1792 include/linux/skbuff.h:3396 net/core/skbuff.c:2108)\n bond_xmit_broadcast (drivers/net/bonding/bond_main.c:5334)\n bond_start_xmit (drivers/net/bonding/bond_main.c:5567 drivers/net/bonding/bond_main.c:5593)\n dev_hard_start_xmit (include/linux/netdevice.h:5325 include/linux/netdevice.h:5334 net/core/dev.c:3871 net/core/dev.c:3887)\n __dev_queue_xmit (include/linux/netdevice.h:3601 net/core/dev.c:4838)\n ip6_finish_output2 (include/net/neighbour.h:540 include/net/neighbour.h:554 net/ipv6/ip6_output.c:136)\n ip6_finish_output (net/ipv6/ip6_output.c:208 net/ipv6/ip6_output.c:219)\n ip6_output (net/ipv6/ip6_output.c:250)\n ip6_send_skb (net/ipv6/ip6_output.c:1985)\n udp_v6_send_skb (net/ipv6/udp.c:1442)\n udpv6_sendmsg (net/ipv6/udp.c:1733)\n __sys_sendto (net/socket.c:730 net/socket.c:742 net/socket.c:2206)\n __x64_sys_sendto (net/socket.c:2209)\n do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)\n entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)\n \u003c/TASK\u003e\n\nAllocated by task 147:\n\nFreed by task 147:\n\nThe buggy address belongs to the object at ffff888100ef8c80\n which belongs to the cache skbuff_head_cache of size 224\nThe buggy address is located 192 bytes inside of\n freed 224-byte region [ffff888100ef8c80, ffff888100ef8d60)\n\nMemory state around the buggy address:\n ffff888100ef8c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc\n ffff888100ef8c80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n\u003effff888100ef8d00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n                                                    ^\n ffff888100ef8d80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb\n ffff888100ef8e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n==================================================================",
  "id": "GHSA-47j5-hmhq-4c74",
  "modified": "2026-05-07T06:31:40Z",
  "published": "2026-04-13T15:31:42Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31419"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/2884bf72fb8f03409e423397319205de48adca16"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/3453882f36c40d2339267093676585a89808a73d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/d4cc7e4c80b1634c7b1497574a2fdb18df6c026c"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f5b94654a4a19891a8108d66ef166de6c028c6cd"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2026-31419 net: bonding: fix use-after-free in bond_xmit_broadcast() - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-31419.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "net: bonding: fix use-after-free in bond_xmit_broadcast()",
    "tracking": {
      "current_release_date": "2026-05-22T01:38:44.000Z",
      "generator": {
        "date": "2026-05-22T09:08:35.304Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2026-31419",
      "initial_release_date": "2026-04-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-04-14T01:02:22.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2026-04-29T14:56:36.000Z",
          "legacy_version": "2",
          "number": "2",
          "summary": "Information published."
        },
        {
          "date": "2026-05-06T14:52:08.000Z",
          "legacy_version": "3",
          "number": "3",
          "summary": "Information published."
        },
        {
          "date": "2026-05-11T01:49:00.000Z",
          "legacy_version": "4",
          "number": "4",
          "summary": "Information published."
        },
        {
          "date": "2026-05-17T14:50:06.000Z",
          "legacy_version": "5",
          "number": "5",
          "summary": "Information published."
        },
        {
          "date": "2026-05-22T01:38:44.000Z",
          "legacy_version": "5.1",
          "number": "6",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "6"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "azl3 kernel 0:6.6.134.1-2.azl3",
                "product": {
                  "name": "azl3 kernel 0:6.6.134.1-2.azl3",
                  "product_id": "4"
                }
              },
              {
                "category": "product_version_range",
                "name": "azl3 kernel 0:6.6.130.1-3.azl3",
                "product": {
                  "name": "azl3 kernel 0:6.6.130.1-3.azl3",
                  "product_id": "5"
                }
              },
              {
                "category": "product_version_range",
                "name": "azl3 kernel 0:6.6.137.1-2.azl3",
                "product": {
                  "name": "azl3 kernel 0:6.6.137.1-2.azl3",
                  "product_id": "3"
                }
              },
              {
                "category": "product_version_range",
                "name": "azl3 kernel 0:6.6.138.1-1.azl3",
                "product": {
                  "name": "azl3 kernel 0:6.6.138.1-1.azl3",
                  "product_id": "2"
                }
              },
              {
                "category": "product_version_range",
                "name": "azl3 kernel 0:6.6.139.1-1.azl3",
                "product": {
                  "name": "azl3 kernel 0:6.6.139.1-1.azl3",
                  "product_id": "1"
                }
              }
            ],
            "category": "product_name",
            "name": "kernel"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 kernel 0:6.6.134.1-2.azl3 as a component of Azure Linux 3.0",
          "product_id": "17084-4"
        },
        "product_reference": "4",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 kernel 0:6.6.130.1-3.azl3 as a component of Azure Linux 3.0",
          "product_id": "17084-5"
        },
        "product_reference": "5",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 kernel 0:6.6.137.1-2.azl3 as a component of Azure Linux 3.0",
          "product_id": "17084-3"
        },
        "product_reference": "3",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 kernel 0:6.6.138.1-1.azl3 as a component of Azure Linux 3.0",
          "product_id": "17084-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 kernel 0:6.6.139.1-1.azl3 as a component of Azure Linux 3.0",
          "product_id": "17084-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17084"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-31419",
      "notes": [
        {
          "category": "general",
          "text": "Linux",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "known_affected": [
          "17084-4",
          "17084-5",
          "17084-3",
          "17084-2",
          "17084-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-31419 net: bonding: fix use-after-free in bond_xmit_broadcast() - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-31419.json"
        }
      ],
      "remediations": [
        {
          "category": "none_available",
          "date": "2026-04-14T01:02:22.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-4"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-04-14T01:02:22.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-5"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-04-14T01:02:22.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-3"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-04-14T01:02:22.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-2"
          ]
        },
        {
          "category": "none_available",
          "date": "2026-04-14T01:02:22.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-1"
          ]
        }
      ],
      "title": "net: bonding: fix use-after-free in bond_xmit_broadcast()"
    }
  ]
}