{"schema":"vulnpedia.research/1","cve":"CVE-2026-64530","references":[{"url":"https://git.kernel.org/stable/c/5ed3d6f85991656667059d3fa5a1d683ac58c447","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:07.900Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:07.900Z","url":"https://git.kernel.org/stable/c/5ed3d6f85991656667059d3fa5a1d683ac58c447"},{"source":"nvd","sourceId":"CVE-2026-64530","modified":"2026-10-19T21:17:42.333","url":"https://git.kernel.org/stable/c/5ed3d6f85991656667059d3fa5a1d683ac58c447"}]},{"url":"https://git.kernel.org/stable/c/f42e8134a3a1074b834a574d404352f867ba994a","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:07.900Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:07.900Z","url":"https://git.kernel.org/stable/c/f42e8134a3a1074b834a574d404352f867ba994a"},{"source":"nvd","sourceId":"CVE-2026-64530","modified":"2026-10-19T21:17:42.333","url":"https://git.kernel.org/stable/c/f42e8134a3a1074b834a574d404352f867ba994a"}]},{"url":"https://git.kernel.org/stable/c/447d493034a9cf7bf13a2abac86d0573d907ec2f","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:07.900Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:07.900Z","url":"https://git.kernel.org/stable/c/447d493034a9cf7bf13a2abac86d0573d907ec2f"},{"source":"nvd","sourceId":"CVE-2026-64530","modified":"2026-10-19T21:17:42.333","url":"https://git.kernel.org/stable/c/447d493034a9cf7bf13a2abac86d0573d907ec2f"}]},{"url":"https://git.kernel.org/stable/c/e1270e69dcf2c3512c453484178f2e9dc0db3f05","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:07.900Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:07.900Z","url":"https://git.kernel.org/stable/c/e1270e69dcf2c3512c453484178f2e9dc0db3f05"},{"source":"nvd","sourceId":"CVE-2026-64530","modified":"2026-10-19T21:17:42.333","url":"https://git.kernel.org/stable/c/e1270e69dcf2c3512c453484178f2e9dc0db3f05"}]},{"url":"https://git.kernel.org/stable/c/2140c2f3f2e7b066e1ae616ede8856cafd8015e9","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:07.900Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:07.900Z","url":"https://git.kernel.org/stable/c/2140c2f3f2e7b066e1ae616ede8856cafd8015e9"},{"source":"nvd","sourceId":"CVE-2026-64530","modified":"2026-10-19T21:17:42.333","url":"https://git.kernel.org/stable/c/2140c2f3f2e7b066e1ae616ede8856cafd8015e9"}]},{"url":"https://git.kernel.org/stable/c/e28aedab9488343924d227b5a896faed67ce84d5","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:07.900Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:07.900Z","url":"https://git.kernel.org/stable/c/e28aedab9488343924d227b5a896faed67ce84d5"},{"source":"nvd","sourceId":"CVE-2026-64530","modified":"2026-10-19T21:17:42.333","url":"https://git.kernel.org/stable/c/e28aedab9488343924d227b5a896faed67ce84d5"}]},{"url":"https://git.kernel.org/stable/c/a8a02897f2b479127db261de05cbf0c28b98d159","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:07.900Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:07.900Z","url":"https://git.kernel.org/stable/c/a8a02897f2b479127db261de05cbf0c28b98d159"},{"source":"nvd","sourceId":"CVE-2026-64530","modified":"2026-10-19T21:17:42.333","url":"https://git.kernel.org/stable/c/a8a02897f2b479127db261de05cbf0c28b98d159"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-64530","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-64530"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2504052","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2504052"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-64530","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-64530"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64530","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64530"}]},{"url":"https://lore.kernel.org/linux-cve-announce/2026072624-CVE-2026-64530-52e9@gregkh/T/#u","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://lore.kernel.org/linux-cve-announce/2026072624-CVE-2026-64530-52e9@gregkh/T/#u"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:67277","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/errata/RHSA-2026:67277"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:47620","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/errata/RHSA-2026:47620"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:49032","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/errata/RHSA-2026:49032"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:49212","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/errata/RHSA-2026:49212"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:49211","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/errata/RHSA-2026:49211"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:49214","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/errata/RHSA-2026:49214"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:49033","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/errata/RHSA-2026:49033"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:56224","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/errata/RHSA-2026:56224"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:55618","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/errata/RHSA-2026:55618"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:55762","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/errata/RHSA-2026:55762"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:55761","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/errata/RHSA-2026:55761"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:55837","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/errata/RHSA-2026:55837"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:56225","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/errata/RHSA-2026:56225"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:55763","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/errata/RHSA-2026:55763"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:49213","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/errata/RHSA-2026:49213"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:48222","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://access.redhat.com/errata/RHSA-2026:48222"}]},{"source":"euvd","sourceId":"EUVD-2026-49051","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-49051","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-49051","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-49051"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.19.el10nv.aarch64","product":"kernel-0:6.12.0-231.19.el10nv.aarch64 as a component of NVIDIA for RHEL 10","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:67277"},{"category":"workaround","details":"To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability."}],"purl":"pkg:rpm/redhat/kernel@6.12.0-231.19.el10nv?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"AppStream-10.0.Z.E2S:libperf-debuginfo-0:6.12.0-55.93.1.el10_0.x86_64","product":"libperf-debuginfo-0:6.12.0-55.93.1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2026:47620"},{"category":"workaround","details":"To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability."}],"purl":"pkg:rpm/redhat/libperf-debuginfo@6.12.0-55.93.1.el10_0?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"AppStream-9.2.0.Z.E4S:bpftool-debuginfo-0:7.0.0-284.184.1.el9_2.x86_64","product":"bpftool-debuginfo-0:7.0.0-284.184.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:49032"},{"category":"workaround","details":"To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability."}],"purl":"pkg:rpm/redhat/bpftool-debuginfo@7.0.0-284.184.1.el9_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-687.33.1.el9_8.s390x","product":"kernel-zfcpdump-debuginfo-0:5.14.0-687.33.1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:49212"},{"category":"workaround","details":"To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability."}],"purl":"pkg:rpm/redhat/kernel-zfcpdump-debuginfo@5.14.0-687.33.1.el9_8?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"BaseOS-10.0.Z.E2S:kernel-tools-0:6.12.0-55.93.1.el10_0.aarch64","product":"kernel-tools-0:6.12.0-55.93.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2026:47620"},{"category":"workaround","details":"To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability."}],"purl":"pkg:rpm/redhat/kernel-tools@6.12.0-55.93.1.el10_0?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"BaseOS-10.2.Z:kernel-rt-64k-debug-debuginfo-0:6.12.0-211.42.1.el10_2.aarch64","product":"kernel-rt-64k-debug-debuginfo-0:6.12.0-211.42.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:49211"},{"category":"workaround","details":"To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability."}],"purl":"pkg:rpm/redhat/kernel-rt-64k-debug-debuginfo@6.12.0-211.42.1.el10_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"BaseOS-8.10.0.Z.MAIN.EUS:kernel-modules-extra-0:4.18.0-553.150.1.el8_10.aarch64","product":"kernel-modules-extra-0:4.18.0-553.150.1.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:49214"},{"category":"workaround","details":"To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability."}],"purl":"pkg:rpm/redhat/kernel-modules-extra@4.18.0-553.150.1.el8_10?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.204.1.el8_6.x86_64","product":"kernel-debug-core-0:4.18.0-372.204.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:49033"},{"category":"workaround","details":"To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability."}],"purl":"pkg:rpm/redhat/kernel-debug-core@4.18.0-372.204.1.el8_6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"BaseOS-9.2.0.Z.E4S:kernel-debug-modules-extra-0:5.14.0-284.184.1.el9_2.ppc64le","product":"kernel-debug-modules-extra-0:5.14.0-284.184.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:49032"},{"category":"workaround","details":"To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability."}],"purl":"pkg:rpm/redhat/kernel-debug-modules-extra@5.14.0-284.184.1.el9_2?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-7.el9_4.src","product":"kpatch-patch-5_14_0-427_126_1-0:1-7.el9_4.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:56224"},{"category":"workaround","details":"To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability."}],"purl":"pkg:rpm/redhat/kpatch-patch-5_14_0-427_126_1@1-7.el9_4?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"BaseOS-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.33.1.el9_8.s390x","product":"kernel-debuginfo-0:5.14.0-687.33.1.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:49212"},{"category":"workaround","details":"To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability."}],"purl":"pkg:rpm/redhat/kernel-debuginfo@5.14.0-687.33.1.el9_8?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"CRB-10.0.Z.E2S:python3-perf-debuginfo-0:6.12.0-55.93.1.el10_0.s390x","product":"python3-perf-debuginfo-0:6.12.0-55.93.1.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2026:47620"},{"category":"workaround","details":"To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability."}],"purl":"pkg:rpm/redhat/python3-perf-debuginfo@6.12.0-55.93.1.el10_0?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"CRB-9.8.0.Z.MAIN.EUS:libperf-debuginfo-0:5.14.0-687.33.1.el9_8.s390x","product":"libperf-debuginfo-0:5.14.0-687.33.1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:49212"},{"category":"workaround","details":"To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability."}],"purl":"pkg:rpm/redhat/libperf-debuginfo@5.14.0-687.33.1.el9_8?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"NFV-9.8.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:5.14.0-687.33.1.el9_8.x86_64","product":"kernel-rt-modules-extra-0:5.14.0-687.33.1.el9_8.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:49212"},{"category":"workaround","details":"To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability."}],"purl":"pkg:rpm/redhat/kernel-rt-modules-extra@5.14.0-687.33.1.el9_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"RT-10.2.Z:kernel-rt-debuginfo-0:6.12.0-211.42.1.el10_2.x86_64","product":"kernel-rt-debuginfo-0:6.12.0-211.42.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:49211"},{"category":"workaround","details":"To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability."}],"purl":"pkg:rpm/redhat/kernel-rt-debuginfo@6.12.0-211.42.1.el10_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"RT-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.33.1.el9_8.x86_64","product":"python3-perf-debuginfo-0:5.14.0-687.33.1.el9_8.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:49212"},{"category":"workaround","details":"To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability."}],"purl":"pkg:rpm/redhat/python3-perf-debuginfo@5.14.0-687.33.1.el9_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"red_hat_enterprise_linux_6:kernel","product":"kernel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"red_hat_enterprise_linux_6:kernel-debug","product":"kernel-debug as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-debug","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"red_hat_enterprise_linux_6:kernel-devel","product":"kernel-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"red_hat_enterprise_linux_6:kernel-headers","product":"kernel-headers as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-headers","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"red_hat_enterprise_linux_6:kernel.src","product":"kernel.src as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"red_hat_enterprise_linux_7:bpftool","product":"bpftool as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bpftool","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"red_hat_enterprise_linux_7:kernel-abi-whitelists","product":"kernel-abi-whitelists as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-abi-whitelists","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"red_hat_enterprise_linux_7:kernel-debug-devel","product":"kernel-debug-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-debug-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"red_hat_enterprise_linux_7:kernel-headers","product":"kernel-headers as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-headers","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"red_hat_enterprise_linux_7:kernel-rt","product":"kernel-rt as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"red_hat_enterprise_linux_7:kernel-rt-debug-devel","product":"kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-debug-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"red_hat_enterprise_linux_7:kernel-rt-doc","product":"kernel-rt-doc as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"red_hat_enterprise_linux_7:kernel-rt-trace-devel","product":"kernel-rt-trace-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-trace-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"red_hat_enterprise_linux_7:kernel-tools","product":"kernel-tools as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-tools","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"red_hat_enterprise_linux_7:kernel-tools-libs-devel","product":"kernel-tools-libs-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-tools-libs-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]},{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json","productId":"red_hat_enterprise_linux_7:python-perf","product":"python-perf as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/python-perf","origins":[{"source":"redhat","sourceId":"CVE-2026-64530","modified":"2026-10-06T23:20:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64530.json"}]}],"vendorCoverage":{"total":1603,"shown":32,"omitted":1571,"source":"redhat"}}