{"schema":"vulnpedia.research/1","cve":"CVE-2026-64534","references":[{"url":"https://git.kernel.org/stable/c/22ec7a9fe9153d2737ee9b2fa6d2e43a1491decf","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:42:44.214Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:42:44.214Z","url":"https://git.kernel.org/stable/c/22ec7a9fe9153d2737ee9b2fa6d2e43a1491decf"},{"source":"nvd","sourceId":"CVE-2026-64534","modified":"2026-10-19T21:17:43.080","url":"https://git.kernel.org/stable/c/22ec7a9fe9153d2737ee9b2fa6d2e43a1491decf"}]},{"url":"https://git.kernel.org/stable/c/ba35b1c674ca3841c0dfadd698f2c1b3ec542d4e","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:42:44.214Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:42:44.214Z","url":"https://git.kernel.org/stable/c/ba35b1c674ca3841c0dfadd698f2c1b3ec542d4e"},{"source":"nvd","sourceId":"CVE-2026-64534","modified":"2026-10-19T21:17:43.080","url":"https://git.kernel.org/stable/c/ba35b1c674ca3841c0dfadd698f2c1b3ec542d4e"}]},{"url":"https://git.kernel.org/stable/c/c7874dad84b20433c0fe3919f291a762d40de08b","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:42:44.214Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:42:44.214Z","url":"https://git.kernel.org/stable/c/c7874dad84b20433c0fe3919f291a762d40de08b"},{"source":"nvd","sourceId":"CVE-2026-64534","modified":"2026-10-19T21:17:43.080","url":"https://git.kernel.org/stable/c/c7874dad84b20433c0fe3919f291a762d40de08b"}]},{"url":"https://git.kernel.org/stable/c/e602c93b25bda4a9d0ff1791a4bdbfdcbb074af1","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:42:44.214Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:42:44.214Z","url":"https://git.kernel.org/stable/c/e602c93b25bda4a9d0ff1791a4bdbfdcbb074af1"},{"source":"nvd","sourceId":"CVE-2026-64534","modified":"2026-10-19T21:17:43.080","url":"https://git.kernel.org/stable/c/e602c93b25bda4a9d0ff1791a4bdbfdcbb074af1"}]},{"url":"https://git.kernel.org/stable/c/d306da8833e75f669d93424fd84940236f3850bc","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:42:44.214Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:42:44.214Z","url":"https://git.kernel.org/stable/c/d306da8833e75f669d93424fd84940236f3850bc"},{"source":"nvd","sourceId":"CVE-2026-64534","modified":"2026-10-19T21:17:43.080","url":"https://git.kernel.org/stable/c/d306da8833e75f669d93424fd84940236f3850bc"}]},{"url":"https://git.kernel.org/stable/c/2ed3c9d955e8cd6361f130623baa664a75fb345f","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:42:44.214Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:42:44.214Z","url":"https://git.kernel.org/stable/c/2ed3c9d955e8cd6361f130623baa664a75fb345f"},{"source":"nvd","sourceId":"CVE-2026-64534","modified":"2026-10-19T21:17:43.080","url":"https://git.kernel.org/stable/c/2ed3c9d955e8cd6361f130623baa664a75fb345f"}]},{"url":"https://git.kernel.org/stable/c/4606467a75cfc16721937272ed29462a750b60c8","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:42:44.214Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:42:44.214Z","url":"https://git.kernel.org/stable/c/4606467a75cfc16721937272ed29462a750b60c8"},{"source":"nvd","sourceId":"CVE-2026-64534","modified":"2026-10-19T21:17:43.080","url":"https://git.kernel.org/stable/c/4606467a75cfc16721937272ed29462a750b60c8"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-64534","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-64534"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2507399","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2507399"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-64534","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-64534"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64534","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64534"}]},{"url":"https://lore.kernel.org/linux-cve-announce/2026072734-CVE-2026-64534-434b@gregkh/T","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://lore.kernel.org/linux-cve-announce/2026072734-CVE-2026-64534-434b@gregkh/T"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:70498","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:70498"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71232","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71232"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:70402","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:70402"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:70403","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:70403"}]},{"source":"euvd","sourceId":"EUVD-2026-49112","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-49112","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-49112","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-49112"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"AppStream-10.2.Z:kernel-64k-debug-debuginfo-0:6.12.0-211.58.1.el10_2.aarch64","product":"kernel-64k-debug-debuginfo-0:6.12.0-211.58.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:70498"},{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."}],"purl":"pkg:rpm/redhat/kernel-64k-debug-debuginfo@6.12.0-211.58.1.el10_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:kernel-64k-debug-debuginfo-0:5.14.0-687.51.1.el9_8.aarch64","product":"kernel-64k-debug-debuginfo-0:5.14.0-687.51.1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71232"},{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."}],"purl":"pkg:rpm/redhat/kernel-64k-debug-debuginfo@5.14.0-687.51.1.el9_8?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"BaseOS-10.2.Z:kernel-0:6.12.0-211.58.1.el10_2.aarch64","product":"kernel-0:6.12.0-211.58.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:70498"},{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."}],"purl":"pkg:rpm/redhat/kernel@6.12.0-211.58.1.el10_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"BaseOS-10.2.Z:kernel-rt-debuginfo-0:6.12.0-211.58.1.el10_2.x86_64","product":"kernel-rt-debuginfo-0:6.12.0-211.58.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:70498"},{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."}],"purl":"pkg:rpm/redhat/kernel-rt-debuginfo@6.12.0-211.58.1.el10_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"BaseOS-8.10.0.Z.MAIN.EUS:kernel-debuginfo-0:4.18.0-553.166.1.el8_10.aarch64","product":"kernel-debuginfo-0:4.18.0-553.166.1.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:70402"},{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."}],"purl":"pkg:rpm/redhat/kernel-debuginfo@4.18.0-553.166.1.el8_10?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-0:5.14.0-687.51.1.el9_8.aarch64","product":"kernel-debug-0:5.14.0-687.51.1.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71232"},{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."}],"purl":"pkg:rpm/redhat/kernel-debug@5.14.0-687.51.1.el9_8?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"BaseOS-9.8.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-687.51.1.el9_8.x86_64","product":"perf-debuginfo-0:5.14.0-687.51.1.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71232"},{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."}],"purl":"pkg:rpm/redhat/perf-debuginfo@5.14.0-687.51.1.el9_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"CRB-9.8.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-687.51.1.el9_8.ppc64le","product":"kernel-debug-debuginfo-0:5.14.0-687.51.1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71232"},{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."}],"purl":"pkg:rpm/redhat/kernel-debug-debuginfo@5.14.0-687.51.1.el9_8?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.166.1.rt7.507.el8_10.x86_64","product":"kernel-rt-modules-0:4.18.0-553.166.1.rt7.507.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:70403"},{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."}],"purl":"pkg:rpm/redhat/kernel-rt-modules@4.18.0-553.166.1.rt7.507.el8_10?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"RT-10.2.Z:libperf-debuginfo-0:6.12.0-211.58.1.el10_2.x86_64","product":"libperf-debuginfo-0:6.12.0-211.58.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:70498"},{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."}],"purl":"pkg:rpm/redhat/libperf-debuginfo@6.12.0-211.58.1.el10_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"RT-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.51.1.el9_8.x86_64","product":"python3-perf-debuginfo-0:5.14.0-687.51.1.el9_8.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71232"},{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."}],"purl":"pkg:rpm/redhat/python3-perf-debuginfo@5.14.0-687.51.1.el9_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_9:kernel-rt","product":"kernel-rt as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_9:kernel-rt-debug","product":"kernel-rt-debug as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-debug","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_9:kernel-rt-debug-devel","product":"kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-debug-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_9:kernel-rt-debug-kvm","product":"kernel-rt-debug-kvm as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-debug-kvm","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_9:kernel-rt-debug-modules-core","product":"kernel-rt-debug-modules-core as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-debug-modules-core","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_9:kernel-rt-debug-modules-internal","product":"kernel-rt-debug-modules-internal as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-debug-modules-internal","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_9:kernel-rt-devel-matched","product":"kernel-rt-devel-matched as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-devel-matched","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_9:kernel-rt-modules","product":"kernel-rt-modules as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-modules","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_9:kernel-rt-modules-extra","product":"kernel-rt-modules-extra as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-modules-extra","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_9:kernel-rt-modules-partner","product":"kernel-rt-modules-partner as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-modules-partner","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_9:kernel-rt.src","product":"kernel-rt.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_6:kernel","product":"kernel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_6:kernel-devel","product":"kernel-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_6:kernel-kdump","product":"kernel-kdump as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-kdump","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_7:bpftool","product":"bpftool as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bpftool","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_7:kernel-debug","product":"kernel-debug as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-debug","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_7:kernel-kdump","product":"kernel-kdump as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-kdump","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_7:kernel-rt-debug-devel","product":"kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-debug-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_7:kernel-rt-trace","product":"kernel-rt-trace as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-trace","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_7:kernel-tools","product":"kernel-tools as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-tools","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]},{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json","productId":"red_hat_enterprise_linux_7:python-perf","product":"python-perf as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/python-perf","origins":[{"source":"redhat","sourceId":"CVE-2026-64534","modified":"2026-10-15T20:05:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64534.json"}]}],"vendorCoverage":{"total":826,"shown":32,"omitted":794,"source":"redhat"}}