{"schema":"vulnpedia.research/1","cve":"CVE-2026-64535","references":[{"url":"https://git.kernel.org/stable/c/dfb902462bca478f050224ec7a7195aafa7643b1","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:28:23.449Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:28:23.449Z","url":"https://git.kernel.org/stable/c/dfb902462bca478f050224ec7a7195aafa7643b1"},{"source":"nvd","sourceId":"CVE-2026-64535","modified":"2026-10-19T21:17:43.253","url":"https://git.kernel.org/stable/c/dfb902462bca478f050224ec7a7195aafa7643b1"}]},{"url":"https://git.kernel.org/stable/c/7e558308eba14c8136cb1e615f0c850f76d1fc0a","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:28:23.449Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:28:23.449Z","url":"https://git.kernel.org/stable/c/7e558308eba14c8136cb1e615f0c850f76d1fc0a"},{"source":"nvd","sourceId":"CVE-2026-64535","modified":"2026-10-19T21:17:43.253","url":"https://git.kernel.org/stable/c/7e558308eba14c8136cb1e615f0c850f76d1fc0a"}]},{"url":"https://git.kernel.org/stable/c/96fe2513df590e74b04253a45089cae75569570e","tags":["vendor-reference"],"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:28:23.449Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:28:23.449Z","url":"https://git.kernel.org/stable/c/96fe2513df590e74b04253a45089cae75569570e"},{"source":"nvd","sourceId":"CVE-2026-64535","modified":"2026-10-19T21:17:43.253","url":"https://git.kernel.org/stable/c/96fe2513df590e74b04253a45089cae75569570e"},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://git.kernel.org/stable/c/96fe2513df590e74b04253a45089cae75569570e"}]},{"url":"https://git.kernel.org/stable/c/e091ff83d962f9ed00d9bd70443676de9fe98bdc","tags":["vendor-reference"],"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:28:23.449Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:28:23.449Z","url":"https://git.kernel.org/stable/c/e091ff83d962f9ed00d9bd70443676de9fe98bdc"},{"source":"nvd","sourceId":"CVE-2026-64535","modified":"2026-10-19T21:17:43.253","url":"https://git.kernel.org/stable/c/e091ff83d962f9ed00d9bd70443676de9fe98bdc"},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://git.kernel.org/stable/c/e091ff83d962f9ed00d9bd70443676de9fe98bdc"}]},{"url":"https://git.kernel.org/stable/c/6f9442983a3e4227afd1c83a5251ddbca585ea21","tags":["vendor-reference"],"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:28:23.449Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:28:23.449Z","url":"https://git.kernel.org/stable/c/6f9442983a3e4227afd1c83a5251ddbca585ea21"},{"source":"nvd","sourceId":"CVE-2026-64535","modified":"2026-10-19T21:17:43.253","url":"https://git.kernel.org/stable/c/6f9442983a3e4227afd1c83a5251ddbca585ea21"},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://git.kernel.org/stable/c/6f9442983a3e4227afd1c83a5251ddbca585ea21"}]},{"url":"https://git.kernel.org/stable/c/088ee46c18d99baef453afd74181dd40ade044ad","tags":["vendor-reference"],"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:28:23.449Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:28:23.449Z","url":"https://git.kernel.org/stable/c/088ee46c18d99baef453afd74181dd40ade044ad"},{"source":"nvd","sourceId":"CVE-2026-64535","modified":"2026-10-19T21:17:43.253","url":"https://git.kernel.org/stable/c/088ee46c18d99baef453afd74181dd40ade044ad"},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://git.kernel.org/stable/c/088ee46c18d99baef453afd74181dd40ade044ad"}]},{"url":"https://git.kernel.org/stable/c/dbbd07d0a7020b80f6a7028e561908f7b83b3d5a","tags":["vendor-reference"],"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:28:23.449Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:28:23.449Z","url":"https://git.kernel.org/stable/c/dbbd07d0a7020b80f6a7028e561908f7b83b3d5a"},{"source":"nvd","sourceId":"CVE-2026-64535","modified":"2026-10-19T21:17:43.253","url":"https://git.kernel.org/stable/c/dbbd07d0a7020b80f6a7028e561908f7b83b3d5a"},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://git.kernel.org/stable/c/dbbd07d0a7020b80f6a7028e561908f7b83b3d5a"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-64535","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-64535"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2507404","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2507404"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-64535","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-64535"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64535","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64535"}]},{"source":"euvd","sourceId":"EUVD-2026-49113","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-49113","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-49113","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-49113"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_10:kernel","product":"kernel as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"There is no mitigation for this issue other than applying the kernel update once available. Because Red Hat does not support and does not enable the nvmet-tcp target functionality by default, systems that have not been explicitly configured with nvmetcli to act as an NVMe-over-Fabrics TCP target are not exposed and require no immediate action. Administrators who have deliberately configured an NVMe/TCP target using this unsupported functionality should restrict network access to the target port to trusted initiators on the same storage network only, and should consider disabling NVMe/TCP data digest or migrating off nvmet-tcp given its unmaintained status, until the fix is applied."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_10:kernel-core","product":"kernel-core as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"There is no mitigation for this issue other than applying the kernel update once available. Because Red Hat does not support and does not enable the nvmet-tcp target functionality by default, systems that have not been explicitly configured with nvmetcli to act as an NVMe-over-Fabrics TCP target are not exposed and require no immediate action. Administrators who have deliberately configured an NVMe/TCP target using this unsupported functionality should restrict network access to the target port to trusted initiators on the same storage network only, and should consider disabling NVMe/TCP data digest or migrating off nvmet-tcp given its unmaintained status, until the fix is applied."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-core","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_10:kernel-modules-extra-matched","product":"kernel-modules-extra-matched as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"There is no mitigation for this issue other than applying the kernel update once available. Because Red Hat does not support and does not enable the nvmet-tcp target functionality by default, systems that have not been explicitly configured with nvmetcli to act as an NVMe-over-Fabrics TCP target are not exposed and require no immediate action. Administrators who have deliberately configured an NVMe/TCP target using this unsupported functionality should restrict network access to the target port to trusted initiators on the same storage network only, and should consider disabling NVMe/TCP data digest or migrating off nvmet-tcp given its unmaintained status, until the fix is applied."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-modules-extra-matched","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_10:kernel-rt-debug","product":"kernel-rt-debug as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"There is no mitigation for this issue other than applying the kernel update once available. Because Red Hat does not support and does not enable the nvmet-tcp target functionality by default, systems that have not been explicitly configured with nvmetcli to act as an NVMe-over-Fabrics TCP target are not exposed and require no immediate action. Administrators who have deliberately configured an NVMe/TCP target using this unsupported functionality should restrict network access to the target port to trusted initiators on the same storage network only, and should consider disabling NVMe/TCP data digest or migrating off nvmet-tcp given its unmaintained status, until the fix is applied."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-rt-debug","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_10:kernel-uki-virt-addons","product":"kernel-uki-virt-addons as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"There is no mitigation for this issue other than applying the kernel update once available. Because Red Hat does not support and does not enable the nvmet-tcp target functionality by default, systems that have not been explicitly configured with nvmetcli to act as an NVMe-over-Fabrics TCP target are not exposed and require no immediate action. Administrators who have deliberately configured an NVMe/TCP target using this unsupported functionality should restrict network access to the target port to trusted initiators on the same storage network only, and should consider disabling NVMe/TCP data digest or migrating off nvmet-tcp given its unmaintained status, until the fix is applied."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-uki-virt-addons","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_8:kernel","product":"kernel as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"There is no mitigation for this issue other than applying the kernel update once available. Because Red Hat does not support and does not enable the nvmet-tcp target functionality by default, systems that have not been explicitly configured with nvmetcli to act as an NVMe-over-Fabrics TCP target are not exposed and require no immediate action. Administrators who have deliberately configured an NVMe/TCP target using this unsupported functionality should restrict network access to the target port to trusted initiators on the same storage network only, and should consider disabling NVMe/TCP data digest or migrating off nvmet-tcp given its unmaintained status, until the fix is applied."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_8:kernel-modules-extra","product":"kernel-modules-extra as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"There is no mitigation for this issue other than applying the kernel update once available. Because Red Hat does not support and does not enable the nvmet-tcp target functionality by default, systems that have not been explicitly configured with nvmetcli to act as an NVMe-over-Fabrics TCP target are not exposed and require no immediate action. Administrators who have deliberately configured an NVMe/TCP target using this unsupported functionality should restrict network access to the target port to trusted initiators on the same storage network only, and should consider disabling NVMe/TCP data digest or migrating off nvmet-tcp given its unmaintained status, until the fix is applied."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-modules-extra","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_8:kernel-rt-selftests-internal","product":"kernel-rt-selftests-internal as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"There is no mitigation for this issue other than applying the kernel update once available. Because Red Hat does not support and does not enable the nvmet-tcp target functionality by default, systems that have not been explicitly configured with nvmetcli to act as an NVMe-over-Fabrics TCP target are not exposed and require no immediate action. Administrators who have deliberately configured an NVMe/TCP target using this unsupported functionality should restrict network access to the target port to trusted initiators on the same storage network only, and should consider disabling NVMe/TCP data digest or migrating off nvmet-tcp given its unmaintained status, until the fix is applied."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-rt-selftests-internal","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_9:bpftool","product":"bpftool as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"There is no mitigation for this issue other than applying the kernel update once available. Because Red Hat does not support and does not enable the nvmet-tcp target functionality by default, systems that have not been explicitly configured with nvmetcli to act as an NVMe-over-Fabrics TCP target are not exposed and require no immediate action. Administrators who have deliberately configured an NVMe/TCP target using this unsupported functionality should restrict network access to the target port to trusted initiators on the same storage network only, and should consider disabling NVMe/TCP data digest or migrating off nvmet-tcp given its unmaintained status, until the fix is applied."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/bpftool","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_9:kernel-64k-modules-core","product":"kernel-64k-modules-core as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"There is no mitigation for this issue other than applying the kernel update once available. Because Red Hat does not support and does not enable the nvmet-tcp target functionality by default, systems that have not been explicitly configured with nvmetcli to act as an NVMe-over-Fabrics TCP target are not exposed and require no immediate action. Administrators who have deliberately configured an NVMe/TCP target using this unsupported functionality should restrict network access to the target port to trusted initiators on the same storage network only, and should consider disabling NVMe/TCP data digest or migrating off nvmet-tcp given its unmaintained status, until the fix is applied."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-64k-modules-core","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_9:kernel-debug-uki-virt","product":"kernel-debug-uki-virt as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"There is no mitigation for this issue other than applying the kernel update once available. Because Red Hat does not support and does not enable the nvmet-tcp target functionality by default, systems that have not been explicitly configured with nvmetcli to act as an NVMe-over-Fabrics TCP target are not exposed and require no immediate action. Administrators who have deliberately configured an NVMe/TCP target using this unsupported functionality should restrict network access to the target port to trusted initiators on the same storage network only, and should consider disabling NVMe/TCP data digest or migrating off nvmet-tcp given its unmaintained status, until the fix is applied."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-debug-uki-virt","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_9:kernel-rt-64k-debug","product":"kernel-rt-64k-debug as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"There is no mitigation for this issue other than applying the kernel update once available. Because Red Hat does not support and does not enable the nvmet-tcp target functionality by default, systems that have not been explicitly configured with nvmetcli to act as an NVMe-over-Fabrics TCP target are not exposed and require no immediate action. Administrators who have deliberately configured an NVMe/TCP target using this unsupported functionality should restrict network access to the target port to trusted initiators on the same storage network only, and should consider disabling NVMe/TCP data digest or migrating off nvmet-tcp given its unmaintained status, until the fix is applied."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-rt-64k-debug","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_9:kernel-rt-64k-modules-internal","product":"kernel-rt-64k-modules-internal as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"There is no mitigation for this issue other than applying the kernel update once available. Because Red Hat does not support and does not enable the nvmet-tcp target functionality by default, systems that have not been explicitly configured with nvmetcli to act as an NVMe-over-Fabrics TCP target are not exposed and require no immediate action. Administrators who have deliberately configured an NVMe/TCP target using this unsupported functionality should restrict network access to the target port to trusted initiators on the same storage network only, and should consider disabling NVMe/TCP data digest or migrating off nvmet-tcp given its unmaintained status, until the fix is applied."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-rt-64k-modules-internal","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_9:kernel-rt-modules","product":"kernel-rt-modules as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"There is no mitigation for this issue other than applying the kernel update once available. Because Red Hat does not support and does not enable the nvmet-tcp target functionality by default, systems that have not been explicitly configured with nvmetcli to act as an NVMe-over-Fabrics TCP target are not exposed and require no immediate action. Administrators who have deliberately configured an NVMe/TCP target using this unsupported functionality should restrict network access to the target port to trusted initiators on the same storage network only, and should consider disabling NVMe/TCP data digest or migrating off nvmet-tcp given its unmaintained status, until the fix is applied."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-rt-modules","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_9:kernel-zfcpdump-devel","product":"kernel-zfcpdump-devel as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"There is no mitigation for this issue other than applying the kernel update once available. Because Red Hat does not support and does not enable the nvmet-tcp target functionality by default, systems that have not been explicitly configured with nvmetcli to act as an NVMe-over-Fabrics TCP target are not exposed and require no immediate action. Administrators who have deliberately configured an NVMe/TCP target using this unsupported functionality should restrict network access to the target port to trusted initiators on the same storage network only, and should consider disabling NVMe/TCP data digest or migrating off nvmet-tcp given its unmaintained status, until the fix is applied."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-zfcpdump-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9","product":"openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"There is no mitigation for this issue other than applying the kernel update once available. Because Red Hat does not support and does not enable the nvmet-tcp target functionality by default, systems that have not been explicitly configured with nvmetcli to act as an NVMe-over-Fabrics TCP target are not exposed and require no immediate action. Administrators who have deliberately configured an NVMe/TCP target using this unsupported functionality should restrict network access to the target port to trusted initiators on the same storage network only, and should consider disabling NVMe/TCP data digest or migrating off nvmet-tcp given its unmaintained status, until the fix is applied."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_10:libkrun.src","product":"libkrun.src as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/libkrun@1.17.4-1.el10?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_6:kernel-bootwrapper","product":"kernel-bootwrapper as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-bootwrapper","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_6:kernel-devel","product":"kernel-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_6:kernel-firmware","product":"kernel-firmware as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-firmware","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_6:kernel-kdump-devel","product":"kernel-kdump-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-kdump-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_6:python-perf","product":"python-perf as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/python-perf","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_7:kernel-abi-whitelists","product":"kernel-abi-whitelists as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-abi-whitelists","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_7:kernel-debug-devel","product":"kernel-debug-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-debug-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_7:kernel-doc","product":"kernel-doc as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_7:kernel-kdump-devel","product":"kernel-kdump-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-kdump-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_7:kernel-rt-debug-devel","product":"kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-debug-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_7:kernel-rt-doc","product":"kernel-rt-doc as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_7:kernel-rt-trace-devel","product":"kernel-rt-trace-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-trace-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_7:kernel-rt.src","product":"kernel-rt.src as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_7:kernel-tools-libs-devel","product":"kernel-tools-libs-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-tools-libs-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]},{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json","productId":"red_hat_enterprise_linux_7:python-perf","product":"python-perf as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/python-perf","origins":[{"source":"redhat","sourceId":"CVE-2026-64535","modified":"2026-10-12T16:37:25+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64535.json"}]}],"vendorCoverage":{"total":279,"shown":32,"omitted":247,"source":"redhat"}}