{"url":"http://public2.vulnerablecode.io/api/packages/89159?format=json","purl":"pkg:rpm/redhat/kernel@5.14.0-427.125.1?arch=el9_4","type":"rpm","namespace":"redhat","name":"kernel","version":"5.14.0-427.125.1","qualifiers":{"arch":"el9_4"},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":null,"latest_non_vulnerable_version":null,"affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/60656?format=json","vulnerability_id":"VCID-dtff-1kxe-1yb5","summary":"kernel: \"Dirty Frag\" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-43284.json","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-43284.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2026-43284","reference_id":"","reference_type":"","scores":[{"value":"0.26337","scoring_system":"epss","scoring_elements":"0.96424","published_at":"2026-06-09T12:55:00Z"},{"value":"0.38453","scoring_system":"epss","scoring_elements":"0.97329","published_at":"2026-06-08T12:55:00Z"},{"value":"0.38453","scoring_system":"epss","scoring_elements":"0.97328","published_at":"2026-06-06T12:55:00Z"},{"value":"0.38453","scoring_system":"epss","scoring_elements":"0.97327","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-43284"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43284","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43284"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467771","reference_id":"2467771","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467771"},{"reference_url":"https://git.kernel.org/stable/c/50ed1e7873100f77abad20fd31c51029bc49cd03","reference_id":"50ed1e7873100f77abad20fd31c51029bc49cd03","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-05-08T13:52:05Z/"}],"url":"https://git.kernel.org/stable/c/50ed1e7873100f77abad20fd31c51029bc49cd03"},{"reference_url":"https://git.kernel.org/stable/c/52646cbd00e765a6db9c3afe9535f26218276034","reference_id":"52646cbd00e765a6db9c3afe9535f26218276034","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-05-08T13:52:05Z/"}],"url":"https://git.kernel.org/stable/c/52646cbd00e765a6db9c3afe9535f26218276034"},{"reference_url":"https://git.kernel.org/stable/c/5d55c7336f8032d434adcc5fab987ccc93a44aec","reference_id":"5d55c7336f8032d434adcc5fab987ccc93a44aec","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-05-08T13:52:05Z/"}],"url":"https://git.kernel.org/stable/c/5d55c7336f8032d434adcc5fab987ccc93a44aec"},{"reference_url":"https://git.kernel.org/stable/c/71a1d9d985d26716f74d21f18ee8cac821b06e97","reference_id":"71a1d9d985d26716f74d21f18ee8cac821b06e97","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-05-08T13:52:05Z/"}],"url":"https://git.kernel.org/stable/c/71a1d9d985d26716f74d21f18ee8cac821b06e97"},{"reference_url":"https://git.kernel.org/stable/c/8253aab4659ca16116b522203c2a6b18dccacea7","reference_id":"8253aab4659ca16116b522203c2a6b18dccacea7","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-05-08T13:52:05Z/"}],"url":"https://git.kernel.org/stable/c/8253aab4659ca16116b522203c2a6b18dccacea7"},{"reference_url":"https://git.kernel.org/stable/c/a6cb440f274a22456ef3e86b457344f1678f38f9","reference_id":"a6cb440f274a22456ef3e86b457344f1678f38f9","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-05-08T13:52:05Z/"}],"url":"https://git.kernel.org/stable/c/a6cb440f274a22456ef3e86b457344f1678f38f9"},{"reference_url":"https://git.kernel.org/stable/c/ab8b995323e5237041472d07e5055f5f7dcdf15b","reference_id":"ab8b995323e5237041472d07e5055f5f7dcdf15b","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-05-08T13:52:05Z/"}],"url":"https://git.kernel.org/stable/c/ab8b995323e5237041472d07e5055f5f7dcdf15b"},{"reference_url":"https://git.kernel.org/stable/c/b54edf1e9a3fd3491bdcb82a21f8d21315271e0d","reference_id":"b54edf1e9a3fd3491bdcb82a21f8d21315271e0d","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-05-08T13:52:05Z/"}],"url":"https://git.kernel.org/stable/c/b54edf1e9a3fd3491bdcb82a21f8d21315271e0d"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/52585.txt","reference_id":"CVE-2026-43500;CVE-2026-43284","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/52585.txt"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/52591.txt","reference_id":"CVE-2026-46300;CVE-2026-43500;CVE-2026-43284","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/52591.txt"},{"reference_url":"https://git.kernel.org/stable/c/f4c50a4034e62ab75f1d5cdd191dd5f9c77fdff4","reference_id":"f4c50a4034e62ab75f1d5cdd191dd5f9c77fdff4","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-05-08T13:52:05Z/"}],"url":"https://git.kernel.org/stable/c/f4c50a4034e62ab75f1d5cdd191dd5f9c77fdff4"},{"reference_url":"https://git.kernel.org/stable/c/fe785bb3a8096dffcc4048a85cd0c83337eeecad","reference_id":"fe785bb3a8096dffcc4048a85cd0c83337eeecad","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-05-08T13:52:05Z/"}],"url":"https://git.kernel.org/stable/c/fe785bb3a8096dffcc4048a85cd0c83337eeecad"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16061","reference_id":"RHSA-2026:16061","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16061"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16062","reference_id":"RHSA-2026:16062","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16062"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16100","reference_id":"RHSA-2026:16100","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16100"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16155","reference_id":"RHSA-2026:16155","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16155"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16157","reference_id":"RHSA-2026:16157","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16157"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16160","reference_id":"RHSA-2026:16160","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16160"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16161","reference_id":"RHSA-2026:16161","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16161"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16171","reference_id":"RHSA-2026:16171","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16171"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16176","reference_id":"RHSA-2026:16176","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16176"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16180","reference_id":"RHSA-2026:16180","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16180"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16195","reference_id":"RHSA-2026:16195","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16195"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16196","reference_id":"RHSA-2026:16196","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16196"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16201","reference_id":"RHSA-2026:16201","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16201"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16202","reference_id":"RHSA-2026:16202","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16202"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16203","reference_id":"RHSA-2026:16203","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16203"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16204","reference_id":"RHSA-2026:16204","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16204"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16206","reference_id":"RHSA-2026:16206","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16206"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16254","reference_id":"RHSA-2026:16254","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16254"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16312","reference_id":"RHSA-2026:16312","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16312"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16314","reference_id":"RHSA-2026:16314","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16314"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:16328","reference_id":"RHSA-2026:16328","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:16328"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17795","reference_id":"RHSA-2026:17795","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17795"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:18025","reference_id":"RHSA-2026:18025","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:18025"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19074","reference_id":"RHSA-2026:19074","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19074"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19225","reference_id":"RHSA-2026:19225","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19225"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19564","reference_id":"RHSA-2026:19564","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19564"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19568","reference_id":"RHSA-2026:19568","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19568"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19569","reference_id":"RHSA-2026:19569","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19569"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19572","reference_id":"RHSA-2026:19572","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19572"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19573","reference_id":"RHSA-2026:19573","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19573"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19574","reference_id":"RHSA-2026:19574","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19574"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19575","reference_id":"RHSA-2026:19575","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19575"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19577","reference_id":"RHSA-2026:19577","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19577"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:21695","reference_id":"RHSA-2026:21695","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:21695"},{"reference_url":"https://usn.ubuntu.com/8370-1/","reference_id":"USN-8370-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8370-1/"},{"reference_url":"https://usn.ubuntu.com/8371-1/","reference_id":"USN-8371-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8371-1/"},{"reference_url":"https://usn.ubuntu.com/8373-1/","reference_id":"USN-8373-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8373-1/"},{"reference_url":"https://usn.ubuntu.com/8374-1/","reference_id":"USN-8374-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8374-1/"},{"reference_url":"https://usn.ubuntu.com/8388-1/","reference_id":"USN-8388-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8388-1/"},{"reference_url":"https://usn.ubuntu.com/8389-1/","reference_id":"USN-8389-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8389-1/"},{"reference_url":"https://usn.ubuntu.com/8390-1/","reference_id":"USN-8390-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8390-1/"},{"reference_url":"https://usn.ubuntu.com/8391-1/","reference_id":"USN-8391-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8391-1/"},{"reference_url":"https://usn.ubuntu.com/8392-1/","reference_id":"USN-8392-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8392-1/"},{"reference_url":"https://usn.ubuntu.com/8393-1/","reference_id":"USN-8393-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8393-1/"}],"fixed_packages":[],"aliases":["CVE-2026-43284"],"risk_score":10.0,"exploitability":"2.0","weighted_severity":"7.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-dtff-1kxe-1yb5"}],"fixing_vulnerabilities":[],"risk_score":"10.0","resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/kernel@5.14.0-427.125.1%3Farch=el9_4"}