{"id":"USN-8974-1","summary":"pcre2 vulnerabilities","details":"It was discovered that PCRE2 did not correctly manage memory when\nprocessing certain patterns. An attacker could possibly use this issue to\nexecute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu\n22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10.\n(CVE-2026-86145)\n\nAlbert Zhang discovered that PCRE2 did not correctly process certain\ninput. An attacker could possibly use this issue to cause a denial of\nservice. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,\nUbuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2026-89156)\n\nIt was discovered that PCRE2 did not correctly handle large patterns. On\n32-bit platforms, an attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04\nLTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu\n26.10. (CVE-2026-89157)\n\nIt was discovered that PCRE2 did not correctly handle certain patterns.\nAn attacker could possibly use this issue to execute arbitrary code.\n(CVE-2026-89158)\n\nIlia Alshanetsky discovered that PCRE2 did not correctly handle certain\ninput. An attacker could possibly use this issue to cause a denial of\nservice. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,\nUbuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2026-89160)\n\nIt was discovered that PCRE2 did not correctly manage memory when handling\ncertain patterns. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04\nLTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10.\n(CVE-2026-89161)\n\nIt was discovered that PCRE2 could expose uninitialized data in certain\ncircumstances. A local attacker could possibly use this issue to obtain\nsensitive information. This issue only affected Ubuntu 26.04 LTS and\nUbuntu 26.10. (CVE-2026-89162)\n\nMichael Allen discovered that PCRE2 did not correctly manage memory when\nusing just-in-time compilation. An attacker could possibly use this issue\nto execute arbitrary code. This issue only affected Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS,\nand Ubuntu 26.10. (CVE-2026-103111)","modified":"2026-11-04T03:43:07.973928197Z","published":"2026-11-03T15:46:30Z","related":["UBUNTU-CVE-2026-103111","UBUNTU-CVE-2026-86145","UBUNTU-CVE-2026-89156","UBUNTU-CVE-2026-89157","UBUNTU-CVE-2026-89158","UBUNTU-CVE-2026-89160","UBUNTU-CVE-2026-89161","UBUNTU-CVE-2026-89162"],"upstream":["CVE-2026-103111","CVE-2026-86145","CVE-2026-89156","CVE-2026-89157","CVE-2026-89158","CVE-2026-89160","CVE-2026-89161","CVE-2026-89162","UBUNTU-CVE-2026-103111","UBUNTU-CVE-2026-86145","UBUNTU-CVE-2026-89156","UBUNTU-CVE-2026-89157","UBUNTU-CVE-2026-89158","UBUNTU-CVE-2026-89160","UBUNTU-CVE-2026-89161","UBUNTU-CVE-2026-89162"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-8974-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-86145"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-89156"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-89157"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-89158"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-89160"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-89161"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-89162"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-103111"}],"affected":[{"package":{"name":"pcre2","ecosystem":"Ubuntu:Pro:16.04:LTS","purl":"pkg:deb/ubuntu/pcre2?arch=source&distro=esm-apps-legacy%2Fxenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.21-1ubuntu0.1~esm1"}]}],"versions":["10.20-1","10.20-2","10.20-3","10.21-1"],"ecosystem_specific":{"binaries":[{"binary_name":"libpcre2-16-0","binary_version":"10.21-1ubuntu0.1~esm1"},{"binary_version":"10.21-1ubuntu0.1~esm1","binary_name":"libpcre2-32-0"},{"binary_version":"10.21-1ubuntu0.1~esm1","binary_name":"libpcre2-8-0"},{"binary_name":"libpcre2-posix0","binary_version":"10.21-1ubuntu0.1~esm1"},{"binary_name":"pcre2-utils","binary_version":"10.21-1ubuntu0.1~esm1"}],"availability":"Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:16.04:LTS","cves":[{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-89158"}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8974-1.json"}},{"package":{"name":"pcre2","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/pcre2?arch=source&distro=esm-apps%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.31-2ubuntu0.1~esm2"}]}],"versions":["10.22-3","10.22-4","10.22-5","10.22-6","10.31-2","10.31-2ubuntu0.1~esm1"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro: https://ubuntu.com/pro","binaries":[{"binary_version":"10.31-2ubuntu0.1~esm2","binary_name":"libpcre2-16-0"},{"binary_version":"10.31-2ubuntu0.1~esm2","binary_name":"libpcre2-32-0"},{"binary_version":"10.31-2ubuntu0.1~esm2","binary_name":"libpcre2-8-0"},{"binary_version":"10.31-2ubuntu0.1~esm2","binary_name":"libpcre2-posix0"},{"binary_name":"pcre2-utils","binary_version":"10.31-2ubuntu0.1~esm2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8974-1.json","cves_map":{"ecosystem":"Ubuntu:Pro:18.04:LTS","cves":[{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-89157"},{"id":"CVE-2026-89158","severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-103111"}]}}},{"package":{"name":"pcre2","ecosystem":"Ubuntu:Pro:20.04:LTS","purl":"pkg:deb/ubuntu/pcre2?arch=source&distro=esm-infra%2Ffocal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.34-7ubuntu0.1+esm1"}]}],"versions":["10.32-5","10.34-7","10.34-7ubuntu0.1"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro","binaries":[{"binary_name":"libpcre2-16-0","binary_version":"10.34-7ubuntu0.1+esm1"},{"binary_name":"libpcre2-32-0","binary_version":"10.34-7ubuntu0.1+esm1"},{"binary_version":"10.34-7ubuntu0.1+esm1","binary_name":"libpcre2-8-0"},{"binary_name":"libpcre2-posix2","binary_version":"10.34-7ubuntu0.1+esm1"},{"binary_version":"10.34-7ubuntu0.1+esm1","binary_name":"pcre2-utils"}]},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:20.04:LTS","cves":[{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-86145"},{"id":"CVE-2026-89156","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-89157","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-89158"},{"id":"CVE-2026-89160","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-89161","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-103111","severity":[{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8974-1.json"}},{"package":{"name":"pcre2","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/pcre2?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.39-3ubuntu0.2"}]}],"versions":["10.37-0ubuntu2","10.39-3","10.39-3build1","10.39-3ubuntu0.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_version":"10.39-3ubuntu0.2","binary_name":"libpcre2-16-0"},{"binary_version":"10.39-3ubuntu0.2","binary_name":"libpcre2-32-0"},{"binary_name":"libpcre2-8-0","binary_version":"10.39-3ubuntu0.2"},{"binary_version":"10.39-3ubuntu0.2","binary_name":"libpcre2-posix3"},{"binary_name":"pcre2-utils","binary_version":"10.39-3ubuntu0.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8974-1.json","cves_map":{"ecosystem":"Ubuntu:22.04:LTS","cves":[{"id":"CVE-2026-86145","severity":[{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-89156","severity":[{"score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-89157","severity":[{"score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-89158","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-89160","severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-89161"},{"id":"CVE-2026-103111","severity":[{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]}]}}},{"package":{"name":"pcre2","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/pcre2?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.42-4ubuntu2.2"}]}],"versions":["10.42-4","10.42-4ubuntu1","10.42-4ubuntu2","10.42-4ubuntu2.1"],"ecosystem_specific":{"binaries":[{"binary_name":"libpcre2-16-0","binary_version":"10.42-4ubuntu2.2"},{"binary_version":"10.42-4ubuntu2.2","binary_name":"libpcre2-32-0"},{"binary_name":"libpcre2-8-0","binary_version":"10.42-4ubuntu2.2"},{"binary_name":"libpcre2-posix3","binary_version":"10.42-4ubuntu2.2"},{"binary_name":"pcre2-utils","binary_version":"10.42-4ubuntu2.2"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2026-86145","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-89156","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-89157","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-89158","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-89160","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-89161","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-103111","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L"},{"type":"Ubuntu","score":"medium"}]}],"ecosystem":"Ubuntu:24.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8974-1.json"}},{"package":{"name":"pcre2","ecosystem":"Ubuntu:26.10","purl":"pkg:deb/ubuntu/pcre2?arch=source&distro=stonking"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.46-1ubuntu1"}]}],"versions":["10.46-1build1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_version":"10.46-1ubuntu1","binary_name":"libpcre2-16-0"},{"binary_name":"libpcre2-32-0","binary_version":"10.46-1ubuntu1"},{"binary_name":"libpcre2-8-0","binary_version":"10.46-1ubuntu1"},{"binary_name":"libpcre2-posix3","binary_version":"10.46-1ubuntu1"},{"binary_name":"pcre2-utils","binary_version":"10.46-1ubuntu1"}]},"database_specific":{"cves_map":{"cves":[{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-86145"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-89156"},{"id":"CVE-2026-89157","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-89158","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-89160","severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-89161"},{"id":"CVE-2026-89162","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-103111","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:26.10"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8974-1.json"}},{"package":{"name":"pcre2","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/pcre2?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.46-1ubuntu0.1"}]}],"versions":["10.46-1","10.46-1build1"],"ecosystem_specific":{"binaries":[{"binary_version":"10.46-1ubuntu0.1","binary_name":"libpcre2-16-0"},{"binary_version":"10.46-1ubuntu0.1","binary_name":"libpcre2-32-0"},{"binary_name":"libpcre2-8-0","binary_version":"10.46-1ubuntu0.1"},{"binary_name":"libpcre2-posix3","binary_version":"10.46-1ubuntu0.1"},{"binary_name":"pcre2-utils","binary_version":"10.46-1ubuntu0.1"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"cves":[{"severity":[{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-86145"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-89156"},{"id":"CVE-2026-89157","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-89158","severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-89160","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-89161","severity":[{"score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-89162","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-103111","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:26.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8974-1.json"}}],"schema_version":"1.9.2"}