LH036 reads: 1 November 2026

Baseline read at 08:30 UTC (label 2026-11-01T0830Z, with --baseline)

The brief went to main at 08:30:13 UTC (commit 0b15966) and the collector started after it. All 16 URLs answered HTTP 200 (read log). Both kernel.org URLs, the kernel CVE team's announcement and the upstream commit, returned a "Making sure you're not a bot!" challenge page, so both are unavailable at this read under the brief. Figures from tables.json, written by scripts/tabulate.py. Written by the driving session of 1 November 2026 (Claude Opus 5.5, as reported by its harness). Model disclosure: the exploit and the post are Anthropic's, and this session runs on an Anthropic model.

EPSS (measure 1; derived from the API's series). First date scored: 16 October, the day after E0. The score was 0.00165 (percentile 0.053) on every day from 16 to 24 October. On 25 October it was 0.00388 (percentile 0.326), a step under the brief's rule (a factor of 2.35). That was 1 day after E1 (the CNA container's update of 24 October), 2 days before E2 (Anthropic's post) and 4 before E3 (Go's announcement). It stayed at 0.00388 to 29 October, then rose to 0.00445 on 30 October and 0.00457 (percentile 0.397) on 31 October. Neither of those rises is a step. So the one step to date came before the post, not after it. As the brief says, a step near an event is a coincidence of dates, and nothing here says why the score moved.

KEV (measure 2). Not listed, in catalogue version 2026.10.30 (released 2026-10-30T17:02Z).

The record (measure 3). CNA CVSS 3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. One ADP container, the CVE Program's (updated 2026-10-31T21:04Z), with references only. No CISA ADP container, and so no SSVC values. NVD: vulnStatus Received, lastModified 2026-10-31T21:16Z. NVD's only metric is the CNA's, carried as Secondary, with no NVD score of its own. References: 11 in the CVE record (eight stable commits and three oss-security posts); 13 in OSV. OSV's related list holds eight SUSE and openSUSE advisories.

Fixes (measure 4; observation, as each tracker gives it).

• Debian:
  • fixed in bookworm's security suite (6.1.190-1), trixie's (6.12.113-1), forky (7.2.12-1) and sid (7.2.14-1);
  • linux-6.12 is fixed in bookworm's security suite (6.12.113-1~deb12u1);
  • the bookworm (6.1.176-1) and trixie (6.12.107-1) point releases are listed vulnerable.
• Ubuntu: priority high. The linux package is pending in stonking, jammy, noble and resolute; needed in bionic, focal and xenial; not affected in trusty. No Ubuntu notice is listed.
• Red Hat: threat severity Critical; CVSS 9.8, marked draft. The kernel is Affected in RHEL 8, 9 and 10, kernel-rt in RHEL 8 and 9, and RHEL for NVIDIA 26 and OpenShift 4's and 5's CoreOS images are Affected. Not affected: RHEL 6 and 7. No fixed release is listed. The mitigation field points to "the security bulletin", and the record's csaw flag is true.
• SUSE: overall state Pending; severity important. SUSE gives its own CVSS 3.1 of 8.1 (AC:H) beside the CNA's 9.8. The page lists 112 products with at least one main kernel package (kernel-default, kernel-source, kernel-rt or kernel-64kb):
  • 18 show only Released for those packages, and one shows both Released and Affected;
  • 81 show only Affected, 6 only In progress, 2 both Affected and In progress, and 4 Not affected.
  • Released includes SUSE Linux Enterprise Server 16.0, openSUSE Leap 16.0, SLE Micro 5.4 and 5.5, and the 15 SP4 and SP5 LTSS products.

The vendors' own severities (Ubuntu's priority, Red Hat's threat severity, SUSE's score) are recorded here as the trackers give them. They are not a named measure of the brief.

The pages (measure 5). Anthropic's post: dateModified 2026-10-30T15:24:16Z. Its body bytes differ from the pre-brief read of 08:09 UTC, but its extracted text is identical line for line. A reading made at this baseline: a page counts as changed when its extracted text changes (text_sha256 in the tables), not its bytes, because markup varies between fetches. AlmaLinux's post: no modified date; its text is recorded as of this read. Kernel announcement: unavailable (challenge).

Rows: LH036-baseline done.