GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2025-21943 (GCVE-0-2025-21943)

Vulnerability from cvelistv5 – Published: 2025-04-01 15:41 – Updated: 2026-05-11 21:09
VLAI
Title
gpio: aggregator: protect driver attr handlers against module unload
Summary
In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both new_device_store and delete_device_store touch module global resources (e.g. gpio_aggregator_lock). To prevent race conditions with module unload, a reference needs to be held. Add try_module_get() in these handlers. For new_device_store, this eliminates what appears to be the most dangerous scenario: if an id is allocated from gpio_aggregator_idr but platform_device_register has not yet been called or completed, a concurrent module unload could fail to unregister/delete the device, leaving behind a dangling platform device/GPIO forwarder. This can result in various issues. The following simple reproducer demonstrates these problems: #!/bin/bash while :; do # note: whether 'gpiochip0 0' exists or not does not matter. echo 'gpiochip0 0' > /sys/bus/platform/drivers/gpio-aggregator/new_device done & while :; do modprobe gpio-aggregator modprobe -r gpio-aggregator done & wait Starting with the following warning, several kinds of warnings will appear and the system may become unstable: ------------[ cut here ]------------ list_del corruption, ffff888103e2e980->next is LIST_POISON1 (dead000000000100) WARNING: CPU: 1 PID: 1327 at lib/list_debug.c:56 __list_del_entry_valid_or_report+0xa3/0x120 [...] RIP: 0010:__list_del_entry_valid_or_report+0xa3/0x120 [...] Call Trace: <TASK> ? __list_del_entry_valid_or_report+0xa3/0x120 ? __warn.cold+0x93/0xf2 ? __list_del_entry_valid_or_report+0xa3/0x120 ? report_bug+0xe6/0x170 ? __irq_work_queue_local+0x39/0xe0 ? handle_bug+0x58/0x90 ? exc_invalid_op+0x13/0x60 ? asm_exc_invalid_op+0x16/0x20 ? __list_del_entry_valid_or_report+0xa3/0x120 gpiod_remove_lookup_table+0x22/0x60 new_device_store+0x315/0x350 [gpio_aggregator] kernfs_fop_write_iter+0x137/0x1f0 vfs_write+0x262/0x430 ksys_write+0x60/0xd0 do_syscall_64+0x6c/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e [...] </TASK> ---[ end trace 0000000000000000 ]---
Severity
4.7 (Medium)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-10-01 17:17 UTC
CWE
  • CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 828546e24280f721350a7a0dcc92416e917b4382 , < fd6aa1f8cbe0979eb66ac32ebc231bf0b10a2117 (git)
Affected: 828546e24280f721350a7a0dcc92416e917b4382 , < 807789018186cf508ceb3a1f8f02935cd195717b (git)
Affected: 828546e24280f721350a7a0dcc92416e917b4382 , < 9334c88fc2fbc6836b307d269fcc1744c69701c0 (git)
Affected: 828546e24280f721350a7a0dcc92416e917b4382 , < d99dc8f7ea01ee1b21306e0eda8eb18a4af80db6 (git)
Affected: 828546e24280f721350a7a0dcc92416e917b4382 , < 8fb07fb1bba91d45846ed8605c3097fe67a7d54c (git)
Affected: 828546e24280f721350a7a0dcc92416e917b4382 , < 56281a76b805b5ac61feb5d580139695a22f87f0 (git)
Affected: 828546e24280f721350a7a0dcc92416e917b4382 , < 12f65d1203507f7db3ba59930fe29a3b8eee9945 (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.8
Unaffected: 0 , < 5.8 (semver)
Unaffected: 5.10.235 , ≤ 5.10.* (semver)
Unaffected: 5.15.179 , ≤ 5.15.* (semver)
Unaffected: 6.1.131 , ≤ 6.1.* (semver)
Unaffected: 6.6.83 , ≤ 6.6.* (semver)
Unaffected: 6.12.19 , ≤ 6.12.* (semver)
Unaffected: 6.13.7 , ≤ 6.13.* (semver)
Unaffected: 6.14 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 4.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-21943",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-01T17:17:38.478936Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-362",
                "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-01T17:17:41.198Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:39:43.188Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpio/gpio-aggregator.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "fd6aa1f8cbe0979eb66ac32ebc231bf0b10a2117",
              "status": "affected",
              "version": "828546e24280f721350a7a0dcc92416e917b4382",
              "versionType": "git"
            },
            {
              "lessThan": "807789018186cf508ceb3a1f8f02935cd195717b",
              "status": "affected",
              "version": "828546e24280f721350a7a0dcc92416e917b4382",
              "versionType": "git"
            },
            {
              "lessThan": "9334c88fc2fbc6836b307d269fcc1744c69701c0",
              "status": "affected",
              "version": "828546e24280f721350a7a0dcc92416e917b4382",
              "versionType": "git"
            },
            {
              "lessThan": "d99dc8f7ea01ee1b21306e0eda8eb18a4af80db6",
              "status": "affected",
              "version": "828546e24280f721350a7a0dcc92416e917b4382",
              "versionType": "git"
            },
            {
              "lessThan": "8fb07fb1bba91d45846ed8605c3097fe67a7d54c",
              "status": "affected",
              "version": "828546e24280f721350a7a0dcc92416e917b4382",
              "versionType": "git"
            },
            {
              "lessThan": "56281a76b805b5ac61feb5d580139695a22f87f0",
              "status": "affected",
              "version": "828546e24280f721350a7a0dcc92416e917b4382",
              "versionType": "git"
            },
            {
              "lessThan": "12f65d1203507f7db3ba59930fe29a3b8eee9945",
              "status": "affected",
              "version": "828546e24280f721350a7a0dcc92416e917b4382",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpio/gpio-aggregator.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.8"
            },
            {
              "lessThan": "5.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.235",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.179",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.131",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.83",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.13.*",
              "status": "unaffected",
              "version": "6.13.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.14",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.235",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.179",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.131",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.83",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.19",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.13.7",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.14",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: aggregator: protect driver attr handlers against module unload\n\nBoth new_device_store and delete_device_store touch module global\nresources (e.g. gpio_aggregator_lock). To prevent race conditions with\nmodule unload, a reference needs to be held.\n\nAdd try_module_get() in these handlers.\n\nFor new_device_store, this eliminates what appears to be the most dangerous\nscenario: if an id is allocated from gpio_aggregator_idr but\nplatform_device_register has not yet been called or completed, a concurrent\nmodule unload could fail to unregister/delete the device, leaving behind a\ndangling platform device/GPIO forwarder. This can result in various issues.\nThe following simple reproducer demonstrates these problems:\n\n  #!/bin/bash\n  while :; do\n    # note: whether \u0027gpiochip0 0\u0027 exists or not does not matter.\n    echo \u0027gpiochip0 0\u0027 \u003e /sys/bus/platform/drivers/gpio-aggregator/new_device\n  done \u0026\n  while :; do\n    modprobe gpio-aggregator\n    modprobe -r gpio-aggregator\n  done \u0026\n  wait\n\n  Starting with the following warning, several kinds of warnings will appear\n  and the system may become unstable:\n\n  ------------[ cut here ]------------\n  list_del corruption, ffff888103e2e980-\u003enext is LIST_POISON1 (dead000000000100)\n  WARNING: CPU: 1 PID: 1327 at lib/list_debug.c:56 __list_del_entry_valid_or_report+0xa3/0x120\n  [...]\n  RIP: 0010:__list_del_entry_valid_or_report+0xa3/0x120\n  [...]\n  Call Trace:\n   \u003cTASK\u003e\n   ? __list_del_entry_valid_or_report+0xa3/0x120\n   ? __warn.cold+0x93/0xf2\n   ? __list_del_entry_valid_or_report+0xa3/0x120\n   ? report_bug+0xe6/0x170\n   ? __irq_work_queue_local+0x39/0xe0\n   ? handle_bug+0x58/0x90\n   ? exc_invalid_op+0x13/0x60\n   ? asm_exc_invalid_op+0x16/0x20\n   ? __list_del_entry_valid_or_report+0xa3/0x120\n   gpiod_remove_lookup_table+0x22/0x60\n   new_device_store+0x315/0x350 [gpio_aggregator]\n   kernfs_fop_write_iter+0x137/0x1f0\n   vfs_write+0x262/0x430\n   ksys_write+0x60/0xd0\n   do_syscall_64+0x6c/0x180\n   entry_SYSCALL_64_after_hwframe+0x76/0x7e\n   [...]\n   \u003c/TASK\u003e\n  ---[ end trace 0000000000000000 ]---"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T21:09:32.538Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/fd6aa1f8cbe0979eb66ac32ebc231bf0b10a2117"
        },
        {
          "url": "https://git.kernel.org/stable/c/807789018186cf508ceb3a1f8f02935cd195717b"
        },
        {
          "url": "https://git.kernel.org/stable/c/9334c88fc2fbc6836b307d269fcc1744c69701c0"
        },
        {
          "url": "https://git.kernel.org/stable/c/d99dc8f7ea01ee1b21306e0eda8eb18a4af80db6"
        },
        {
          "url": "https://git.kernel.org/stable/c/8fb07fb1bba91d45846ed8605c3097fe67a7d54c"
        },
        {
          "url": "https://git.kernel.org/stable/c/56281a76b805b5ac61feb5d580139695a22f87f0"
        },
        {
          "url": "https://git.kernel.org/stable/c/12f65d1203507f7db3ba59930fe29a3b8eee9945"
        }
      ],
      "title": "gpio: aggregator: protect driver attr handlers against module unload",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-21943",
    "datePublished": "2025-04-01T15:41:07.463Z",
    "dateReserved": "2024-12-29T08:45:45.789Z",
    "dateUpdated": "2026-05-11T21:09:32.538Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-21943",
      "date": "2026-09-16",
      "epss": "0.00167",
      "percentile": "0.06321"
    },
    "microsoft_vex": {
      "current_release_date": "2026-02-18T01:51:02.000Z",
      "cve": "CVE-2025-21943",
      "id": "msrc_CVE-2025-21943",
      "initial_release_date": "2025-04-02T00:00:00.000Z",
      "product_status:fixed": "5",
      "product_status:known_affected": "5",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "gpio: aggregator: protect driver attr handlers against module unload",
      "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-21943.json",
      "version": "2"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-21943\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-04-01T16:15:25.400\",\"lastModified\":\"2026-06-17T08:44:40.313\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ngpio: aggregator: protect driver attr handlers against module unload\\n\\nBoth new_device_store and delete_device_store touch module global\\nresources (e.g. gpio_aggregator_lock). To prevent race conditions with\\nmodule unload, a reference needs to be held.\\n\\nAdd try_module_get() in these handlers.\\n\\nFor new_device_store, this eliminates what appears to be the most dangerous\\nscenario: if an id is allocated from gpio_aggregator_idr but\\nplatform_device_register has not yet been called or completed, a concurrent\\nmodule unload could fail to unregister/delete the device, leaving behind a\\ndangling platform device/GPIO forwarder. This can result in various issues.\\nThe following simple reproducer demonstrates these problems:\\n\\n  #!/bin/bash\\n  while :; do\\n    # note: whether \u0027gpiochip0 0\u0027 exists or not does not matter.\\n    echo \u0027gpiochip0 0\u0027 \u003e /sys/bus/platform/drivers/gpio-aggregator/new_device\\n  done \u0026\\n  while :; do\\n    modprobe gpio-aggregator\\n    modprobe -r gpio-aggregator\\n  done \u0026\\n  wait\\n\\n  Starting with the following warning, several kinds of warnings will appear\\n  and the system may become unstable:\\n\\n  ------------[ cut here ]------------\\n  list_del corruption, ffff888103e2e980-\u003enext is LIST_POISON1 (dead000000000100)\\n  WARNING: CPU: 1 PID: 1327 at lib/list_debug.c:56 __list_del_entry_valid_or_report+0xa3/0x120\\n  [...]\\n  RIP: 0010:__list_del_entry_valid_or_report+0xa3/0x120\\n  [...]\\n  Call Trace:\\n   \u003cTASK\u003e\\n   ? __list_del_entry_valid_or_report+0xa3/0x120\\n   ? __warn.cold+0x93/0xf2\\n   ? __list_del_entry_valid_or_report+0xa3/0x120\\n   ? report_bug+0xe6/0x170\\n   ? __irq_work_queue_local+0x39/0xe0\\n   ? handle_bug+0x58/0x90\\n   ? exc_invalid_op+0x13/0x60\\n   ? asm_exc_invalid_op+0x16/0x20\\n   ? __list_del_entry_valid_or_report+0xa3/0x120\\n   gpiod_remove_lookup_table+0x22/0x60\\n   new_device_store+0x315/0x350 [gpio_aggregator]\\n   kernfs_fop_write_iter+0x137/0x1f0\\n   vfs_write+0x262/0x430\\n   ksys_write+0x60/0xd0\\n   do_syscall_64+0x6c/0x180\\n   entry_SYSCALL_64_after_hwframe+0x76/0x7e\\n   [...]\\n   \u003c/TASK\u003e\\n  ---[ end trace 0000000000000000 ]---\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: gpio: gregator: protege los controladores attr del controlador contra la descarga del m\u00f3dulo Tanto new_device_store como delete_device_store tocan los recursos globales del m\u00f3dulo (por ejemplo, gpio_aggregator_lock). Para evitar condiciones de ejecuci\u00f3n con la descarga del m\u00f3dulo, se debe mantener una referencia. Agregue try_module_get() en estos controladores. Para new_device_store, esto elimina lo que parece ser el escenario m\u00e1s peligroso: si se asigna un id desde gpio_aggregator_idr pero platform_device_register a\u00fan no se ha llamado o completado, una descarga de m\u00f3dulo concurrente podr\u00eda fallar al anular el registro/eliminar el dispositivo, dejando atr\u00e1s un reenv\u00edo de dispositivo de plataforma/GPIO colgante. Esto puede resultar en varios problemas. El siguiente reproductor simple demuestra estos problemas: #!/bin/bash while :; do # nota: no importa si \u0027gpiochip0 0\u0027 existe o no. echo \u0027gpiochip0 0\u0027 \u0026gt; /sys/bus/platform/drivers/gpio-aggregator/new_device done \u0026amp; while :; do modprobe gpio-aggregator modprobe -r gpio-aggregator done \u0026amp; wait A partir de la siguiente advertencia, aparecer\u00e1n varios tipos de advertencias y el sistema puede volverse inestable: ------------[ cortar aqu\u00ed ]------------ list_del corruption, ffff888103e2e980-\u0026gt;next is LIST_POISON1 (dead000000000100) WARNING: CPU: 1 PID: 1327 at lib/list_debug.c:56 __list_del_entry_valid_or_report+0xa3/0x120 [...] RIP: 0010:__list_del_entry_valid_or_report+0xa3/0x120 [...] Call Trace:  ? __list_del_entry_valid_or_report+0xa3/0x120 ? __warn.cold+0x93/0xf2 ? __list_del_entry_valid_or_report+0xa3/0x120 ? report_bug+0xe6/0x170 ? __irq_work_queue_local+0x39/0xe0 ? handle_bug+0x58/0x90 ? exc_invalid_op+0x13/0x60 ? asm_exc_invalid_op+0x16/0x20 ? __list_del_entry_valid_or_report+0xa3/0x120 gpiod_remove_lookup_table+0x22/0x60 new_device_store+0x315/0x350 [gpio_aggregator] kernfs_fop_write_iter+0x137/0x1f0 vfs_write+0x262/0x430 ksys_write+0x60/0xd0 do_syscall_64+0x6c/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e [...]  ---[ fin de seguimiento 000000000000000 ]---\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/gpio/gpio-aggregator.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"828546e24280f721350a7a0dcc92416e917b4382\",\"lessThan\":\"fd6aa1f8cbe0979eb66ac32ebc231bf0b10a2117\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"828546e24280f721350a7a0dcc92416e917b4382\",\"lessThan\":\"807789018186cf508ceb3a1f8f02935cd195717b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"828546e24280f721350a7a0dcc92416e917b4382\",\"lessThan\":\"9334c88fc2fbc6836b307d269fcc1744c69701c0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"828546e24280f721350a7a0dcc92416e917b4382\",\"lessThan\":\"d99dc8f7ea01ee1b21306e0eda8eb18a4af80db6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"828546e24280f721350a7a0dcc92416e917b4382\",\"lessThan\":\"8fb07fb1bba91d45846ed8605c3097fe67a7d54c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"828546e24280f721350a7a0dcc92416e917b4382\",\"lessThan\":\"56281a76b805b5ac61feb5d580139695a22f87f0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"828546e24280f721350a7a0dcc92416e917b4382\",\"lessThan\":\"12f65d1203507f7db3ba59930fe29a3b8eee9945\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/gpio/gpio-aggregator.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.8\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.8\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.235\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.179\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.131\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.83\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.19\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.13.7\",\"lessThanOrEqual\":\"6.13.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.14\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":4.7,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.0,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":4.7,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.0,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-10-01T17:17:38.478936Z\",\"id\":\"CVE-2025-21943\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-362\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-362\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.8\",\"versionEndExcluding\":\"5.10.235\",\"matchCriteriaId\":\"17FFC38A-2679-443B-8BDB-D553D86D60EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.179\",\"matchCriteriaId\":\"C708062C-4E1B-465F-AE6D-C09C46400875\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.131\",\"matchCriteriaId\":\"BA9C2DE3-D37C-46C6-8DCD-2EE509456E0B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.83\",\"matchCriteriaId\":\"7D9F642F-6E05-4926-B0FE-62F95B7266BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.19\",\"matchCriteriaId\":\"32865E5C-8AE1-4D3D-A64D-299039694A88\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.13.7\",\"matchCriteriaId\":\"842F5A44-3E71-4546-B4FD-43B0ACE3F32B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"186716B6-2B66-4BD0-852E-D48E71C0C85F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D3E781C-403A-498F-9DA9-ECEE50F41E75\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"66619FB8-0AAF-4166-B2CF-67B24143261D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3D6550E-6679-4560-902D-AF52DCFE905B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"45B90F6B-BEC7-4D4E-883A-9DBADE021750\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/12f65d1203507f7db3ba59930fe29a3b8eee9945\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/56281a76b805b5ac61feb5d580139695a22f87f0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/807789018186cf508ceb3a1f8f02935cd195717b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8fb07fb1bba91d45846ed8605c3097fe67a7d54c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9334c88fc2fbc6836b307d269fcc1744c69701c0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d99dc8f7ea01ee1b21306e0eda8eb18a4af80db6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fd6aa1f8cbe0979eb66ac32ebc231bf0b10a2117\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-30T00:07:09+00:00",
      "cve": "CVE-2025-21943",
      "id": "CVE-2025-21943",
      "initial_release_date": "2025-04-01T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: gpio: aggregator: protect driver attr handlers against module unload",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-21943.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-31T00:22:43Z",
      "cve": "CVE-2025-21943",
      "id": "CVE-2025-21943",
      "initial_release_date": "2025-04-02T08:57:22Z",
      "product_status:known_affected": "522",
      "product_status:known_not_affected": "280",
      "product_status:recommended": "384",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-21943",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-21943.json",
      "version": "43"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T19:39:43.188Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.7, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-21943\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-10-01T17:17:38.478936Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-362\", \"description\": \"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-10-01T14:38:10.353Z\"}}], \"cna\": {\"title\": \"gpio: aggregator: protect driver attr handlers against module unload\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"828546e24280f721350a7a0dcc92416e917b4382\", \"lessThan\": \"fd6aa1f8cbe0979eb66ac32ebc231bf0b10a2117\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"828546e24280f721350a7a0dcc92416e917b4382\", \"lessThan\": \"807789018186cf508ceb3a1f8f02935cd195717b\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"828546e24280f721350a7a0dcc92416e917b4382\", \"lessThan\": \"9334c88fc2fbc6836b307d269fcc1744c69701c0\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"828546e24280f721350a7a0dcc92416e917b4382\", \"lessThan\": \"d99dc8f7ea01ee1b21306e0eda8eb18a4af80db6\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"828546e24280f721350a7a0dcc92416e917b4382\", \"lessThan\": \"8fb07fb1bba91d45846ed8605c3097fe67a7d54c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"828546e24280f721350a7a0dcc92416e917b4382\", \"lessThan\": \"56281a76b805b5ac61feb5d580139695a22f87f0\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"828546e24280f721350a7a0dcc92416e917b4382\", \"lessThan\": \"12f65d1203507f7db3ba59930fe29a3b8eee9945\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/gpio/gpio-aggregator.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.8\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.8\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.10.235\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.179\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.131\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.83\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.12.19\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.12.*\"}, {\"status\": \"unaffected\", \"version\": \"6.13.7\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.13.*\"}, {\"status\": \"unaffected\", \"version\": \"6.14\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/gpio/gpio-aggregator.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/fd6aa1f8cbe0979eb66ac32ebc231bf0b10a2117\"}, {\"url\": \"https://git.kernel.org/stable/c/807789018186cf508ceb3a1f8f02935cd195717b\"}, {\"url\": \"https://git.kernel.org/stable/c/9334c88fc2fbc6836b307d269fcc1744c69701c0\"}, {\"url\": \"https://git.kernel.org/stable/c/d99dc8f7ea01ee1b21306e0eda8eb18a4af80db6\"}, {\"url\": \"https://git.kernel.org/stable/c/8fb07fb1bba91d45846ed8605c3097fe67a7d54c\"}, {\"url\": \"https://git.kernel.org/stable/c/56281a76b805b5ac61feb5d580139695a22f87f0\"}, {\"url\": \"https://git.kernel.org/stable/c/12f65d1203507f7db3ba59930fe29a3b8eee9945\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ngpio: aggregator: protect driver attr handlers against module unload\\n\\nBoth new_device_store and delete_device_store touch module global\\nresources (e.g. gpio_aggregator_lock). To prevent race conditions with\\nmodule unload, a reference needs to be held.\\n\\nAdd try_module_get() in these handlers.\\n\\nFor new_device_store, this eliminates what appears to be the most dangerous\\nscenario: if an id is allocated from gpio_aggregator_idr but\\nplatform_device_register has not yet been called or completed, a concurrent\\nmodule unload could fail to unregister/delete the device, leaving behind a\\ndangling platform device/GPIO forwarder. This can result in various issues.\\nThe following simple reproducer demonstrates these problems:\\n\\n  #!/bin/bash\\n  while :; do\\n    # note: whether \u0027gpiochip0 0\u0027 exists or not does not matter.\\n    echo \u0027gpiochip0 0\u0027 \u003e /sys/bus/platform/drivers/gpio-aggregator/new_device\\n  done \u0026\\n  while :; do\\n    modprobe gpio-aggregator\\n    modprobe -r gpio-aggregator\\n  done \u0026\\n  wait\\n\\n  Starting with the following warning, several kinds of warnings will appear\\n  and the system may become unstable:\\n\\n  ------------[ cut here ]------------\\n  list_del corruption, ffff888103e2e980-\u003enext is LIST_POISON1 (dead000000000100)\\n  WARNING: CPU: 1 PID: 1327 at lib/list_debug.c:56 __list_del_entry_valid_or_report+0xa3/0x120\\n  [...]\\n  RIP: 0010:__list_del_entry_valid_or_report+0xa3/0x120\\n  [...]\\n  Call Trace:\\n   \u003cTASK\u003e\\n   ? __list_del_entry_valid_or_report+0xa3/0x120\\n   ? __warn.cold+0x93/0xf2\\n   ? __list_del_entry_valid_or_report+0xa3/0x120\\n   ? report_bug+0xe6/0x170\\n   ? __irq_work_queue_local+0x39/0xe0\\n   ? handle_bug+0x58/0x90\\n   ? exc_invalid_op+0x13/0x60\\n   ? asm_exc_invalid_op+0x16/0x20\\n   ? __list_del_entry_valid_or_report+0xa3/0x120\\n   gpiod_remove_lookup_table+0x22/0x60\\n   new_device_store+0x315/0x350 [gpio_aggregator]\\n   kernfs_fop_write_iter+0x137/0x1f0\\n   vfs_write+0x262/0x430\\n   ksys_write+0x60/0xd0\\n   do_syscall_64+0x6c/0x180\\n   entry_SYSCALL_64_after_hwframe+0x76/0x7e\\n   [...]\\n   \u003c/TASK\u003e\\n  ---[ end trace 0000000000000000 ]---\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.235\", \"versionStartIncluding\": \"5.8\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.179\", \"versionStartIncluding\": \"5.8\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.131\", \"versionStartIncluding\": \"5.8\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.83\", \"versionStartIncluding\": \"5.8\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.12.19\", \"versionStartIncluding\": \"5.8\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.13.7\", \"versionStartIncluding\": \"5.8\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.14\", \"versionStartIncluding\": \"5.8\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-11T21:09:32.538Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-21943\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-11T21:09:32.538Z\", \"dateReserved\": \"2024-12-29T08:45:45.789Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2025-04-01T15:41:07.463Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.