CVE-2026-68216 (GCVE-0-2026-68216)

Vulnerability from cvelistv5 – Published: 2026-08-10 12:00 – Updated: 2026-08-19 16:31
VLAI
Title
media: pwc: Return queued buffers on start_streaming() failure
Summary
In the Linux kernel, the following vulnerability has been resolved: media: pwc: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the driver via buf_queue() before calling start_streaming(). If start_streaming() returns an error without first returning those buffers via vb2_buffer_done(), vb2_start_streaming() fires WARN_ON(owned_by_drv_count) and the queued buffers leak. pwc's start_streaming() had two early returns that hit this trap: -ENODEV when the USB device was already disconnected, and -ERESTARTSYS when mutex_lock_interruptible() was interrupted by a signal. Call the existing pwc_cleanup_queued_bufs() helper with VB2_BUF_STATE_QUEUED before returning (matching the state already used by the pwc_isoc_init() error path in the same function). This mirrors the uvcvideo fix in commit 4cf3b6fd54eb ("media: uvcvideo: Return queued buffers on start_streaming() failure").
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478 , < d552852bf76b7dfb35b4593fc874d8dd2f1b1bf3 (git)
Affected: ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478 , < 0362ae30b61b3053ee3095c1b8f179197ec4f539 (git)
Affected: ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478 , < fa78e590852751d3ad32f33f6b4e210fe6ccbe9b (git)
Affected: ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478 , < f2f9fcacd81953dde6cb86312ab13ca13e689664 (git)
Affected: ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478 , < 5d7cc2634c3843a1414a0f6407aa17f1f91dee60 (git)
Affected: ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478 , < cb16b79a2be2cec9c3ebe4147490817c4d8b1de3 (git)
Affected: ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478 , < a4f8f629983f643333e49df90557805469bcbb25 (git)
Affected: ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478 , < 975b2ee20e569d47821e4f6c9761b4664d48a6a4 (git)
guessed Create a notification for this product.
Linux Linux Affected: 3.5
Unaffected: 0 , < 3.5 (semver)
Unaffected: 5.10.265 , ≤ 5.10.* (semver)
Unaffected: 5.15.216 , ≤ 5.15.* (semver)
Unaffected: 6.1.183 , ≤ 6.1.* (semver)
Unaffected: 6.6.148 , ≤ 6.6.* (semver)
Unaffected: 6.12.101 , ≤ 6.12.* (semver)
Unaffected: 6.18.42 , ≤ 6.18.* (semver)
Unaffected: 7.1.6 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/usb/pwc/pwc-if.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "d552852bf76b7dfb35b4593fc874d8dd2f1b1bf3",
              "status": "affected",
              "version": "ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478",
              "versionType": "git"
            },
            {
              "lessThan": "0362ae30b61b3053ee3095c1b8f179197ec4f539",
              "status": "affected",
              "version": "ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478",
              "versionType": "git"
            },
            {
              "lessThan": "fa78e590852751d3ad32f33f6b4e210fe6ccbe9b",
              "status": "affected",
              "version": "ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478",
              "versionType": "git"
            },
            {
              "lessThan": "f2f9fcacd81953dde6cb86312ab13ca13e689664",
              "status": "affected",
              "version": "ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478",
              "versionType": "git"
            },
            {
              "lessThan": "5d7cc2634c3843a1414a0f6407aa17f1f91dee60",
              "status": "affected",
              "version": "ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478",
              "versionType": "git"
            },
            {
              "lessThan": "cb16b79a2be2cec9c3ebe4147490817c4d8b1de3",
              "status": "affected",
              "version": "ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478",
              "versionType": "git"
            },
            {
              "lessThan": "a4f8f629983f643333e49df90557805469bcbb25",
              "status": "affected",
              "version": "ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478",
              "versionType": "git"
            },
            {
              "lessThan": "975b2ee20e569d47821e4f6c9761b4664d48a6a4",
              "status": "affected",
              "version": "ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/usb/pwc/pwc-if.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.5"
            },
            {
              "lessThan": "3.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.265",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.216",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.183",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.148",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.101",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.42",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.265",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.216",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.183",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.148",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.101",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.42",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.6",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "3.5",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: pwc: Return queued buffers on start_streaming() failure\n\nThe vb2 framework hands buffers to the driver via buf_queue() before\ncalling start_streaming().  If start_streaming() returns an error\nwithout first returning those buffers via vb2_buffer_done(),\nvb2_start_streaming() fires WARN_ON(owned_by_drv_count) and the queued\nbuffers leak.\n\npwc\u0027s start_streaming() had two early returns that hit this trap:\n-ENODEV when the USB device was already disconnected, and -ERESTARTSYS\nwhen mutex_lock_interruptible() was interrupted by a signal.  Call the\nexisting pwc_cleanup_queued_bufs() helper with VB2_BUF_STATE_QUEUED\nbefore returning (matching the state already used by the\npwc_isoc_init() error path in the same function).\n\nThis mirrors the uvcvideo fix in commit 4cf3b6fd54eb (\"media: uvcvideo:\nReturn queued buffers on start_streaming() failure\")."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is reached through the VIDIOC_STREAMON ioctl on a local V4L2 device node (/dev/videoN) exposed by the pwc USB webcam driver, so the attacker needs local access to the system rather than network reachability.\nAC:L - The -ERESTARTSYS path is triggered deterministically by the attacker: hold pdev-\u003ev4l2_lock from a second thread/fd and send a signal to the thread blocked in mutex_lock_interruptible() inside start_streaming(), so both sides of the timing window are attacker-controlled and repeatable.\nPR:L - Only an unprivileged local account with access to the video device node (typical for desktop, kiosk and embedded video appliances, where the video group or logind ACLs grant it) is needed; no capabilities or root are required.\nUI:N - The attacker performs the entire sequence (REQBUFS, QBUF, STREAMON, signal delivery) from its own process; no action by any other user is needed.\nS:U - The buffer-accounting breakage and the resulting list corruption stay within the kernel\u0027s own security authority; no VM, IOMMU or sandbox boundary is crossed.\nC:H - Buffers left on pdev-\u003equeued_bufs after vb2 has already reclaimed them to QUEUED are re-linked on the next STREAMON, so the same pwc_frame_buf can be filled and completed while vb2 considers it userspace-owned, allowing an attacker to read kernel-managed frame data through stale mmap\u0027ed buffers.\nI:H - The double list_add_tail() of an already-linked buf-\u003elist node corrupts the driver\u0027s queued-buffer list and desynchronizes vb2\u0027s owned_by_drv_count, giving overlapping kernel/userspace ownership of buffer objects that can be leveraged for controlled modification of kernel-side state.\nA:H - Each attempt fires WARN_ON(owned_by_drv_count) in vb2_start_streaming(), which panics the machine on panic_on_warn kernels, and the leaked/corrupted buffer list additionally leads to lost buffers and unstable streaming state on subsequent STREAMON/STREAMOFF cycles."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-19T16:31:47.114Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/d552852bf76b7dfb35b4593fc874d8dd2f1b1bf3"
        },
        {
          "url": "https://git.kernel.org/stable/c/0362ae30b61b3053ee3095c1b8f179197ec4f539"
        },
        {
          "url": "https://git.kernel.org/stable/c/fa78e590852751d3ad32f33f6b4e210fe6ccbe9b"
        },
        {
          "url": "https://git.kernel.org/stable/c/f2f9fcacd81953dde6cb86312ab13ca13e689664"
        },
        {
          "url": "https://git.kernel.org/stable/c/5d7cc2634c3843a1414a0f6407aa17f1f91dee60"
        },
        {
          "url": "https://git.kernel.org/stable/c/cb16b79a2be2cec9c3ebe4147490817c4d8b1de3"
        },
        {
          "url": "https://git.kernel.org/stable/c/a4f8f629983f643333e49df90557805469bcbb25"
        },
        {
          "url": "https://git.kernel.org/stable/c/975b2ee20e569d47821e4f6c9761b4664d48a6a4"
        }
      ],
      "title": "media: pwc: Return queued buffers on start_streaming() failure",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-68216",
    "datePublished": "2026-08-10T12:00:35.592Z",
    "dateReserved": "2026-07-30T09:28:09.375Z",
    "dateUpdated": "2026-08-19T16:31:47.114Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-68216",
      "date": "2026-08-20",
      "epss": "0.00176",
      "percentile": "0.07415"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-68216\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-08-10T13:20:09.527\",\"lastModified\":\"2026-08-19T17:20:37.670\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmedia: pwc: Return queued buffers on start_streaming() failure\\n\\nThe vb2 framework hands buffers to the driver via buf_queue() before\\ncalling start_streaming().  If start_streaming() returns an error\\nwithout first returning those buffers via vb2_buffer_done(),\\nvb2_start_streaming() fires WARN_ON(owned_by_drv_count) and the queued\\nbuffers leak.\\n\\npwc\u0027s start_streaming() had two early returns that hit this trap:\\n-ENODEV when the USB device was already disconnected, and -ERESTARTSYS\\nwhen mutex_lock_interruptible() was interrupted by a signal.  Call the\\nexisting pwc_cleanup_queued_bufs() helper with VB2_BUF_STATE_QUEUED\\nbefore returning (matching the state already used by the\\npwc_isoc_init() error path in the same function).\\n\\nThis mirrors the uvcvideo fix in commit 4cf3b6fd54eb (\\\"media: uvcvideo:\\nReturn queued buffers on start_streaming() failure\\\").\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/media/usb/pwc/pwc-if.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478\",\"lessThan\":\"d552852bf76b7dfb35b4593fc874d8dd2f1b1bf3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478\",\"lessThan\":\"0362ae30b61b3053ee3095c1b8f179197ec4f539\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478\",\"lessThan\":\"fa78e590852751d3ad32f33f6b4e210fe6ccbe9b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478\",\"lessThan\":\"f2f9fcacd81953dde6cb86312ab13ca13e689664\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478\",\"lessThan\":\"5d7cc2634c3843a1414a0f6407aa17f1f91dee60\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478\",\"lessThan\":\"cb16b79a2be2cec9c3ebe4147490817c4d8b1de3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478\",\"lessThan\":\"a4f8f629983f643333e49df90557805469bcbb25\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478\",\"lessThan\":\"975b2ee20e569d47821e4f6c9761b4664d48a6a4\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/media/usb/pwc/pwc-if.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"3.5\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"3.5\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.265\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.216\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.183\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.148\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.101\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.42\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1.6\",\"lessThanOrEqual\":\"7.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0362ae30b61b3053ee3095c1b8f179197ec4f539\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/5d7cc2634c3843a1414a0f6407aa17f1f91dee60\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/975b2ee20e569d47821e4f6c9761b4664d48a6a4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/a4f8f629983f643333e49df90557805469bcbb25\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/cb16b79a2be2cec9c3ebe4147490817c4d8b1de3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/d552852bf76b7dfb35b4593fc874d8dd2f1b1bf3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f2f9fcacd81953dde6cb86312ab13ca13e689664\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/fa78e590852751d3ad32f33f6b4e210fe6ccbe9b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-08-13T23:22:11+00:00",
      "cve": "CVE-2026-68216",
      "id": "CVE-2026-68216",
      "initial_release_date": "2026-08-10T00:00:00+00:00",
      "product_status:known_affected": "261",
      "product_status:known_not_affected": "15",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: media: pwc: Return queued buffers on start_streaming() failure",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68216.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-14T00:53:11Z",
      "cve": "CVE-2026-68216",
      "id": "CVE-2026-68216",
      "initial_release_date": "2026-08-13T16:22:46Z",
      "product_status:known_affected": "205",
      "product_status:known_not_affected": "91",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-68216",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-68216.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.