GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-89456 (GCVE-0-2026-89456)

Vulnerability from cvelistv5 – Published: 2026-09-11 19:43 – Updated: 2026-09-14 11:59
VLAI
Title
s390/dasd: Propagate partial completion length across ERP recovery
Summary
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Propagate partial completion length across ERP recovery dasd_default_erp_postaction() copies the timing and device state from the finished ERP request back to the original request but drops proc_bytes. A request that was partially completed, an ESE read of a not-yet-allocated track returns fewer bytes than requested, and then recovered through the ERP chain loses its partial-completion length. __dasd_cleanup_cqr() then sees proc_bytes == 0 and completes the whole request instead of requeueing the remainder, silently returning zeroed data for the part that was never read. Carry proc_bytes over to the original request like the other per-request state.
Severity
7 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 5e6bdd37c5526ef01326df5dabb93011ee89237e , < 9e063165d3fe58db2a517717b830f17e82d03467 (git)
Affected: 5e6bdd37c5526ef01326df5dabb93011ee89237e , < 6b0954c8a259da1e4aa745989f82723947acfb46 (git)
Affected: 5e6bdd37c5526ef01326df5dabb93011ee89237e , < d0a2f97d8c97134aa7f6a191940b7bab4bb42f5f (git)
Affected: 5e6bdd37c5526ef01326df5dabb93011ee89237e , < f735b9710f0c8fe72c1060103e865f4ae678190b (git)
Affected: 5e6bdd37c5526ef01326df5dabb93011ee89237e , < d6b8778b1b82aa3a8dbf8612080f635b834bd16b (git)
Affected: 5e6bdd37c5526ef01326df5dabb93011ee89237e , < ceafb262475ac6cb3a7d07b1102608be2b216b99 (git)
Affected: 5e6bdd37c5526ef01326df5dabb93011ee89237e , < 15ec03452c18e8d288e519837d21b308300d74b2 (git)
Affected: 5e6bdd37c5526ef01326df5dabb93011ee89237e , < 6fb5ba2e7e43173a3761e46f091070a8185efa14 (git)
Affected: fbbacd0dcbc3ae9398c569dbea96ae4b5ad97e04 (git)
Affected: 5f7c9989f11305aaa43e0f4378f4f070022a9f2b (git)
Affected: 5.4.26 , < 5.5 (semver)
Affected: 5.5.10 , < 5.6 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 5.6
Unaffected: 0 , < 5.6 (semver)
Unaffected: 5.10.270 , ≤ 5.10.* (semver)
Unaffected: 5.15.221 , ≤ 5.15.* (semver)
Unaffected: 6.1.188 , ≤ 6.1.* (semver)
Unaffected: 6.6.157 , ≤ 6.6.* (semver)
Unaffected: 6.12.109 , ≤ 6.12.* (semver)
Unaffected: 6.18.50 , ≤ 6.18.* (semver)
Unaffected: 7.2.4 , ≤ 7.2.* (semver)
Unaffected: 7.3-rc1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/s390/block/dasd_erp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "9e063165d3fe58db2a517717b830f17e82d03467",
              "status": "affected",
              "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e",
              "versionType": "git"
            },
            {
              "lessThan": "6b0954c8a259da1e4aa745989f82723947acfb46",
              "status": "affected",
              "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e",
              "versionType": "git"
            },
            {
              "lessThan": "d0a2f97d8c97134aa7f6a191940b7bab4bb42f5f",
              "status": "affected",
              "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e",
              "versionType": "git"
            },
            {
              "lessThan": "f735b9710f0c8fe72c1060103e865f4ae678190b",
              "status": "affected",
              "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e",
              "versionType": "git"
            },
            {
              "lessThan": "d6b8778b1b82aa3a8dbf8612080f635b834bd16b",
              "status": "affected",
              "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e",
              "versionType": "git"
            },
            {
              "lessThan": "ceafb262475ac6cb3a7d07b1102608be2b216b99",
              "status": "affected",
              "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e",
              "versionType": "git"
            },
            {
              "lessThan": "15ec03452c18e8d288e519837d21b308300d74b2",
              "status": "affected",
              "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e",
              "versionType": "git"
            },
            {
              "lessThan": "6fb5ba2e7e43173a3761e46f091070a8185efa14",
              "status": "affected",
              "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "fbbacd0dcbc3ae9398c569dbea96ae4b5ad97e04",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5f7c9989f11305aaa43e0f4378f4f070022a9f2b",
              "versionType": "git"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.26",
              "versionType": "semver"
            },
            {
              "lessThan": "5.6",
              "status": "affected",
              "version": "5.5.10",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/s390/block/dasd_erp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.6"
            },
            {
              "lessThan": "5.6",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.109",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.50",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.270",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.221",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.188",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.157",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.109",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.50",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.4",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3-rc1",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.26",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.5.10",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/dasd: Propagate partial completion length across ERP recovery\n\ndasd_default_erp_postaction() copies the timing and device state from\nthe finished ERP request back to the original request but drops\nproc_bytes. A request that was partially completed, an ESE read of a\nnot-yet-allocated track returns fewer bytes than requested, and then\nrecovered through the ERP chain loses its partial-completion length.\n__dasd_cleanup_cqr() then sees proc_bytes == 0 and completes the whole\nrequest instead of requeueing the remainder, silently returning zeroed\ndata for the part that was never read.\n\nCarry proc_bytes over to the original request like the other\nper-request state."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The flaw is in the s390 DASD block driver\u0027s ERP postaction and is reached only by local block I/O to an ESE (thin-provisioned) volume, via a DASD-backed filesystem or /dev/dasd*; no ksmbd, nfsd, or packet path parses attacker data into this code.\nAC:H - Exploitation needs an ESE NRF partial read whose CQR is an ERP retry, so a prior hardware-reported unit check or similar recoverable error must occur; the attacker cannot inject sense data or craft CCWs, which the driver builds itself.\nPR:L - Unprivileged local users trigger the path through ordinary read/write syscalls on files stored on a DASD-backed filesystem; dasd_open and do_dasd_request impose no capability check on that I/O path.\nUI:N - The attacker performs the I/O themselves; no second user must mount a volume, open a file, or otherwise interact.\nS:U - Incorrect request completion affects host kernel block I/O and page-cache contents on the same LPAR; it is not a KVM/vfio-ccw guest-to-host escape or an IOMMU/DMA boundary bypass.\nC:H - Dropping proc_bytes completes the unread remainder as success, so page-cache pages the driver never filled \u2014 stale previously freed kernel or other tenants\u0027 memory \u2014 are marked uptodate and returned to userspace as valid file data.\nI:H - Tracks after the unallocated ESE hole are never fetched yet the whole request succeeds, substituting zeros or stale bytes for real disk contents that filesystems may write back, permanently corrupting co-resident file data and metadata.\nA:H - Successful completion of filesystem, journal, or executable reads with zeros or stale data can corrupt metadata parsers and trigger ext4 errors=panic or XFS forced shutdown, taking IBM Z/LinuxONE storage nodes down."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T11:59:56.742Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/9e063165d3fe58db2a517717b830f17e82d03467"
        },
        {
          "url": "https://git.kernel.org/stable/c/6b0954c8a259da1e4aa745989f82723947acfb46"
        },
        {
          "url": "https://git.kernel.org/stable/c/d0a2f97d8c97134aa7f6a191940b7bab4bb42f5f"
        },
        {
          "url": "https://git.kernel.org/stable/c/f735b9710f0c8fe72c1060103e865f4ae678190b"
        },
        {
          "url": "https://git.kernel.org/stable/c/d6b8778b1b82aa3a8dbf8612080f635b834bd16b"
        },
        {
          "url": "https://git.kernel.org/stable/c/ceafb262475ac6cb3a7d07b1102608be2b216b99"
        },
        {
          "url": "https://git.kernel.org/stable/c/15ec03452c18e8d288e519837d21b308300d74b2"
        },
        {
          "url": "https://git.kernel.org/stable/c/6fb5ba2e7e43173a3761e46f091070a8185efa14"
        }
      ],
      "title": "s390/dasd: Propagate partial completion length across ERP recovery",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-89456",
    "datePublished": "2026-09-11T19:43:20.037Z",
    "dateReserved": "2026-09-11T19:38:34.707Z",
    "dateUpdated": "2026-09-14T11:59:56.742Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-89456",
      "date": "2026-09-16",
      "epss": "0.00145",
      "percentile": "0.04149"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-89456\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-09-11T20:19:26.387\",\"lastModified\":\"2026-09-14T13:19:01.933\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ns390/dasd: Propagate partial completion length across ERP recovery\\n\\ndasd_default_erp_postaction() copies the timing and device state from\\nthe finished ERP request back to the original request but drops\\nproc_bytes. A request that was partially completed, an ESE read of a\\nnot-yet-allocated track returns fewer bytes than requested, and then\\nrecovered through the ERP chain loses its partial-completion length.\\n__dasd_cleanup_cqr() then sees proc_bytes == 0 and completes the whole\\nrequest instead of requeueing the remainder, silently returning zeroed\\ndata for the part that was never read.\\n\\nCarry proc_bytes over to the original request like the other\\nper-request state.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/s390/block/dasd_erp.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5e6bdd37c5526ef01326df5dabb93011ee89237e\",\"lessThan\":\"9e063165d3fe58db2a517717b830f17e82d03467\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5e6bdd37c5526ef01326df5dabb93011ee89237e\",\"lessThan\":\"6b0954c8a259da1e4aa745989f82723947acfb46\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5e6bdd37c5526ef01326df5dabb93011ee89237e\",\"lessThan\":\"d0a2f97d8c97134aa7f6a191940b7bab4bb42f5f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5e6bdd37c5526ef01326df5dabb93011ee89237e\",\"lessThan\":\"f735b9710f0c8fe72c1060103e865f4ae678190b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5e6bdd37c5526ef01326df5dabb93011ee89237e\",\"lessThan\":\"d6b8778b1b82aa3a8dbf8612080f635b834bd16b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5e6bdd37c5526ef01326df5dabb93011ee89237e\",\"lessThan\":\"ceafb262475ac6cb3a7d07b1102608be2b216b99\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5e6bdd37c5526ef01326df5dabb93011ee89237e\",\"lessThan\":\"15ec03452c18e8d288e519837d21b308300d74b2\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5e6bdd37c5526ef01326df5dabb93011ee89237e\",\"lessThan\":\"6fb5ba2e7e43173a3761e46f091070a8185efa14\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"fbbacd0dcbc3ae9398c569dbea96ae4b5ad97e04\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5f7c9989f11305aaa43e0f4378f4f070022a9f2b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5.4.26\",\"lessThan\":\"5.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.5.10\",\"lessThan\":\"5.6\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/s390/block/dasd_erp.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.6\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.6\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.270\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.221\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.188\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.157\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.109\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.50\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2.4\",\"lessThanOrEqual\":\"7.2.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.3-rc1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.0,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.0,\"impactScore\":5.9}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/15ec03452c18e8d288e519837d21b308300d74b2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/6b0954c8a259da1e4aa745989f82723947acfb46\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/6fb5ba2e7e43173a3761e46f091070a8185efa14\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/9e063165d3fe58db2a517717b830f17e82d03467\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ceafb262475ac6cb3a7d07b1102608be2b216b99\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/d0a2f97d8c97134aa7f6a191940b7bab4bb42f5f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/d6b8778b1b82aa3a8dbf8612080f635b834bd16b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f735b9710f0c8fe72c1060103e865f4ae678190b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-09-13T06:55:44+00:00",
      "cve": "CVE-2026-89456",
      "id": "CVE-2026-89456",
      "initial_release_date": "2026-09-11T19:43:20.037000+00:00",
      "product_status:known_affected": "2",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Linux kernel: Information disclosure in s390/dasd via incorrect data tracking",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89456.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-15T00:59:11Z",
      "cve": "CVE-2026-89456",
      "id": "CVE-2026-89456",
      "initial_release_date": "2026-09-12T16:28:11Z",
      "product_status:known_affected": "260",
      "product_status:known_not_affected": "93",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-89456",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-89456.json",
      "version": "4"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.