GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-89603 (GCVE-0-2026-89603)

Vulnerability from cvelistv5 – Published: 2026-09-11 19:45 – Updated: 2026-09-14 12:01
VLAI
Title
entry: Fix seccomp bypass after ptrace with TSYNC
Summary
In the Linux kernel, the following vulnerability has been resolved: entry: Fix seccomp bypass after ptrace with TSYNC Sashiko review pointed out the following issue. If a thread is stopped in syscall_trace_enter() for ptrace, another thread can install a seccomp filter with SECCOMP_FILTER_FLAG_TSYNC (e.g., via seccomp_attach_filter()). This will successfully set SYSCALL_WORK_SECCOMP on the stopped thread, but syscall_trace_enter() evaluates a cached 'work' variable sampled on entry. Consequently, the subsequent check for SYSCALL_WORK_SECCOMP misses the newly assigned flag, and the filter is silently bypassed. This race condition could allow an unprivileged process to execute a prohibited system call (e.g., execve) that the newly installed filter was intended to block, especially since the tracer might have modified the system call number during the ptrace stop. Fix this by re-reading the syscall_work flags after ptrace handling, so that any new SYSCALL_WORK_SECCOMP flag set by another thread via TSYNC during the ptrace stop is observed before the subsequent seccomp check.
Severity
8.4 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 142781e108b13b2b0e8f035cfb5bfbbc8f14d887 , < eca5ed4200f0be3e91f8a237b1f37582030a93a8 (git)
Affected: 142781e108b13b2b0e8f035cfb5bfbbc8f14d887 , < 8709e7e1dd7d7de0651e61700edf24f5784f9243 (git)
Affected: 142781e108b13b2b0e8f035cfb5bfbbc8f14d887 , < 22bb836fc133331982c264227a899d4b26a09706 (git)
Affected: 142781e108b13b2b0e8f035cfb5bfbbc8f14d887 , < 23001ee5d8631e30192cde6f6d3ccb6805570499 (git)
Affected: 142781e108b13b2b0e8f035cfb5bfbbc8f14d887 , < 09e8880ce5409bdb84da991b053d7087502c181e (git)
Affected: 142781e108b13b2b0e8f035cfb5bfbbc8f14d887 , < 459f33f82864723a7fa366cf1091d9c6c893b6b2 (git)
Affected: 142781e108b13b2b0e8f035cfb5bfbbc8f14d887 , < ab4647459098a43e9d6fdb860836f08c962f3774 (git)
Affected: 142781e108b13b2b0e8f035cfb5bfbbc8f14d887 , < 4a3591287fb7f808e209b4974ed337f609a2006b (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.9
Unaffected: 0 , < 5.9 (semver)
Unaffected: 5.10.270 , ≤ 5.10.* (semver)
Unaffected: 5.15.221 , ≤ 5.15.* (semver)
Unaffected: 6.1.188 , ≤ 6.1.* (semver)
Unaffected: 6.6.157 , ≤ 6.6.* (semver)
Unaffected: 6.12.110 , ≤ 6.12.* (semver)
Unaffected: 6.18.51 , ≤ 6.18.* (semver)
Unaffected: 7.2.4 , ≤ 7.2.* (semver)
Unaffected: 7.3-rc1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "include/linux/entry-common.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "eca5ed4200f0be3e91f8a237b1f37582030a93a8",
              "status": "affected",
              "version": "142781e108b13b2b0e8f035cfb5bfbbc8f14d887",
              "versionType": "git"
            },
            {
              "lessThan": "8709e7e1dd7d7de0651e61700edf24f5784f9243",
              "status": "affected",
              "version": "142781e108b13b2b0e8f035cfb5bfbbc8f14d887",
              "versionType": "git"
            },
            {
              "lessThan": "22bb836fc133331982c264227a899d4b26a09706",
              "status": "affected",
              "version": "142781e108b13b2b0e8f035cfb5bfbbc8f14d887",
              "versionType": "git"
            },
            {
              "lessThan": "23001ee5d8631e30192cde6f6d3ccb6805570499",
              "status": "affected",
              "version": "142781e108b13b2b0e8f035cfb5bfbbc8f14d887",
              "versionType": "git"
            },
            {
              "lessThan": "09e8880ce5409bdb84da991b053d7087502c181e",
              "status": "affected",
              "version": "142781e108b13b2b0e8f035cfb5bfbbc8f14d887",
              "versionType": "git"
            },
            {
              "lessThan": "459f33f82864723a7fa366cf1091d9c6c893b6b2",
              "status": "affected",
              "version": "142781e108b13b2b0e8f035cfb5bfbbc8f14d887",
              "versionType": "git"
            },
            {
              "lessThan": "ab4647459098a43e9d6fdb860836f08c962f3774",
              "status": "affected",
              "version": "142781e108b13b2b0e8f035cfb5bfbbc8f14d887",
              "versionType": "git"
            },
            {
              "lessThan": "4a3591287fb7f808e209b4974ed337f609a2006b",
              "status": "affected",
              "version": "142781e108b13b2b0e8f035cfb5bfbbc8f14d887",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "include/linux/entry-common.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.9"
            },
            {
              "lessThan": "5.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.51",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.270",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.221",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.188",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.157",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.110",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.51",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.4",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3-rc1",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nentry: Fix seccomp bypass after ptrace with TSYNC\n\nSashiko review pointed out the following issue.\n\nIf a thread is stopped in syscall_trace_enter() for ptrace, another\nthread can install a seccomp filter with SECCOMP_FILTER_FLAG_TSYNC\n(e.g., via seccomp_attach_filter()). This will successfully set\nSYSCALL_WORK_SECCOMP on the stopped thread, but syscall_trace_enter()\nevaluates a cached \u0027work\u0027 variable sampled on entry. Consequently,\nthe subsequent check for SYSCALL_WORK_SECCOMP misses the newly\nassigned flag, and the filter is silently bypassed.\n\nThis race condition could allow an unprivileged process to execute\na prohibited system call (e.g., execve) that the newly installed filter\nwas intended to block, especially since the tracer might have modified\nthe system call number during the ptrace stop.\n\nFix this by re-reading the syscall_work flags after ptrace handling,\nso that any new SYSCALL_WORK_SECCOMP flag set by another thread via\nTSYNC during the ptrace stop is observed before the subsequent\nseccomp check."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bypass is reached only through local syscalls: syscall_enter_from_user_mode_work() -\u003e syscall_trace_enter() while the thread is stopped for ptrace(PTRACE_SYSCALL/PTRACE_SYSEMU), plus seccomp(SECCOMP_SET_MODE_FILTER, SECCOMP_FILTER_FLAG_TSYNC) from a sibling thread. There is no network, adjacent, or physical path.\nAC:L - The ptrace syscall-enter stop blocks indefinitely, so the attacker controls both sides: a helper thread can TSYNC the filter during that stop, then the tracer resumes. This is an attacker-driven window rather than a tight race, and a deterministic reproducer exists.\nPR:L - An ordinary local user can PTRACE_TRACEME/PTRACE_SYSCALL their own child (allowed under default Yama ptrace_scope=1) and install a filter after prctl(PR_SET_NO_NEW_PRIVS) or with CAP_SYS_ADMIN in a user namespace. Init-namespace root is not required.\nUI:N - The attacker drives ptrace, TSYNC, and the in-flight syscall themselves. No separate victim action such as opening a file or mounting a filesystem is required.\nS:C - Seccomp is a confinement sandbox installed by a parent or sandboxing thread. Skipping the newly TSYNC\u0027d filter lets a thread execute a syscall that authority intended to block, which is a sandbox escape across that security boundary.\nC:H - The skipped check allows an arbitrary blocked syscall to run, including read-oriented calls the filter was meant to deny (process_vm_readv, ptrace PEEK, bpf, or argument-filtered open/read), disclosing data outside the sandbox policy.\nI:H - Seccomp is supposed to run after ptrace so a tracer cannot rewrite the syscall number past the filter; this stale-flag skip lets that rewritten call be execve, process_vm_writev, ptrace, mount, or another integrity-affecting syscall the new filter was installed to prevent.\nA:N - This is a stale syscall_work flag causing a seccomp policy bypass, not memory corruption. It does not oops, panic, deadlock, or hang the kernel."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T12:01:23.522Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/eca5ed4200f0be3e91f8a237b1f37582030a93a8"
        },
        {
          "url": "https://git.kernel.org/stable/c/8709e7e1dd7d7de0651e61700edf24f5784f9243"
        },
        {
          "url": "https://git.kernel.org/stable/c/22bb836fc133331982c264227a899d4b26a09706"
        },
        {
          "url": "https://git.kernel.org/stable/c/23001ee5d8631e30192cde6f6d3ccb6805570499"
        },
        {
          "url": "https://git.kernel.org/stable/c/09e8880ce5409bdb84da991b053d7087502c181e"
        },
        {
          "url": "https://git.kernel.org/stable/c/459f33f82864723a7fa366cf1091d9c6c893b6b2"
        },
        {
          "url": "https://git.kernel.org/stable/c/ab4647459098a43e9d6fdb860836f08c962f3774"
        },
        {
          "url": "https://git.kernel.org/stable/c/4a3591287fb7f808e209b4974ed337f609a2006b"
        }
      ],
      "title": "entry: Fix seccomp bypass after ptrace with TSYNC",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-89603",
    "datePublished": "2026-09-11T19:45:06.613Z",
    "dateReserved": "2026-09-11T19:38:34.732Z",
    "dateUpdated": "2026-09-14T12:01:23.522Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-89603",
      "date": "2026-09-16",
      "epss": "0.00142",
      "percentile": "0.03905"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-89603\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-09-11T20:19:45.243\",\"lastModified\":\"2026-09-14T13:19:14.313\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nentry: Fix seccomp bypass after ptrace with TSYNC\\n\\nSashiko review pointed out the following issue.\\n\\nIf a thread is stopped in syscall_trace_enter() for ptrace, another\\nthread can install a seccomp filter with SECCOMP_FILTER_FLAG_TSYNC\\n(e.g., via seccomp_attach_filter()). This will successfully set\\nSYSCALL_WORK_SECCOMP on the stopped thread, but syscall_trace_enter()\\nevaluates a cached \u0027work\u0027 variable sampled on entry. Consequently,\\nthe subsequent check for SYSCALL_WORK_SECCOMP misses the newly\\nassigned flag, and the filter is silently bypassed.\\n\\nThis race condition could allow an unprivileged process to execute\\na prohibited system call (e.g., execve) that the newly installed filter\\nwas intended to block, especially since the tracer might have modified\\nthe system call number during the ptrace stop.\\n\\nFix this by re-reading the syscall_work flags after ptrace handling,\\nso that any new SYSCALL_WORK_SECCOMP flag set by another thread via\\nTSYNC during the ptrace stop is observed before the subsequent\\nseccomp check.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"include/linux/entry-common.h\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"142781e108b13b2b0e8f035cfb5bfbbc8f14d887\",\"lessThan\":\"eca5ed4200f0be3e91f8a237b1f37582030a93a8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"142781e108b13b2b0e8f035cfb5bfbbc8f14d887\",\"lessThan\":\"8709e7e1dd7d7de0651e61700edf24f5784f9243\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"142781e108b13b2b0e8f035cfb5bfbbc8f14d887\",\"lessThan\":\"22bb836fc133331982c264227a899d4b26a09706\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"142781e108b13b2b0e8f035cfb5bfbbc8f14d887\",\"lessThan\":\"23001ee5d8631e30192cde6f6d3ccb6805570499\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"142781e108b13b2b0e8f035cfb5bfbbc8f14d887\",\"lessThan\":\"09e8880ce5409bdb84da991b053d7087502c181e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"142781e108b13b2b0e8f035cfb5bfbbc8f14d887\",\"lessThan\":\"459f33f82864723a7fa366cf1091d9c6c893b6b2\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"142781e108b13b2b0e8f035cfb5bfbbc8f14d887\",\"lessThan\":\"ab4647459098a43e9d6fdb860836f08c962f3774\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"142781e108b13b2b0e8f035cfb5bfbbc8f14d887\",\"lessThan\":\"4a3591287fb7f808e209b4974ed337f609a2006b\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"include/linux/entry-common.h\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.9\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.9\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.270\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.221\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.188\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.157\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.110\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.51\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2.4\",\"lessThanOrEqual\":\"7.2.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.3-rc1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N\",\"baseScore\":8.4,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.0,\"impactScore\":5.8}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/09e8880ce5409bdb84da991b053d7087502c181e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/22bb836fc133331982c264227a899d4b26a09706\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/23001ee5d8631e30192cde6f6d3ccb6805570499\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/459f33f82864723a7fa366cf1091d9c6c893b6b2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/4a3591287fb7f808e209b4974ed337f609a2006b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/8709e7e1dd7d7de0651e61700edf24f5784f9243\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ab4647459098a43e9d6fdb860836f08c962f3774\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/eca5ed4200f0be3e91f8a237b1f37582030a93a8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-09-15T12:45:58+00:00",
      "cve": "CVE-2026-89603",
      "id": "CVE-2026-89603",
      "initial_release_date": "2026-09-11T00:00:00+00:00",
      "product_status:known_affected": "185",
      "product_status:known_not_affected": "91",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: entry: Fix seccomp bypass after ptrace with TSYNC",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89603.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-09-13T16:58:15Z",
      "cve": "CVE-2026-89603",
      "id": "CVE-2026-89603",
      "initial_release_date": "2026-09-12T16:25:20Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-89603",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-89603.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.