CVE-2026-89779 (GCVE-0-2026-89779)
Vulnerability from cvelistv5 – Published: 2026-09-16 08:48 – Updated: 2026-09-16 14:38
VLAI
EPSS
VEX
Title
fs/ntfs3: validate ef->size covers the record's name and value
Summary
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: validate ef->size covers the record's name and value
When an EA record has a non-zero ef->size, ntfs_read_ea() only checks
that the record fits in the remaining buffer (ea_size > bytes), not that
ef->size is large enough to hold the record's own name_len + 1 + elength.
A crafted image can pass validation with, e.g., ef->size = 24 but
elength = 0xffff. ntfs_get_ea() then trusts elength and copies it out of
the undersized record, reading past the kmalloc(info->size) allocation
and leaking heap memory to userspace via getxattr():
BUG: KASAN: slab-out-of-bounds in ntfs_get_ea (fs/ntfs3/xattr.c:302)
Read of size 65535 at addr ffff888100794550 by task exploit
__asan_memcpy (mm/kasan/shadow.c:105)
ntfs_get_ea (fs/ntfs3/xattr.c:302)
ntfs_getxattr (fs/ntfs3/xattr.c:848)
__vfs_getxattr (fs/xattr.c:441)
vfs_getxattr (fs/xattr.c:474)
do_getxattr (fs/xattr.c:800)
path_getxattrat (fs/xattr.c:868)
do_syscall_64 (arch/x86/entry/syscall_64.c:94)
The buggy address is located 80 bytes inside of
allocated 84-byte region in cache kmalloc-96
Compute the size the record needs and require ef->size to cover it.
Severity
9.1 (Critical)
Assigner
References
7 references
Impacted products
2 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Linux | Linux |
Affected:
333feb7ba84f69f9b423422417aaac54fd9e7c84 , < b27e68ad818a4ca2cef8f35f97e75d756714c818
(git)
Affected: 000a9a72efa4a9df289bab9c9e8ba1639c72e0d6 , < 28a924c7e67e6d71abeb04860b61166fecb027fc (git) Affected: 0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b , < d585ed08308909c7e6fefb4e8a258aeb29b19ff9 (git) Affected: 0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b , < 077df8464cf24f8ffc82fb6efec2ae600686e699 (git) Affected: 0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b , < aab1880058ac767d3ea9388a9a7221c776c22c44 (git) Affected: 0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b , < c8a109c9e23a2c7fd548473dde728b2cb8188146 (git) Affected: 0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b , < c22f91d82cb9a29d22bdffdce6c803467984ad0c (git) Affected: 5.15.121 , < 5.15.221 (semver) Affected: 6.1.40 , < 6.1.188 (semver) |
guessed | |
| Linux | Linux |
Affected:
6.2
Unaffected: 0 , < 6.2 (semver) Unaffected: 5.15.221 , ≤ 5.15.* (semver) Unaffected: 6.1.188 , ≤ 6.1.* (semver) Unaffected: 6.6.157 , ≤ 6.6.* (semver) Unaffected: 6.12.110 , ≤ 6.12.* (semver) Unaffected: 6.18.52 , ≤ 6.18.* (semver) Unaffected: 7.2.6 , ≤ 7.2.* (semver) Unaffected: 7.3-rc1 , ≤ * (original_commit_for_fix) |
guessed |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"fs/ntfs3/xattr.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "b27e68ad818a4ca2cef8f35f97e75d756714c818",
"status": "affected",
"version": "333feb7ba84f69f9b423422417aaac54fd9e7c84",
"versionType": "git"
},
{
"lessThan": "28a924c7e67e6d71abeb04860b61166fecb027fc",
"status": "affected",
"version": "000a9a72efa4a9df289bab9c9e8ba1639c72e0d6",
"versionType": "git"
},
{
"lessThan": "d585ed08308909c7e6fefb4e8a258aeb29b19ff9",
"status": "affected",
"version": "0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b",
"versionType": "git"
},
{
"lessThan": "077df8464cf24f8ffc82fb6efec2ae600686e699",
"status": "affected",
"version": "0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b",
"versionType": "git"
},
{
"lessThan": "aab1880058ac767d3ea9388a9a7221c776c22c44",
"status": "affected",
"version": "0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b",
"versionType": "git"
},
{
"lessThan": "c8a109c9e23a2c7fd548473dde728b2cb8188146",
"status": "affected",
"version": "0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b",
"versionType": "git"
},
{
"lessThan": "c22f91d82cb9a29d22bdffdce6c803467984ad0c",
"status": "affected",
"version": "0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b",
"versionType": "git"
},
{
"lessThan": "5.15.221",
"status": "affected",
"version": "5.15.121",
"versionType": "semver"
},
{
"lessThan": "6.1.188",
"status": "affected",
"version": "6.1.40",
"versionType": "semver"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"fs/ntfs3/xattr.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "6.2"
},
{
"lessThan": "6.2",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"version": "5.15.221",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"version": "6.1.188",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"version": "6.6.157",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.12.*",
"status": "unaffected",
"version": "6.12.110",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.18.*",
"status": "unaffected",
"version": "6.18.52",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.2.*",
"status": "unaffected",
"version": "7.2.6",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "7.3-rc1",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.221",
"versionStartIncluding": "5.15.121",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.1.188",
"versionStartIncluding": "6.1.40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.6.157",
"versionStartIncluding": "6.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.12.110",
"versionStartIncluding": "6.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.18.52",
"versionStartIncluding": "6.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.2.6",
"versionStartIncluding": "6.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.3-rc1",
"versionStartIncluding": "6.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: validate ef-\u003esize covers the record\u0027s name and value\n\nWhen an EA record has a non-zero ef-\u003esize, ntfs_read_ea() only checks\nthat the record fits in the remaining buffer (ea_size \u003e bytes), not that\nef-\u003esize is large enough to hold the record\u0027s own name_len + 1 + elength.\n\nA crafted image can pass validation with, e.g., ef-\u003esize = 24 but\nelength = 0xffff. ntfs_get_ea() then trusts elength and copies it out of\nthe undersized record, reading past the kmalloc(info-\u003esize) allocation\nand leaking heap memory to userspace via getxattr():\n\n BUG: KASAN: slab-out-of-bounds in ntfs_get_ea (fs/ntfs3/xattr.c:302)\n Read of size 65535 at addr ffff888100794550 by task exploit\n __asan_memcpy (mm/kasan/shadow.c:105)\n ntfs_get_ea (fs/ntfs3/xattr.c:302)\n ntfs_getxattr (fs/ntfs3/xattr.c:848)\n __vfs_getxattr (fs/xattr.c:441)\n vfs_getxattr (fs/xattr.c:474)\n do_getxattr (fs/xattr.c:800)\n path_getxattrat (fs/xattr.c:868)\n do_syscall_64 (arch/x86/entry/syscall_64.c:94)\n\n The buggy address is located 80 bytes inside of\n allocated 84-byte region in cache kmalloc-96\n\nCompute the size the record needs and require ef-\u003esize to cover it."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"scenarios": [
{
"lang": "en",
"value": "AV:N - ntfs3 registers export_operations and an empty-prefix xattr handler, so ksmbd SMB2 QUERY_INFO FILE_FULL_EA and nfsd GETXATTR reach vfs_getxattr\u2192ntfs_getxattr\u2192ntfs_get_ea on an exported NTFS volume; a crafted EA named user.* is listed and returned over the network on NAS/hybrid SMB/NFS servers.\nAC:L - The attacker fully controls on-disk EA_FULL fields; ef-\u003esize=24 with elength=0xffff passes ntfs_read_ea() and makes ntfs_get_ea() memcpy 65535 bytes past the kmalloc(info-\u003esize) object deterministically, with no race or attacker-uncontrollable layout.\nPR:N - The leak needs only read access to a file carrying the crafted EA: a ksmbd guest/anonymous client with FILE_READ_EA, an NFSv4 AUTH_SYS/guest GETXATTR, or automount of attacker media, with no local account or CAP_SYS_ADMIN on the host.\nUI:N - After the NTFS volume is mounted and exported\u2014the normal state for NAS, dual-boot, and automounted removable NTFS\u2014the attacker issues SMB QUERY_INFO, NFS GETXATTR, or getxattr(2) themselves; no further victim clicks, prompts, or confirmations are required.\nS:U - The slab over-read and heap leak occur in the host kernel ntfs3 xattr path under a single security authority; this is standard filesystem exploitation, not a VM escape, IOMMU/DMA bypass, or other cross-boundary breakout.\nC:H - ntfs_get_ea() copies attacker-chosen elength (up to 65535) bytes from past the kmalloc(info-\u003esize) EA buffer into the getxattr output that VFS, ksmbd, and nfsd return to the caller; a ~64KiB kernel-heap leak to userspace or a remote SMB/NFS client is Confidentiality High.\nI:N - The destination is sized from the probed elength (ksmbd/nfsd) or the caller-supplied size with an explicit len\u003esize ERANGE check, so this is a source over-read into a bounds-checked xattr buffer, not an out-of-bounds write, UAF, or control-flow hijack primitive.\nA:H - KASAN reports a 65535-byte slab-out-of-bounds read in ntfs_get_ea from an 84-byte kmalloc-96 object; that unbounded heap over-read can fault unmapped adjacent slab pages and oops or panic the kernel, which is Availability High."
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T14:38:31.147Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/b27e68ad818a4ca2cef8f35f97e75d756714c818"
},
{
"url": "https://git.kernel.org/stable/c/28a924c7e67e6d71abeb04860b61166fecb027fc"
},
{
"url": "https://git.kernel.org/stable/c/d585ed08308909c7e6fefb4e8a258aeb29b19ff9"
},
{
"url": "https://git.kernel.org/stable/c/077df8464cf24f8ffc82fb6efec2ae600686e699"
},
{
"url": "https://git.kernel.org/stable/c/aab1880058ac767d3ea9388a9a7221c776c22c44"
},
{
"url": "https://git.kernel.org/stable/c/c8a109c9e23a2c7fd548473dde728b2cb8188146"
},
{
"url": "https://git.kernel.org/stable/c/c22f91d82cb9a29d22bdffdce6c803467984ad0c"
}
],
"title": "fs/ntfs3: validate ef-\u003esize covers the record\u0027s name and value",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2026-89779",
"datePublished": "2026-09-16T08:48:19.083Z",
"dateReserved": "2026-09-11T19:38:34.765Z",
"dateUpdated": "2026-09-16T14:38:31.147Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-89779",
"date": "2026-09-16",
"epss": "0.00205",
"percentile": "0.10806"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-89779\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-09-16T09:17:08.387\",\"lastModified\":\"2026-09-16T15:18:07.320\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nfs/ntfs3: validate ef-\u003esize covers the record\u0027s name and value\\n\\nWhen an EA record has a non-zero ef-\u003esize, ntfs_read_ea() only checks\\nthat the record fits in the remaining buffer (ea_size \u003e bytes), not that\\nef-\u003esize is large enough to hold the record\u0027s own name_len + 1 + elength.\\n\\nA crafted image can pass validation with, e.g., ef-\u003esize = 24 but\\nelength = 0xffff. ntfs_get_ea() then trusts elength and copies it out of\\nthe undersized record, reading past the kmalloc(info-\u003esize) allocation\\nand leaking heap memory to userspace via getxattr():\\n\\n BUG: KASAN: slab-out-of-bounds in ntfs_get_ea (fs/ntfs3/xattr.c:302)\\n Read of size 65535 at addr ffff888100794550 by task exploit\\n __asan_memcpy (mm/kasan/shadow.c:105)\\n ntfs_get_ea (fs/ntfs3/xattr.c:302)\\n ntfs_getxattr (fs/ntfs3/xattr.c:848)\\n __vfs_getxattr (fs/xattr.c:441)\\n vfs_getxattr (fs/xattr.c:474)\\n do_getxattr (fs/xattr.c:800)\\n path_getxattrat (fs/xattr.c:868)\\n do_syscall_64 (arch/x86/entry/syscall_64.c:94)\\n\\n The buggy address is located 80 bytes inside of\\n allocated 84-byte region in cache kmalloc-96\\n\\nCompute the size the record needs and require ef-\u003esize to cover it.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/ntfs3/xattr.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"333feb7ba84f69f9b423422417aaac54fd9e7c84\",\"lessThan\":\"b27e68ad818a4ca2cef8f35f97e75d756714c818\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"000a9a72efa4a9df289bab9c9e8ba1639c72e0d6\",\"lessThan\":\"28a924c7e67e6d71abeb04860b61166fecb027fc\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b\",\"lessThan\":\"d585ed08308909c7e6fefb4e8a258aeb29b19ff9\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b\",\"lessThan\":\"077df8464cf24f8ffc82fb6efec2ae600686e699\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b\",\"lessThan\":\"aab1880058ac767d3ea9388a9a7221c776c22c44\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b\",\"lessThan\":\"c8a109c9e23a2c7fd548473dde728b2cb8188146\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b\",\"lessThan\":\"c22f91d82cb9a29d22bdffdce6c803467984ad0c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5.15.121\",\"lessThan\":\"5.15.221\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.1.40\",\"lessThan\":\"6.1.188\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/ntfs3/xattr.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.2\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.2\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.221\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.188\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.157\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.110\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.52\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2.6\",\"lessThanOrEqual\":\"7.2.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.3-rc1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.2}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/077df8464cf24f8ffc82fb6efec2ae600686e699\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/28a924c7e67e6d71abeb04860b61166fecb027fc\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/aab1880058ac767d3ea9388a9a7221c776c22c44\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/b27e68ad818a4ca2cef8f35f97e75d756714c818\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/c22f91d82cb9a29d22bdffdce6c803467984ad0c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/c8a109c9e23a2c7fd548473dde728b2cb8188146\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/d585ed08308909c7e6fefb4e8a258aeb29b19ff9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}"
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…