CVE-2022-48996 (GCVE-0-2022-48996)

Vulnerability from cvelistv5 – Published: 2024-10-21 20:06 – Updated: 2025-05-04 08:27
VLAI?
Summary
In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix wrong empty schemes assumption under online tuning in damon_sysfs_set_schemes() Commit da87878010e5 ("mm/damon/sysfs: support online inputs update") made 'damon_sysfs_set_schemes()' to be called for running DAMON context, which could have schemes. In the case, DAMON sysfs interface is supposed to update, remove, or add schemes to reflect the sysfs files. However, the code is assuming the DAMON context wouldn't have schemes at all, and therefore creates and adds new schemes. As a result, the code doesn't work as intended for online schemes tuning and could have more than expected memory footprint. The schemes are all in the DAMON context, so it doesn't leak the memory, though. Remove the wrong asssumption (the DAMON context wouldn't have schemes) in 'damon_sysfs_set_schemes()' to fix the bug.
Severity ?
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: da87878010e59869d4d27b3c01ecc8ec06ff4a20 , < f98d1f2a36ad7ab48fb4cf73ca14e7b19482fd4d (git)
Affected: da87878010e59869d4d27b3c01ecc8ec06ff4a20 , < 95bc35f9bee5220dad4e8567654ab3288a181639 (git)
Create a notification for this product.
    Linux Linux Affected: 5.19
Unaffected: 0 , < 5.19 (semver)
Unaffected: 6.0.12 , ≤ 6.0.* (semver)
Unaffected: 6.1 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-48996",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-22T13:15:49.578394Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-22T13:18:41.449Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "mm/damon/sysfs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f98d1f2a36ad7ab48fb4cf73ca14e7b19482fd4d",
              "status": "affected",
              "version": "da87878010e59869d4d27b3c01ecc8ec06ff4a20",
              "versionType": "git"
            },
            {
              "lessThan": "95bc35f9bee5220dad4e8567654ab3288a181639",
              "status": "affected",
              "version": "da87878010e59869d4d27b3c01ecc8ec06ff4a20",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "mm/damon/sysfs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.19"
            },
            {
              "lessThan": "5.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.12",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/damon/sysfs: fix wrong empty schemes assumption under online tuning in damon_sysfs_set_schemes()\n\nCommit da87878010e5 (\"mm/damon/sysfs: support online inputs update\") made\n\u0027damon_sysfs_set_schemes()\u0027 to be called for running DAMON context, which\ncould have schemes.  In the case, DAMON sysfs interface is supposed to\nupdate, remove, or add schemes to reflect the sysfs files.  However, the\ncode is assuming the DAMON context wouldn\u0027t have schemes at all, and\ntherefore creates and adds new schemes.  As a result, the code doesn\u0027t\nwork as intended for online schemes tuning and could have more than\nexpected memory footprint.  The schemes are all in the DAMON context, so\nit doesn\u0027t leak the memory, though.\n\nRemove the wrong asssumption (the DAMON context wouldn\u0027t have schemes) in\n\u0027damon_sysfs_set_schemes()\u0027 to fix the bug."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T08:27:43.323Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f98d1f2a36ad7ab48fb4cf73ca14e7b19482fd4d"
        },
        {
          "url": "https://git.kernel.org/stable/c/95bc35f9bee5220dad4e8567654ab3288a181639"
        }
      ],
      "title": "mm/damon/sysfs: fix wrong empty schemes assumption under online tuning in damon_sysfs_set_schemes()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-48996",
    "datePublished": "2024-10-21T20:06:12.122Z",
    "dateReserved": "2024-08-22T01:27:53.637Z",
    "dateUpdated": "2025-05-04T08:27:43.323Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.19\", \"versionEndExcluding\": \"6.0.12\", \"matchCriteriaId\": \"188DA84C-697A-4F85-A7D6-7318514A07EB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"E7E331DA-1FB0-4DEC-91AC-7DA69D461C11\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*\", \"matchCriteriaId\": \"17F0B248-42CF-4AE6-A469-BB1BAE7F4705\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*\", \"matchCriteriaId\": \"E2422816-0C14-4B5E-A1E6-A9D776E5C49B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*\", \"matchCriteriaId\": \"1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*\", \"matchCriteriaId\": \"35B26BE4-43A6-4A36-A7F6-5B3F572D9186\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*\", \"matchCriteriaId\": \"3FFFB0B3-930D-408A-91E2-BAE0C2715D80\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*\", \"matchCriteriaId\": \"8535320E-A0DB-4277-800E-D0CE5BBA59E8\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmm/damon/sysfs: fix wrong empty schemes assumption under online tuning in damon_sysfs_set_schemes()\\n\\nCommit da87878010e5 (\\\"mm/damon/sysfs: support online inputs update\\\") made\\n\u0027damon_sysfs_set_schemes()\u0027 to be called for running DAMON context, which\\ncould have schemes.  In the case, DAMON sysfs interface is supposed to\\nupdate, remove, or add schemes to reflect the sysfs files.  However, the\\ncode is assuming the DAMON context wouldn\u0027t have schemes at all, and\\ntherefore creates and adds new schemes.  As a result, the code doesn\u0027t\\nwork as intended for online schemes tuning and could have more than\\nexpected memory footprint.  The schemes are all in the DAMON context, so\\nit doesn\u0027t leak the memory, though.\\n\\nRemove the wrong asssumption (the DAMON context wouldn\u0027t have schemes) in\\n\u0027damon_sysfs_set_schemes()\u0027 to fix the bug.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm/damon/sysfs: se corrige la suposici\\u00f3n incorrecta de esquemas vac\\u00edos durante el ajuste en l\\u00ednea en damon_sysfs_set_schemes(). el commit da87878010e5 (\\\"mm/damon/sysfs: soporte para la actualizaci\\u00f3n de entradas en l\\u00ednea\\\") hizo que se llamara a \u0027damon_sysfs_set_schemes()\u0027 para ejecutar el contexto DAMON, que podr\\u00eda tener esquemas. En este caso, se supone que la interfaz sysfs de DAMON actualiza, elimina o agrega esquemas para reflejar los archivos sysfs. Sin embargo, el c\\u00f3digo asume que el contexto DAMON no tendr\\u00eda esquemas en absoluto y, por lo tanto, crea y agrega nuevos esquemas. Como resultado, el c\\u00f3digo no funciona como se esperaba para el ajuste de esquemas en l\\u00ednea y podr\\u00eda tener una huella de memoria mayor a la esperada. Todos los esquemas est\\u00e1n en el contexto DAMON, por lo que no pierde memoria. Elimine la suposici\\u00f3n incorrecta (el contexto DAMON no tendr\\u00eda esquemas) en \u0027damon_sysfs_set_schemes()\u0027 para corregir el error.\"}]",
      "id": "CVE-2022-48996",
      "lastModified": "2024-11-07T19:37:27.663",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2024-10-21T20:15:11.423",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/95bc35f9bee5220dad4e8567654ab3288a181639\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/f98d1f2a36ad7ab48fb4cf73ca14e7b19482fd4d\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-48996\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-10-21T20:15:11.423\",\"lastModified\":\"2024-11-07T19:37:27.663\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmm/damon/sysfs: fix wrong empty schemes assumption under online tuning in damon_sysfs_set_schemes()\\n\\nCommit da87878010e5 (\\\"mm/damon/sysfs: support online inputs update\\\") made\\n\u0027damon_sysfs_set_schemes()\u0027 to be called for running DAMON context, which\\ncould have schemes.  In the case, DAMON sysfs interface is supposed to\\nupdate, remove, or add schemes to reflect the sysfs files.  However, the\\ncode is assuming the DAMON context wouldn\u0027t have schemes at all, and\\ntherefore creates and adds new schemes.  As a result, the code doesn\u0027t\\nwork as intended for online schemes tuning and could have more than\\nexpected memory footprint.  The schemes are all in the DAMON context, so\\nit doesn\u0027t leak the memory, though.\\n\\nRemove the wrong asssumption (the DAMON context wouldn\u0027t have schemes) in\\n\u0027damon_sysfs_set_schemes()\u0027 to fix the bug.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm/damon/sysfs: se corrige la suposici\u00f3n incorrecta de esquemas vac\u00edos durante el ajuste en l\u00ednea en damon_sysfs_set_schemes(). el commit da87878010e5 (\\\"mm/damon/sysfs: soporte para la actualizaci\u00f3n de entradas en l\u00ednea\\\") hizo que se llamara a \u0027damon_sysfs_set_schemes()\u0027 para ejecutar el contexto DAMON, que podr\u00eda tener esquemas. En este caso, se supone que la interfaz sysfs de DAMON actualiza, elimina o agrega esquemas para reflejar los archivos sysfs. Sin embargo, el c\u00f3digo asume que el contexto DAMON no tendr\u00eda esquemas en absoluto y, por lo tanto, crea y agrega nuevos esquemas. Como resultado, el c\u00f3digo no funciona como se esperaba para el ajuste de esquemas en l\u00ednea y podr\u00eda tener una huella de memoria mayor a la esperada. Todos los esquemas est\u00e1n en el contexto DAMON, por lo que no pierde memoria. Elimine la suposici\u00f3n incorrecta (el contexto DAMON no tendr\u00eda esquemas) en \u0027damon_sysfs_set_schemes()\u0027 para corregir el error.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.19\",\"versionEndExcluding\":\"6.0.12\",\"matchCriteriaId\":\"188DA84C-697A-4F85-A7D6-7318514A07EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E7E331DA-1FB0-4DEC-91AC-7DA69D461C11\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"17F0B248-42CF-4AE6-A469-BB1BAE7F4705\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2422816-0C14-4B5E-A1E6-A9D776E5C49B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"35B26BE4-43A6-4A36-A7F6-5B3F572D9186\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FFFB0B3-930D-408A-91E2-BAE0C2715D80\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"8535320E-A0DB-4277-800E-D0CE5BBA59E8\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/95bc35f9bee5220dad4e8567654ab3288a181639\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f98d1f2a36ad7ab48fb4cf73ca14e7b19482fd4d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2022-48996\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-22T13:15:49.578394Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-22T13:15:52.736Z\"}}], \"cna\": {\"title\": \"mm/damon/sysfs: fix wrong empty schemes assumption under online tuning in damon_sysfs_set_schemes()\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"da87878010e59869d4d27b3c01ecc8ec06ff4a20\", \"lessThan\": \"f98d1f2a36ad7ab48fb4cf73ca14e7b19482fd4d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"da87878010e59869d4d27b3c01ecc8ec06ff4a20\", \"lessThan\": \"95bc35f9bee5220dad4e8567654ab3288a181639\", \"versionType\": \"git\"}], \"programFiles\": [\"mm/damon/sysfs.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.19\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.19\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.0.12\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"mm/damon/sysfs.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/f98d1f2a36ad7ab48fb4cf73ca14e7b19482fd4d\"}, {\"url\": \"https://git.kernel.org/stable/c/95bc35f9bee5220dad4e8567654ab3288a181639\"}], \"x_generator\": {\"engine\": \"bippy-5f407fcff5a0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmm/damon/sysfs: fix wrong empty schemes assumption under online tuning in damon_sysfs_set_schemes()\\n\\nCommit da87878010e5 (\\\"mm/damon/sysfs: support online inputs update\\\") made\\n\u0027damon_sysfs_set_schemes()\u0027 to be called for running DAMON context, which\\ncould have schemes.  In the case, DAMON sysfs interface is supposed to\\nupdate, remove, or add schemes to reflect the sysfs files.  However, the\\ncode is assuming the DAMON context wouldn\u0027t have schemes at all, and\\ntherefore creates and adds new schemes.  As a result, the code doesn\u0027t\\nwork as intended for online schemes tuning and could have more than\\nexpected memory footprint.  The schemes are all in the DAMON context, so\\nit doesn\u0027t leak the memory, though.\\n\\nRemove the wrong asssumption (the DAMON context wouldn\u0027t have schemes) in\\n\u0027damon_sysfs_set_schemes()\u0027 to fix the bug.\"}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2024-12-19T08:12:07.190Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2022-48996\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-12-19T08:12:07.190Z\", \"dateReserved\": \"2024-08-22T01:27:53.637Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-10-21T20:06:12.122Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.