GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-53536 (GCVE-0-2023-53536)

Vulnerability from cvelistv5 – Published: 2025-10-04 15:16 – Updated: 2026-08-05 09:14
VLAI
Title
blk-crypto: make blk_crypto_evict_key() more robust
Summary
In the Linux kernel, the following vulnerability has been resolved: blk-crypto: make blk_crypto_evict_key() more robust If blk_crypto_evict_key() sees that the key is still in-use (due to a bug) or that ->keyslot_evict failed, it currently just returns while leaving the key linked into the keyslot management structures. However, blk_crypto_evict_key() is only called in contexts such as inode eviction where failure is not an option. So actually the caller proceeds with freeing the blk_crypto_key regardless of the return value of blk_crypto_evict_key(). These two assumptions don't match, and the result is that there can be a use-after-free in blk_crypto_reprogram_all_keys() after one of these errors occurs. (Note, these errors *shouldn't* happen; we're just talking about what happens if they do anyway.) Fix this by making blk_crypto_evict_key() unlink the key from the keyslot management structures even on failure. Also improve some comments.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 1b2628397058ebce7277480960b29c788138de90 , < 701a8220762ff90615dc91d3543f789391b63298 (git)
Affected: 1b2628397058ebce7277480960b29c788138de90 , < 5bb4005fb667c6e2188fa87950f8d5faf2994410 (git)
Affected: 1b2628397058ebce7277480960b29c788138de90 , < 64ef787bb1588475163069c2e62fdd8f6c27b1f6 (git)
Affected: 1b2628397058ebce7277480960b29c788138de90 , < 809a5be62e92a444a3c3d7b9f438019d0b322f55 (git)
Affected: 1b2628397058ebce7277480960b29c788138de90 , < 5c62852942667c613de0458fc797c5b8c36112b5 (git)
Affected: 1b2628397058ebce7277480960b29c788138de90 , < 5c7cb94452901a93e90c2230632e2c12a681bc92 (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.8
Unaffected: 0 , < 5.8 (semver)
Unaffected: 5.10.180 , ≤ 5.10.* (semver)
Unaffected: 5.15.111 , ≤ 5.15.* (semver)
Unaffected: 6.1.28 , ≤ 6.1.* (semver)
Unaffected: 6.2.15 , ≤ 6.2.* (semver)
Unaffected: 6.3.2 , ≤ 6.3.* (semver)
Unaffected: 6.4 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "block/blk-crypto-profile.c",
            "block/blk-crypto.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "701a8220762ff90615dc91d3543f789391b63298",
              "status": "affected",
              "version": "1b2628397058ebce7277480960b29c788138de90",
              "versionType": "git"
            },
            {
              "lessThan": "5bb4005fb667c6e2188fa87950f8d5faf2994410",
              "status": "affected",
              "version": "1b2628397058ebce7277480960b29c788138de90",
              "versionType": "git"
            },
            {
              "lessThan": "64ef787bb1588475163069c2e62fdd8f6c27b1f6",
              "status": "affected",
              "version": "1b2628397058ebce7277480960b29c788138de90",
              "versionType": "git"
            },
            {
              "lessThan": "809a5be62e92a444a3c3d7b9f438019d0b322f55",
              "status": "affected",
              "version": "1b2628397058ebce7277480960b29c788138de90",
              "versionType": "git"
            },
            {
              "lessThan": "5c62852942667c613de0458fc797c5b8c36112b5",
              "status": "affected",
              "version": "1b2628397058ebce7277480960b29c788138de90",
              "versionType": "git"
            },
            {
              "lessThan": "5c7cb94452901a93e90c2230632e2c12a681bc92",
              "status": "affected",
              "version": "1b2628397058ebce7277480960b29c788138de90",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "block/blk-crypto-profile.c",
            "block/blk-crypto.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.8"
            },
            {
              "lessThan": "5.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.180",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.111",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.28",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.2.*",
              "status": "unaffected",
              "version": "6.2.15",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.3.*",
              "status": "unaffected",
              "version": "6.3.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.4",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.180",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.111",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.28",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2.15",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3.2",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-crypto: make blk_crypto_evict_key() more robust\n\nIf blk_crypto_evict_key() sees that the key is still in-use (due to a\nbug) or that -\u003ekeyslot_evict failed, it currently just returns while\nleaving the key linked into the keyslot management structures.\n\nHowever, blk_crypto_evict_key() is only called in contexts such as inode\neviction where failure is not an option.  So actually the caller\nproceeds with freeing the blk_crypto_key regardless of the return value\nof blk_crypto_evict_key().\n\nThese two assumptions don\u0027t match, and the result is that there can be a\nuse-after-free in blk_crypto_reprogram_all_keys() after one of these\nerrors occurs.  (Note, these errors *shouldn\u0027t* happen; we\u0027re just\ntalking about what happens if they do anyway.)\n\nFix this by making blk_crypto_evict_key() unlink the key from the\nkeyslot management structures even on failure.\n\nAlso improve some comments."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable path is reached through ordinary filesystem syscalls (create/write/unlink causing inode eviction) on a locally-mounted fscrypt-encrypted volume backed by UFS/eMMC inline-crypto hardware; there is no remote protocol handler involved.\nAC:L - The attacker drives the eviction side of the race directly and can retry unboundedly \u2014 a tight create/write/unlink loop over per-file-key files generates thousands of `blk_crypto_evict_key()` calls per second against in-flight blk-mq requests, and UFS runtime-PM resume (which calls `blk_crypto_reprogram_all_keys()`) can be induced by alternating I/O bursts with idle periods.\nPR:L - Only an unprivileged local account with write access to an fscrypt-encrypted directory is needed \u2014 any sandboxed Android app in its own `/data/data` directory, or any user with an encrypted home \u2014 and no capability or namespace check exists anywhere on the path from `evict_inode()` to `__blk_crypto_evict_key()`.\nUI:N - The attacker performs every step itself \u2014 writing files, forcing inode eviction, and idling the device to provoke a controller reset \u2014 with no action required from any other user or administrator.\nS:U - The use-after-free occurs on a kernel heap object and is exploited within the kernel\u0027s own security authority; no VM, IOMMU, or hypervisor boundary is crossed.\nC:H - The freed object is a `struct blk_crypto_key` holding raw key material, and `blk_crypto_reprogram_all_keys()` reads it after free and programs the (groomable) contents into a hardware keyslot; additionally the stale pointer-keyed hash entry causes a reallocated key to reuse a slot holding a different key, exposing file plaintext across encryption boundaries, and the UAF read primitive is generally leverageable for kernel memory disclosure.\nI:H - A use-after-free on a slab object whose lifetime the attacker controls permits heap spraying to place attacker-chosen data where the kernel expects a key, yielding a write/control primitive; independently, the wrong-key confusion silently encrypts user data at rest under the wrong key, corrupting it irrecoverably.\nA:H - Dereferencing the freed `blk_crypto_key` in `blk_crypto_reprogram_all_keys()` causes an oops or panic (plus the `WARN_ON_ONCE`/`WARN_ON` splats), and the attacker can repeat the trigger loop indefinitely to crash the system."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:14:40.430Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/701a8220762ff90615dc91d3543f789391b63298"
        },
        {
          "url": "https://git.kernel.org/stable/c/5bb4005fb667c6e2188fa87950f8d5faf2994410"
        },
        {
          "url": "https://git.kernel.org/stable/c/64ef787bb1588475163069c2e62fdd8f6c27b1f6"
        },
        {
          "url": "https://git.kernel.org/stable/c/809a5be62e92a444a3c3d7b9f438019d0b322f55"
        },
        {
          "url": "https://git.kernel.org/stable/c/5c62852942667c613de0458fc797c5b8c36112b5"
        },
        {
          "url": "https://git.kernel.org/stable/c/5c7cb94452901a93e90c2230632e2c12a681bc92"
        }
      ],
      "title": "blk-crypto: make blk_crypto_evict_key() more robust",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53536",
    "datePublished": "2025-10-04T15:16:47.304Z",
    "dateReserved": "2025-10-04T15:14:15.919Z",
    "dateUpdated": "2026-08-05T09:14:40.430Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53536",
      "date": "2026-09-18",
      "epss": "0.0016",
      "percentile": "0.05609"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "block/blk-crypto-profile.c",
                  "block/blk-crypto.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "701a8220762ff90615dc91d3543f789391b63298",
                    "status": "affected",
                    "version": "1b2628397058ebce7277480960b29c788138de90",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "5bb4005fb667c6e2188fa87950f8d5faf2994410",
                    "status": "affected",
                    "version": "1b2628397058ebce7277480960b29c788138de90",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "64ef787bb1588475163069c2e62fdd8f6c27b1f6",
                    "status": "affected",
                    "version": "1b2628397058ebce7277480960b29c788138de90",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "809a5be62e92a444a3c3d7b9f438019d0b322f55",
                    "status": "affected",
                    "version": "1b2628397058ebce7277480960b29c788138de90",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "5c62852942667c613de0458fc797c5b8c36112b5",
                    "status": "affected",
                    "version": "1b2628397058ebce7277480960b29c788138de90",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "5c7cb94452901a93e90c2230632e2c12a681bc92",
                    "status": "affected",
                    "version": "1b2628397058ebce7277480960b29c788138de90",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "block/blk-crypto-profile.c",
                  "block/blk-crypto.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "5.8"
                  },
                  {
                    "lessThan": "5.8",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.180",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.111",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.28",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.2.*",
                    "status": "unaffected",
                    "version": "6.2.15",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.3.*",
                    "status": "unaffected",
                    "version": "6.3.2",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "6.4",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "76760B6D-B26D-49FF-A946-F832EB4992B6",
                    "versionEndExcluding": "5.10.180",
                    "versionStartIncluding": "5.8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2B9DD776-7F17-4F72-B94F-54BFCBC692DD",
                    "versionEndExcluding": "5.15.111",
                    "versionStartIncluding": "5.11",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "08F855F4-7188-4EE1-BD79-D4B6C7E2EF54",
                    "versionEndExcluding": "6.1.28",
                    "versionStartIncluding": "5.16",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3844A90B-940D-46C3-8D7B-9FF63F1AFC2F",
                    "versionEndExcluding": "6.2.15",
                    "versionStartIncluding": "6.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "38F6F330-91A0-4675-8B90-6F950471A7CC",
                    "versionEndExcluding": "6.3.2",
                    "versionStartIncluding": "6.3",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-crypto: make blk_crypto_evict_key() more robust\n\nIf blk_crypto_evict_key() sees that the key is still in-use (due to a\nbug) or that -\u003ekeyslot_evict failed, it currently just returns while\nleaving the key linked into the keyslot management structures.\n\nHowever, blk_crypto_evict_key() is only called in contexts such as inode\neviction where failure is not an option.  So actually the caller\nproceeds with freeing the blk_crypto_key regardless of the return value\nof blk_crypto_evict_key().\n\nThese two assumptions don\u0027t match, and the result is that there can be a\nuse-after-free in blk_crypto_reprogram_all_keys() after one of these\nerrors occurs.  (Note, these errors *shouldn\u0027t* happen; we\u0027re just\ntalking about what happens if they do anyway.)\n\nFix this by making blk_crypto_evict_key() unlink the key from the\nkeyslot management structures even on failure.\n\nAlso improve some comments."
          }
        ],
        "id": "CVE-2023-53536",
        "lastModified": "2026-08-04T10:19:11.040",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2025-10-04T16:15:48.580",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/5bb4005fb667c6e2188fa87950f8d5faf2994410"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/5c62852942667c613de0458fc797c5b8c36112b5"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/5c7cb94452901a93e90c2230632e2c12a681bc92"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/64ef787bb1588475163069c2e62fdd8f6c27b1f6"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/701a8220762ff90615dc91d3543f789391b63298"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/809a5be62e92a444a3c3d7b9f438019d0b322f55"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-416"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-21T20:02:49+00:00",
      "cve": "CVE-2023-53536",
      "id": "CVE-2023-53536",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:fixed": "279",
      "product_status:known_affected": "22",
      "product_status:known_not_affected": "166",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: blk-crypto: make blk_crypto_evict_key() more robust",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53536.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-31T00:57:45Z",
      "cve": "CVE-2023-53536",
      "id": "CVE-2023-53536",
      "initial_release_date": "2025-10-05T02:56:44Z",
      "product_status:known_affected": "171",
      "product_status:known_not_affected": "352",
      "product_status:recommended": "29",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-53536",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53536.json",
      "version": "11"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.