GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-53804 (GCVE-0-2023-53804)

Vulnerability from cvelistv5 – Published: 2025-12-09 00:01 – Updated: 2026-08-05 09:16
VLAI
Title
nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
Summary
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() During unmount process of nilfs2, nothing holds nilfs_root structure after nilfs2 detaches its writer in nilfs_detach_log_writer(). However, since nilfs_evict_inode() uses nilfs_root for some cleanup operations, it may cause use-after-free read if inodes are left in "garbage_list" and released by nilfs_dispose_list() at the end of nilfs_detach_log_writer(). Fix this issue by modifying nilfs_evict_inode() to only clear inode without additional metadata changes that use nilfs_root if the file system is degraded to read-only or the writer is detached.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: e912a5b66837ee89fb025e67b5efeaa11930c2ce , < f31e18131ee2ce80a4da5c808221d25b1ae9ad6d (git)
Affected: e912a5b66837ee89fb025e67b5efeaa11930c2ce , < 2a782ea8ebd712a458466e3103e2881b4f886cb5 (git)
Affected: e912a5b66837ee89fb025e67b5efeaa11930c2ce , < 116d53f09ff52e6f98e3fe1f85d8898d6ba26c68 (git)
Affected: e912a5b66837ee89fb025e67b5efeaa11930c2ce , < 6b4205ea97901f822004e6c8d59484ccfda03faa (git)
Affected: e912a5b66837ee89fb025e67b5efeaa11930c2ce , < b8427b8522d9ede53015ba45a9978ba68d1162f5 (git)
Affected: e912a5b66837ee89fb025e67b5efeaa11930c2ce , < acc2a40e428f12780004e1e9fce4722d88f909fd (git)
Affected: e912a5b66837ee89fb025e67b5efeaa11930c2ce , < fb8e8d58f116d069e5939e1f786ac84e7fa4533e (git)
Affected: e912a5b66837ee89fb025e67b5efeaa11930c2ce , < 9b5a04ac3ad9898c4745cba46ea26de74ba56a8e (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.37
Unaffected: 0 , < 2.6.37 (semver)
Unaffected: 4.14.316 , ≤ 4.14.* (semver)
Unaffected: 4.19.284 , ≤ 4.19.* (semver)
Unaffected: 5.4.244 , ≤ 5.4.* (semver)
Unaffected: 5.10.181 , ≤ 5.10.* (semver)
Unaffected: 5.15.113 , ≤ 5.15.* (semver)
Unaffected: 6.1.30 , ≤ 6.1.* (semver)
Unaffected: 6.3.4 , ≤ 6.3.* (semver)
Unaffected: 6.4 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/nilfs2/inode.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f31e18131ee2ce80a4da5c808221d25b1ae9ad6d",
              "status": "affected",
              "version": "e912a5b66837ee89fb025e67b5efeaa11930c2ce",
              "versionType": "git"
            },
            {
              "lessThan": "2a782ea8ebd712a458466e3103e2881b4f886cb5",
              "status": "affected",
              "version": "e912a5b66837ee89fb025e67b5efeaa11930c2ce",
              "versionType": "git"
            },
            {
              "lessThan": "116d53f09ff52e6f98e3fe1f85d8898d6ba26c68",
              "status": "affected",
              "version": "e912a5b66837ee89fb025e67b5efeaa11930c2ce",
              "versionType": "git"
            },
            {
              "lessThan": "6b4205ea97901f822004e6c8d59484ccfda03faa",
              "status": "affected",
              "version": "e912a5b66837ee89fb025e67b5efeaa11930c2ce",
              "versionType": "git"
            },
            {
              "lessThan": "b8427b8522d9ede53015ba45a9978ba68d1162f5",
              "status": "affected",
              "version": "e912a5b66837ee89fb025e67b5efeaa11930c2ce",
              "versionType": "git"
            },
            {
              "lessThan": "acc2a40e428f12780004e1e9fce4722d88f909fd",
              "status": "affected",
              "version": "e912a5b66837ee89fb025e67b5efeaa11930c2ce",
              "versionType": "git"
            },
            {
              "lessThan": "fb8e8d58f116d069e5939e1f786ac84e7fa4533e",
              "status": "affected",
              "version": "e912a5b66837ee89fb025e67b5efeaa11930c2ce",
              "versionType": "git"
            },
            {
              "lessThan": "9b5a04ac3ad9898c4745cba46ea26de74ba56a8e",
              "status": "affected",
              "version": "e912a5b66837ee89fb025e67b5efeaa11930c2ce",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/nilfs2/inode.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.37"
            },
            {
              "lessThan": "2.6.37",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.316",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.284",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.244",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.181",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.113",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.30",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.3.*",
              "status": "unaffected",
              "version": "6.3.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.4",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.316",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.284",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.244",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.181",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.113",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.30",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3.4",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()\n\nDuring unmount process of nilfs2, nothing holds nilfs_root structure after\nnilfs2 detaches its writer in nilfs_detach_log_writer().  However, since\nnilfs_evict_inode() uses nilfs_root for some cleanup operations, it may\ncause use-after-free read if inodes are left in \"garbage_list\" and\nreleased by nilfs_dispose_list() at the end of nilfs_detach_log_writer().\n\nFix this issue by modifying nilfs_evict_inode() to only clear inode\nwithout additional metadata changes that use nilfs_root if the file system\nis degraded to read-only or the writer is detached."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The flaw is reached only through a locally mounted nilfs2 volume \u2014 attacker-supplied on-disk metadata plus ordinary local file syscalls and the unmount path; nothing in fs/nilfs2 parses data from a remote peer.\nAC:L - The attacker fully authors the on-disk image, so the `__nilfs_error()`\u2192`SB_RDONLY` degeneration and the resulting `-EROFS` bail in `nilfs_segctor_do_construct()` are deterministic, and the free-then-use ordering inside `nilfs_detach_log_writer()` is a fixed code sequence rather than a race; syzbot reproduced it reliably.\nPR:L - An unprivileged local desktop/kiosk user is enough: udisks2/polkit lets an active local session mount and eject removable media without a password, and the writes that strand inodes on `ns_dirty_files` are ordinary unprivileged VFS operations \u2014 matching the PR:L assigned to the same-family nilfs2 crafted-image CVEs.\nUI:N - On an auto-mounting host the attacker performs every step themselves \u2014 supply the image, dirty the inodes, trigger the eject/unmount \u2014 so no action by a separate victim is required.\nS:U - The freed `nilfs_root` and `ifile` objects and any resulting corruption stay entirely within the kernel\u0027s own security authority; no hypervisor, IOMMU, or sandbox boundary is crossed.\nC:H - After `kfree(root)`, `nilfs_evict_inode()` reads `ii-\u003ei_root-\u003eifile` from a reclaimable general-purpose slab object and passes it to `nilfs_ifile_get_inode_block()`/`nilfs_palloc_*`, so a groomed replacement object yields an attacker-chosen inode pointer and arbitrary kernel memory read; `root-\u003eifile` itself is also already freed and its address_space is read out of freed memory.\nI:H - `atomic64_dec(\u0026ii-\u003ei_root-\u003einodes_count)` writes directly into the freed slab object at a fixed offset, and `nilfs_ifile_delete_inode()` performs `raw_inode-\u003ei_flags = 0` plus `mark_buffer_dirty()` through the attacker-reclaimable `-\u003eifile` pointer, giving write primitives suitable for control-flow hijacking as well as corrupting ifile/allocator metadata written back to disk.\nA:H - This is a use-after-free that syzbot detected via KASAN; dereferencing the freed `nilfs_root` and the already-`iput()`ed ifile inode during unmount readily oopses or panics the kernel, and the corruption drives further filesystem failure."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:16:07.269Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f31e18131ee2ce80a4da5c808221d25b1ae9ad6d"
        },
        {
          "url": "https://git.kernel.org/stable/c/2a782ea8ebd712a458466e3103e2881b4f886cb5"
        },
        {
          "url": "https://git.kernel.org/stable/c/116d53f09ff52e6f98e3fe1f85d8898d6ba26c68"
        },
        {
          "url": "https://git.kernel.org/stable/c/6b4205ea97901f822004e6c8d59484ccfda03faa"
        },
        {
          "url": "https://git.kernel.org/stable/c/b8427b8522d9ede53015ba45a9978ba68d1162f5"
        },
        {
          "url": "https://git.kernel.org/stable/c/acc2a40e428f12780004e1e9fce4722d88f909fd"
        },
        {
          "url": "https://git.kernel.org/stable/c/fb8e8d58f116d069e5939e1f786ac84e7fa4533e"
        },
        {
          "url": "https://git.kernel.org/stable/c/9b5a04ac3ad9898c4745cba46ea26de74ba56a8e"
        }
      ],
      "title": "nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53804",
    "datePublished": "2025-12-09T00:01:01.787Z",
    "dateReserved": "2025-12-08T23:58:35.276Z",
    "dateUpdated": "2026-08-05T09:16:07.269Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53804",
      "date": "2026-09-19",
      "epss": "0.00139",
      "percentile": "0.03655"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "fs/nilfs2/inode.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "f31e18131ee2ce80a4da5c808221d25b1ae9ad6d",
                    "status": "affected",
                    "version": "e912a5b66837ee89fb025e67b5efeaa11930c2ce",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "2a782ea8ebd712a458466e3103e2881b4f886cb5",
                    "status": "affected",
                    "version": "e912a5b66837ee89fb025e67b5efeaa11930c2ce",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "116d53f09ff52e6f98e3fe1f85d8898d6ba26c68",
                    "status": "affected",
                    "version": "e912a5b66837ee89fb025e67b5efeaa11930c2ce",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "6b4205ea97901f822004e6c8d59484ccfda03faa",
                    "status": "affected",
                    "version": "e912a5b66837ee89fb025e67b5efeaa11930c2ce",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "b8427b8522d9ede53015ba45a9978ba68d1162f5",
                    "status": "affected",
                    "version": "e912a5b66837ee89fb025e67b5efeaa11930c2ce",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "acc2a40e428f12780004e1e9fce4722d88f909fd",
                    "status": "affected",
                    "version": "e912a5b66837ee89fb025e67b5efeaa11930c2ce",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "fb8e8d58f116d069e5939e1f786ac84e7fa4533e",
                    "status": "affected",
                    "version": "e912a5b66837ee89fb025e67b5efeaa11930c2ce",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "9b5a04ac3ad9898c4745cba46ea26de74ba56a8e",
                    "status": "affected",
                    "version": "e912a5b66837ee89fb025e67b5efeaa11930c2ce",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "fs/nilfs2/inode.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "2.6.37"
                  },
                  {
                    "lessThan": "2.6.37",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.14.*",
                    "status": "unaffected",
                    "version": "4.14.316",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.19.*",
                    "status": "unaffected",
                    "version": "4.19.284",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.4.*",
                    "status": "unaffected",
                    "version": "5.4.244",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.181",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.113",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.30",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.3.*",
                    "status": "unaffected",
                    "version": "6.3.4",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "6.4",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()\n\nDuring unmount process of nilfs2, nothing holds nilfs_root structure after\nnilfs2 detaches its writer in nilfs_detach_log_writer().  However, since\nnilfs_evict_inode() uses nilfs_root for some cleanup operations, it may\ncause use-after-free read if inodes are left in \"garbage_list\" and\nreleased by nilfs_dispose_list() at the end of nilfs_detach_log_writer().\n\nFix this issue by modifying nilfs_evict_inode() to only clear inode\nwithout additional metadata changes that use nilfs_root if the file system\nis degraded to read-only or the writer is detached."
          }
        ],
        "id": "CVE-2023-53804",
        "lastModified": "2026-08-04T10:19:22.083",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2025-12-09T01:16:52.270",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/116d53f09ff52e6f98e3fe1f85d8898d6ba26c68"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/2a782ea8ebd712a458466e3103e2881b4f886cb5"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/6b4205ea97901f822004e6c8d59484ccfda03faa"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/9b5a04ac3ad9898c4745cba46ea26de74ba56a8e"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/acc2a40e428f12780004e1e9fce4722d88f909fd"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/b8427b8522d9ede53015ba45a9978ba68d1162f5"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/f31e18131ee2ce80a4da5c808221d25b1ae9ad6d"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/fb8e8d58f116d069e5939e1f786ac84e7fa4533e"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Deferred"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-06-30T10:23:21+00:00",
      "cve": "CVE-2023-53804",
      "id": "CVE-2023-53804",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53804.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-05T00:47:33Z",
      "cve": "CVE-2023-53804",
      "id": "CVE-2023-53804",
      "initial_release_date": "2025-12-10T00:35:59Z",
      "product_status:known_affected": "354",
      "product_status:known_not_affected": "427",
      "product_status:recommended": "196",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-53804",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53804.json",
      "version": "30"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.