GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2025-40282 (GCVE-0-2025-40282)

Vulnerability from cvelistv5 – Published: 2025-12-06 21:51 – Updated: 2026-08-05 12:09
VLAI
Title
Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: reset link-local header on ipv6 recv path Bluetooth 6lowpan.c netdev has header_ops, so it must set link-local header for RX skb, otherwise things crash, eg. with AF_PACKET SOCK_RAW Add missing skb_reset_mac_header() for uncompressed ipv6 RX path. For the compressed one, it is done in lowpan_header_decompress(). Log: (BlueZ 6lowpan-tester Client Recv Raw - Success) ------ kernel BUG at net/core/skbuff.c:212! Call Trace: <IRQ> ... packet_rcv (net/packet/af_packet.c:2152) ... <TASK> __local_bh_enable_ip (kernel/softirq.c:407) netif_rx (net/core/dev.c:5648) chan_recv_cb (net/bluetooth/6lowpan.c:294 net/bluetooth/6lowpan.c:359) ------
Severity
8.8 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 18722c247023035b9e2e2a08a887adec2a9a6e49 , < ea46a1d217bc82e01cf3d0424e50ebfe251e34bf (git)
Affected: 18722c247023035b9e2e2a08a887adec2a9a6e49 , < 973e0271754c77db3e1b6b69adf2de85a79a4c8b (git)
Affected: 18722c247023035b9e2e2a08a887adec2a9a6e49 , < d566e9a2bfc848941b091ffd5f4e12c4e889d818 (git)
Affected: 18722c247023035b9e2e2a08a887adec2a9a6e49 , < 4ebb90c3c309e6375dc3e841af92e2a039843e62 (git)
Affected: 18722c247023035b9e2e2a08a887adec2a9a6e49 , < c24ac6cfe4f9a47180a65592c47e7a310d2f9d93 (git)
Affected: 18722c247023035b9e2e2a08a887adec2a9a6e49 , < 11cd7e068381666f842ad41d1cc58eecd0c75237 (git)
Affected: 18722c247023035b9e2e2a08a887adec2a9a6e49 , < 70d84e7c3a44b81020a3c3d650a64c63593405bd (git)
Affected: 18722c247023035b9e2e2a08a887adec2a9a6e49 , < 3b78f50918276ab28fb22eac9aa49401ac436a3b (git)
guessed Create a notification for this product.
Linux Linux Affected: 3.14
Unaffected: 0 , < 3.14 (semver)
Unaffected: 5.4.302 , ≤ 5.4.* (semver)
Unaffected: 5.10.247 , ≤ 5.10.* (semver)
Unaffected: 5.15.197 , ≤ 5.15.* (semver)
Unaffected: 6.1.159 , ≤ 6.1.* (semver)
Unaffected: 6.6.117 , ≤ 6.6.* (semver)
Unaffected: 6.12.59 , ≤ 6.12.* (semver)
Unaffected: 6.17.9 , ≤ 6.17.* (semver)
Unaffected: 6.18 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/6lowpan.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ea46a1d217bc82e01cf3d0424e50ebfe251e34bf",
              "status": "affected",
              "version": "18722c247023035b9e2e2a08a887adec2a9a6e49",
              "versionType": "git"
            },
            {
              "lessThan": "973e0271754c77db3e1b6b69adf2de85a79a4c8b",
              "status": "affected",
              "version": "18722c247023035b9e2e2a08a887adec2a9a6e49",
              "versionType": "git"
            },
            {
              "lessThan": "d566e9a2bfc848941b091ffd5f4e12c4e889d818",
              "status": "affected",
              "version": "18722c247023035b9e2e2a08a887adec2a9a6e49",
              "versionType": "git"
            },
            {
              "lessThan": "4ebb90c3c309e6375dc3e841af92e2a039843e62",
              "status": "affected",
              "version": "18722c247023035b9e2e2a08a887adec2a9a6e49",
              "versionType": "git"
            },
            {
              "lessThan": "c24ac6cfe4f9a47180a65592c47e7a310d2f9d93",
              "status": "affected",
              "version": "18722c247023035b9e2e2a08a887adec2a9a6e49",
              "versionType": "git"
            },
            {
              "lessThan": "11cd7e068381666f842ad41d1cc58eecd0c75237",
              "status": "affected",
              "version": "18722c247023035b9e2e2a08a887adec2a9a6e49",
              "versionType": "git"
            },
            {
              "lessThan": "70d84e7c3a44b81020a3c3d650a64c63593405bd",
              "status": "affected",
              "version": "18722c247023035b9e2e2a08a887adec2a9a6e49",
              "versionType": "git"
            },
            {
              "lessThan": "3b78f50918276ab28fb22eac9aa49401ac436a3b",
              "status": "affected",
              "version": "18722c247023035b9e2e2a08a887adec2a9a6e49",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/6lowpan.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.14"
            },
            {
              "lessThan": "3.14",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.302",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.247",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.197",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.159",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.117",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.59",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.17.*",
              "status": "unaffected",
              "version": "6.17.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.18",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.302",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.247",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.197",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.159",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.117",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.59",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17.9",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: 6lowpan: reset link-local header on ipv6 recv path\n\nBluetooth 6lowpan.c netdev has header_ops, so it must set link-local\nheader for RX skb, otherwise things crash, eg. with AF_PACKET SOCK_RAW\n\nAdd missing skb_reset_mac_header() for uncompressed ipv6 RX path.\n\nFor the compressed one, it is done in lowpan_header_decompress().\n\nLog: (BlueZ 6lowpan-tester Client Recv Raw - Success)\n------\nkernel BUG at net/core/skbuff.c:212!\nCall Trace:\n\u003cIRQ\u003e\n...\npacket_rcv (net/packet/af_packet.c:2152)\n...\n\u003cTASK\u003e\n__local_bh_enable_ip (kernel/softirq.c:407)\nnetif_rx (net/core/dev.c:5648)\nchan_recv_cb (net/bluetooth/6lowpan.c:294 net/bluetooth/6lowpan.c:359)\n------"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:A - The malicious frame arrives over a Bluetooth LE L2CAP IPSP channel handled by chan_recv_cb()/recv_pkt(), so the attacker must be within BLE radio range of the target.\nAC:L - The attacker fully controls the trigger \u2014 the 6lowpan dispatch byte (0x41) selects the vulnerable uncompressed-IPv6 branch deterministically, with no race, no memory-layout dependency, and no retry needed.\nPR:N - The IPSP listening channel is created with sec_level BT_SECURITY_LOW on BDADDR_ANY, and smp_sufficient_security() short-circuits to true for that level, so an unpaired, unauthenticated peer can connect and send the frame.\nUI:N - No victim action is needed; the packet is processed in softirq context on receipt, and the ndisc/eth_hdr() consumer path is driven entirely by the attacker\u0027s own frames.\nS:U - The corruption and its consequences stay within the kernel\u0027s own security authority \u2014 no hypervisor, IOMMU, or sandbox boundary is crossed.\nC:H - skb_mac_header() resolves to skb-\u003ehead + 0xFFFF, giving unbounded out-of-bounds reads \u2014 eth_hdr(skb)-\u003eh_source in ndisc_recv_na() leaks kernel heap bytes into dmesg, and the ~4 GiB skb-\u003edata underflow with inflated skb-\u003elen exposes arbitrary kernel memory in paths that do not BUG() first.\nI:H - skb_push()/__skb_push() write a wildly out-of-range skb-\u003edata and a massively inflated skb-\u003elen before any validation; in the generic-XDP path __skb_push() has no bounds check at all, so the corrupted geometry feeds pskb_expand_head()/skb_linearize() and yields out-of-bounds writes.\nA:H - The reported outcome is a hard kernel BUG() in skb_under_panic() at net/core/skbuff.c:212 taken in IRQ/softirq context, which is a fatal exception in interrupt \u2014 an immediate, remotely repeatable kernel panic."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:09:12.019Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ea46a1d217bc82e01cf3d0424e50ebfe251e34bf"
        },
        {
          "url": "https://git.kernel.org/stable/c/973e0271754c77db3e1b6b69adf2de85a79a4c8b"
        },
        {
          "url": "https://git.kernel.org/stable/c/d566e9a2bfc848941b091ffd5f4e12c4e889d818"
        },
        {
          "url": "https://git.kernel.org/stable/c/4ebb90c3c309e6375dc3e841af92e2a039843e62"
        },
        {
          "url": "https://git.kernel.org/stable/c/c24ac6cfe4f9a47180a65592c47e7a310d2f9d93"
        },
        {
          "url": "https://git.kernel.org/stable/c/11cd7e068381666f842ad41d1cc58eecd0c75237"
        },
        {
          "url": "https://git.kernel.org/stable/c/70d84e7c3a44b81020a3c3d650a64c63593405bd"
        },
        {
          "url": "https://git.kernel.org/stable/c/3b78f50918276ab28fb22eac9aa49401ac436a3b"
        }
      ],
      "title": "Bluetooth: 6lowpan: reset link-local header on ipv6 recv path",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-40282",
    "datePublished": "2025-12-06T21:51:06.287Z",
    "dateReserved": "2025-04-16T07:20:57.184Z",
    "dateUpdated": "2026-08-05T12:09:12.019Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-40282",
      "date": "2026-09-16",
      "epss": "0.0028",
      "percentile": "0.20502"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-40282\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-12-06T22:15:56.253\",\"lastModified\":\"2026-07-30T06:24:26.370\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nBluetooth: 6lowpan: reset link-local header on ipv6 recv path\\n\\nBluetooth 6lowpan.c netdev has header_ops, so it must set link-local\\nheader for RX skb, otherwise things crash, eg. with AF_PACKET SOCK_RAW\\n\\nAdd missing skb_reset_mac_header() for uncompressed ipv6 RX path.\\n\\nFor the compressed one, it is done in lowpan_header_decompress().\\n\\nLog: (BlueZ 6lowpan-tester Client Recv Raw - Success)\\n------\\nkernel BUG at net/core/skbuff.c:212!\\nCall Trace:\\n\u003cIRQ\u003e\\n...\\npacket_rcv (net/packet/af_packet.c:2152)\\n...\\n\u003cTASK\u003e\\n__local_bh_enable_ip (kernel/softirq.c:407)\\nnetif_rx (net/core/dev.c:5648)\\nchan_recv_cb (net/bluetooth/6lowpan.c:294 net/bluetooth/6lowpan.c:359)\\n------\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/bluetooth/6lowpan.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"18722c247023035b9e2e2a08a887adec2a9a6e49\",\"lessThan\":\"ea46a1d217bc82e01cf3d0424e50ebfe251e34bf\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"18722c247023035b9e2e2a08a887adec2a9a6e49\",\"lessThan\":\"973e0271754c77db3e1b6b69adf2de85a79a4c8b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"18722c247023035b9e2e2a08a887adec2a9a6e49\",\"lessThan\":\"d566e9a2bfc848941b091ffd5f4e12c4e889d818\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"18722c247023035b9e2e2a08a887adec2a9a6e49\",\"lessThan\":\"4ebb90c3c309e6375dc3e841af92e2a039843e62\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"18722c247023035b9e2e2a08a887adec2a9a6e49\",\"lessThan\":\"c24ac6cfe4f9a47180a65592c47e7a310d2f9d93\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"18722c247023035b9e2e2a08a887adec2a9a6e49\",\"lessThan\":\"11cd7e068381666f842ad41d1cc58eecd0c75237\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"18722c247023035b9e2e2a08a887adec2a9a6e49\",\"lessThan\":\"70d84e7c3a44b81020a3c3d650a64c63593405bd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"18722c247023035b9e2e2a08a887adec2a9a6e49\",\"lessThan\":\"3b78f50918276ab28fb22eac9aa49401ac436a3b\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/bluetooth/6lowpan.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"3.14\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"3.14\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.302\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.247\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.197\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.159\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.117\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.59\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.17.9\",\"lessThanOrEqual\":\"6.17.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/11cd7e068381666f842ad41d1cc58eecd0c75237\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/3b78f50918276ab28fb22eac9aa49401ac436a3b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/4ebb90c3c309e6375dc3e841af92e2a039843e62\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/70d84e7c3a44b81020a3c3d650a64c63593405bd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/973e0271754c77db3e1b6b69adf2de85a79a4c8b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/c24ac6cfe4f9a47180a65592c47e7a310d2f9d93\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/d566e9a2bfc848941b091ffd5f4e12c4e889d818\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ea46a1d217bc82e01cf3d0424e50ebfe251e34bf\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-06-30T10:34:31+00:00",
      "cve": "CVE-2025-40282",
      "id": "CVE-2025-40282",
      "initial_release_date": "2025-12-06T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Bluetooth: 6lowpan: reset link-local header on ipv6 recv path",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-40282.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-31T00:17:25Z",
      "cve": "CVE-2025-40282",
      "id": "CVE-2025-40282",
      "initial_release_date": "2025-12-08T00:23:04Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "394",
      "product_status:known_not_affected": "435",
      "product_status:recommended": "384",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-40282",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-40282.json",
      "version": "41"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.