CVE-2025-68288 (GCVE-0-2025-68288)

Vulnerability from cvelistv5 – Published: 2025-12-16 15:06 – Updated: 2026-05-23 16:02
VLAI
Title
usb: storage: Fix memory leak in USB bulk transport
Summary
In the Linux kernel, the following vulnerability has been resolved: usb: storage: Fix memory leak in USB bulk transport A kernel memory leak was identified by the 'ioctl_sg01' test from Linux Test Project (LTP). The following bytes were mainly observed: 0x53425355. When USB storage devices incorrectly skip the data phase with status data, the code extracts/validates the CSW from the sg buffer, but fails to clear it afterwards. This leaves status protocol data in srb's transfer buffer, such as the US_BULK_CS_SIGN 'USBS' signature observed here. Thus, this can lead to USB protocols leaks to user space through SCSI generic (/dev/sg*) interfaces, such as the one seen here when the LTP test requested 512 KiB. Fix the leak by zeroing the CSW data in srb's transfer buffer immediately after the validation of devices that skip data phase. Note: Differently from CVE-2018-1000204, which fixed a big leak by zero- ing pages at allocation time, this leak occurs after allocation, when USB protocol data is written to already-allocated sg pages.
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: a45b599ad808c3c982fdcdc12b0b8611c2f92824 , < 83f0241959831586d9b6d47f6bd5d3dec8f43bf0 (git)
Affected: a45b599ad808c3c982fdcdc12b0b8611c2f92824 , < 4ba515dfff7eeca369ab85cdbb3f3b231c71720c (git)
Affected: a45b599ad808c3c982fdcdc12b0b8611c2f92824 , < 467fec3cefbeb9e3ea80f457da9a5666a71ca0d0 (git)
Affected: a45b599ad808c3c982fdcdc12b0b8611c2f92824 , < cb1401b5bcc2feb5b038fc4b512e5968b016e05e (git)
Affected: a45b599ad808c3c982fdcdc12b0b8611c2f92824 , < 0f18eac44c5668204bf6eebb01ddb369ac56932b (git)
Affected: a45b599ad808c3c982fdcdc12b0b8611c2f92824 , < 5b815ddb3f5560fac35b16de3a2a22d5f81c5993 (git)
Affected: a45b599ad808c3c982fdcdc12b0b8611c2f92824 , < 41e99fe2005182139b1058db71f0d241f8f0078c (git)
Affected: 582802e7c617cfb07cc15f280c128e6decbc57b8 (git)
Affected: 58b7ce6f9ef2367f86384b20458642945993b816 (git)
Affected: 93314640426ddb6af618d0802e622f6fa771792c (git)
Affected: ad2518320bc440ed3db072e2444a1bb226a9cf7a (git)
Affected: d827bea2d18c07ba514f7d48cde49f90da9a1384 (git)
Affected: 39169410574503c6e901de1aa6eac5108475e017 (git)
Affected: 3.16.58 , < 3.17 (semver)
Affected: 3.18.110 , < 3.19 (semver)
Affected: 4.4.133 , < 4.5 (semver)
Affected: 4.9.103 , < 4.10 (semver)
Affected: 4.14.44 , < 4.15 (semver)
Affected: 4.16.12 , < 4.17 (semver)
Create a notification for this product.
Linux Linux Affected: 4.17
Unaffected: 0 , < 4.17 (semver)
Unaffected: 5.10.247 , ≤ 5.10.* (semver)
Unaffected: 5.15.197 , ≤ 5.15.* (semver)
Unaffected: 6.1.159 , ≤ 6.1.* (semver)
Unaffected: 6.6.119 , ≤ 6.6.* (semver)
Unaffected: 6.12.61 , ≤ 6.12.* (semver)
Unaffected: 6.17.11 , ≤ 6.17.* (semver)
Unaffected: 6.18 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/storage/transport.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "83f0241959831586d9b6d47f6bd5d3dec8f43bf0",
              "status": "affected",
              "version": "a45b599ad808c3c982fdcdc12b0b8611c2f92824",
              "versionType": "git"
            },
            {
              "lessThan": "4ba515dfff7eeca369ab85cdbb3f3b231c71720c",
              "status": "affected",
              "version": "a45b599ad808c3c982fdcdc12b0b8611c2f92824",
              "versionType": "git"
            },
            {
              "lessThan": "467fec3cefbeb9e3ea80f457da9a5666a71ca0d0",
              "status": "affected",
              "version": "a45b599ad808c3c982fdcdc12b0b8611c2f92824",
              "versionType": "git"
            },
            {
              "lessThan": "cb1401b5bcc2feb5b038fc4b512e5968b016e05e",
              "status": "affected",
              "version": "a45b599ad808c3c982fdcdc12b0b8611c2f92824",
              "versionType": "git"
            },
            {
              "lessThan": "0f18eac44c5668204bf6eebb01ddb369ac56932b",
              "status": "affected",
              "version": "a45b599ad808c3c982fdcdc12b0b8611c2f92824",
              "versionType": "git"
            },
            {
              "lessThan": "5b815ddb3f5560fac35b16de3a2a22d5f81c5993",
              "status": "affected",
              "version": "a45b599ad808c3c982fdcdc12b0b8611c2f92824",
              "versionType": "git"
            },
            {
              "lessThan": "41e99fe2005182139b1058db71f0d241f8f0078c",
              "status": "affected",
              "version": "a45b599ad808c3c982fdcdc12b0b8611c2f92824",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "582802e7c617cfb07cc15f280c128e6decbc57b8",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "58b7ce6f9ef2367f86384b20458642945993b816",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "93314640426ddb6af618d0802e622f6fa771792c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "ad2518320bc440ed3db072e2444a1bb226a9cf7a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "d827bea2d18c07ba514f7d48cde49f90da9a1384",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "39169410574503c6e901de1aa6eac5108475e017",
              "versionType": "git"
            },
            {
              "lessThan": "3.17",
              "status": "affected",
              "version": "3.16.58",
              "versionType": "semver"
            },
            {
              "lessThan": "3.19",
              "status": "affected",
              "version": "3.18.110",
              "versionType": "semver"
            },
            {
              "lessThan": "4.5",
              "status": "affected",
              "version": "4.4.133",
              "versionType": "semver"
            },
            {
              "lessThan": "4.10",
              "status": "affected",
              "version": "4.9.103",
              "versionType": "semver"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.44",
              "versionType": "semver"
            },
            {
              "lessThan": "4.17",
              "status": "affected",
              "version": "4.16.12",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/storage/transport.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.17"
            },
            {
              "lessThan": "4.17",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.247",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.197",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.159",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.119",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.61",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.17.*",
              "status": "unaffected",
              "version": "6.17.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.18",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.247",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.197",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.159",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.119",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.61",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17.11",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.16.58",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.18.110",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.4.133",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.9.103",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.44",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.16.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: storage: Fix memory leak in USB bulk transport\n\nA kernel memory leak was identified by the \u0027ioctl_sg01\u0027 test from Linux\nTest Project (LTP). The following bytes were mainly observed: 0x53425355.\n\nWhen USB storage devices incorrectly skip the data phase with status data,\nthe code extracts/validates the CSW from the sg buffer, but fails to clear\nit afterwards. This leaves status protocol data in srb\u0027s transfer buffer,\nsuch as the US_BULK_CS_SIGN \u0027USBS\u0027 signature observed here. Thus, this can\nlead to USB protocols leaks to user space through SCSI generic (/dev/sg*)\ninterfaces, such as the one seen here when the LTP test requested 512 KiB.\n\nFix the leak by zeroing the CSW data in srb\u0027s transfer buffer immediately\nafter the validation of devices that skip data phase.\n\nNote: Differently from CVE-2018-1000204, which fixed a big leak by zero-\ning pages at allocation time, this leak occurs after allocation, when USB\nprotocol data is written to already-allocated sg pages."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T16:02:31.659Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/83f0241959831586d9b6d47f6bd5d3dec8f43bf0"
        },
        {
          "url": "https://git.kernel.org/stable/c/4ba515dfff7eeca369ab85cdbb3f3b231c71720c"
        },
        {
          "url": "https://git.kernel.org/stable/c/467fec3cefbeb9e3ea80f457da9a5666a71ca0d0"
        },
        {
          "url": "https://git.kernel.org/stable/c/cb1401b5bcc2feb5b038fc4b512e5968b016e05e"
        },
        {
          "url": "https://git.kernel.org/stable/c/0f18eac44c5668204bf6eebb01ddb369ac56932b"
        },
        {
          "url": "https://git.kernel.org/stable/c/5b815ddb3f5560fac35b16de3a2a22d5f81c5993"
        },
        {
          "url": "https://git.kernel.org/stable/c/41e99fe2005182139b1058db71f0d241f8f0078c"
        }
      ],
      "title": "usb: storage: Fix memory leak in USB bulk transport",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-68288",
    "datePublished": "2025-12-16T15:06:09.654Z",
    "dateReserved": "2025-12-16T14:48:05.292Z",
    "dateUpdated": "2026-05-23T16:02:31.659Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-68288",
      "date": "2026-07-14",
      "epss": "0.00173",
      "percentile": "0.06875"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-68288\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-12-16T16:16:07.620\",\"lastModified\":\"2026-06-17T09:58:52.567\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nusb: storage: Fix memory leak in USB bulk transport\\n\\nA kernel memory leak was identified by the \u0027ioctl_sg01\u0027 test from Linux\\nTest Project (LTP). The following bytes were mainly observed: 0x53425355.\\n\\nWhen USB storage devices incorrectly skip the data phase with status data,\\nthe code extracts/validates the CSW from the sg buffer, but fails to clear\\nit afterwards. This leaves status protocol data in srb\u0027s transfer buffer,\\nsuch as the US_BULK_CS_SIGN \u0027USBS\u0027 signature observed here. Thus, this can\\nlead to USB protocols leaks to user space through SCSI generic (/dev/sg*)\\ninterfaces, such as the one seen here when the LTP test requested 512 KiB.\\n\\nFix the leak by zeroing the CSW data in srb\u0027s transfer buffer immediately\\nafter the validation of devices that skip data phase.\\n\\nNote: Differently from CVE-2018-1000204, which fixed a big leak by zero-\\ning pages at allocation time, this leak occurs after allocation, when USB\\nprotocol data is written to already-allocated sg pages.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/usb/storage/transport.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"a45b599ad808c3c982fdcdc12b0b8611c2f92824\",\"lessThan\":\"83f0241959831586d9b6d47f6bd5d3dec8f43bf0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a45b599ad808c3c982fdcdc12b0b8611c2f92824\",\"lessThan\":\"4ba515dfff7eeca369ab85cdbb3f3b231c71720c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a45b599ad808c3c982fdcdc12b0b8611c2f92824\",\"lessThan\":\"467fec3cefbeb9e3ea80f457da9a5666a71ca0d0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a45b599ad808c3c982fdcdc12b0b8611c2f92824\",\"lessThan\":\"cb1401b5bcc2feb5b038fc4b512e5968b016e05e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a45b599ad808c3c982fdcdc12b0b8611c2f92824\",\"lessThan\":\"0f18eac44c5668204bf6eebb01ddb369ac56932b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a45b599ad808c3c982fdcdc12b0b8611c2f92824\",\"lessThan\":\"5b815ddb3f5560fac35b16de3a2a22d5f81c5993\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a45b599ad808c3c982fdcdc12b0b8611c2f92824\",\"lessThan\":\"41e99fe2005182139b1058db71f0d241f8f0078c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"582802e7c617cfb07cc15f280c128e6decbc57b8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"58b7ce6f9ef2367f86384b20458642945993b816\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"93314640426ddb6af618d0802e622f6fa771792c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ad2518320bc440ed3db072e2444a1bb226a9cf7a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d827bea2d18c07ba514f7d48cde49f90da9a1384\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"39169410574503c6e901de1aa6eac5108475e017\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"3.16.58\",\"lessThan\":\"3.17\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.18.110\",\"lessThan\":\"3.19\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.4.133\",\"lessThan\":\"4.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.9.103\",\"lessThan\":\"4.10\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.14.44\",\"lessThan\":\"4.15\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.16.12\",\"lessThan\":\"4.17\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/usb/storage/transport.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.17\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.17\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.247\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.197\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.159\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.119\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.61\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.17.11\",\"lessThanOrEqual\":\"6.17.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0f18eac44c5668204bf6eebb01ddb369ac56932b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/41e99fe2005182139b1058db71f0d241f8f0078c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/467fec3cefbeb9e3ea80f457da9a5666a71ca0d0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/4ba515dfff7eeca369ab85cdbb3f3b231c71720c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/5b815ddb3f5560fac35b16de3a2a22d5f81c5993\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/83f0241959831586d9b6d47f6bd5d3dec8f43bf0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/cb1401b5bcc2feb5b038fc4b512e5968b016e05e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-06-30T10:13:12+00:00",
      "cve": "CVE-2025-68288",
      "id": "CVE-2025-68288",
      "initial_release_date": "2025-12-16T00:00:00+00:00",
      "product_status:known_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: usb: storage: Fix memory leak in USB bulk transport",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68288.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.