GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-43230 (GCVE-0-2026-43230)

Vulnerability from cvelistv5 – Published: 2026-05-06 11:28 – Updated: 2026-08-05 12:26
VLAI
Title
net/rds: Clear reconnect pending bit
Summary
In the Linux kernel, the following vulnerability has been resolved: net/rds: Clear reconnect pending bit When canceling the reconnect worker, care must be taken to reset the reconnect-pending bit. If the reconnect worker has not yet been scheduled before it is canceled, the reconnect-pending bit will stay on forever.
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 00e0f34c616603ba6500f41943cbf89eb4a8a5be , < 3cf001aff71b1db1b4732a5381b012a114720664 (git)
Affected: 00e0f34c616603ba6500f41943cbf89eb4a8a5be , < 60b347333ec259ac7352f62cbbc365b04c065ff8 (git)
Affected: 00e0f34c616603ba6500f41943cbf89eb4a8a5be , < 597c46a42930c963f448720aaf5001dd4ed98af4 (git)
Affected: 00e0f34c616603ba6500f41943cbf89eb4a8a5be , < 391200c274e90c34071b909ba12e3390b81b767f (git)
Affected: 00e0f34c616603ba6500f41943cbf89eb4a8a5be , < ba2e3472022f44baddf000621fed150d7a599ea3 (git)
Affected: 00e0f34c616603ba6500f41943cbf89eb4a8a5be , < 14eae5564053ac3973b9369dc674638f22f4765e (git)
Affected: 00e0f34c616603ba6500f41943cbf89eb4a8a5be , < bcf034fa5f66b6a3e787f765a917934a2045cf7a (git)
Affected: 00e0f34c616603ba6500f41943cbf89eb4a8a5be , < b89fc7c2523b2b0750d91840f4e52521270d70ed (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.30
Unaffected: 0 , < 2.6.30 (semver)
Unaffected: 5.10.252 , ≤ 5.10.* (semver)
Unaffected: 5.15.202 , ≤ 5.15.* (semver)
Unaffected: 6.1.165 , ≤ 6.1.* (semver)
Unaffected: 6.6.128 , ≤ 6.6.* (semver)
Unaffected: 6.12.75 , ≤ 6.12.* (semver)
Unaffected: 6.18.16 , ≤ 6.18.* (semver)
Unaffected: 6.19.6 , ≤ 6.19.* (semver)
Unaffected: 7.0 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/rds/connection.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "3cf001aff71b1db1b4732a5381b012a114720664",
              "status": "affected",
              "version": "00e0f34c616603ba6500f41943cbf89eb4a8a5be",
              "versionType": "git"
            },
            {
              "lessThan": "60b347333ec259ac7352f62cbbc365b04c065ff8",
              "status": "affected",
              "version": "00e0f34c616603ba6500f41943cbf89eb4a8a5be",
              "versionType": "git"
            },
            {
              "lessThan": "597c46a42930c963f448720aaf5001dd4ed98af4",
              "status": "affected",
              "version": "00e0f34c616603ba6500f41943cbf89eb4a8a5be",
              "versionType": "git"
            },
            {
              "lessThan": "391200c274e90c34071b909ba12e3390b81b767f",
              "status": "affected",
              "version": "00e0f34c616603ba6500f41943cbf89eb4a8a5be",
              "versionType": "git"
            },
            {
              "lessThan": "ba2e3472022f44baddf000621fed150d7a599ea3",
              "status": "affected",
              "version": "00e0f34c616603ba6500f41943cbf89eb4a8a5be",
              "versionType": "git"
            },
            {
              "lessThan": "14eae5564053ac3973b9369dc674638f22f4765e",
              "status": "affected",
              "version": "00e0f34c616603ba6500f41943cbf89eb4a8a5be",
              "versionType": "git"
            },
            {
              "lessThan": "bcf034fa5f66b6a3e787f765a917934a2045cf7a",
              "status": "affected",
              "version": "00e0f34c616603ba6500f41943cbf89eb4a8a5be",
              "versionType": "git"
            },
            {
              "lessThan": "b89fc7c2523b2b0750d91840f4e52521270d70ed",
              "status": "affected",
              "version": "00e0f34c616603ba6500f41943cbf89eb4a8a5be",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/rds/connection.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.30"
            },
            {
              "lessThan": "2.6.30",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.252",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.202",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.128",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.75",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.252",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.202",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.165",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.128",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.75",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.16",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.6",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/rds: Clear reconnect pending bit\n\nWhen canceling the reconnect worker, care must be taken to reset the\nreconnect-pending bit. If the reconnect worker has not yet been\nscheduled before it is canceled, the reconnect-pending bit will stay\non forever."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - RDS over TCP exposes a kernel listener on TCP port 16385, and unauthenticated remote peers can drive the connection state changes that lead through rds_tcp_state_change(), rds_conn_path_drop(), and rds_conn_shutdown().\nAC:L - The attacker can repeatedly create/drop TCP connections or induce reconnect races; the stale pending-bit condition is reachable through normal connection-management timing and does not depend on an uncontrollable environment condition.\nPR:N - The network path accepts TCP peers before any RDS-level authentication or credential check, so a remote attacker needs no local account or privileges.\nUI:N - No victim user action is required once RDS TCP is enabled and reachable; the attacker only needs to interact with the exposed RDS TCP service.\nS:U - The impact remains within the kernel/RDS networking service security authority and does not cross a VM, sandbox, IOMMU, or similar boundary.\nC:N - The bug is a stale connection-management flag that suppresses reconnect scheduling; it does not expose memory contents or provide an information disclosure primitive.\nI:N - The issue does not corrupt memory or allow attacker-controlled modification of kernel or application data; it only affects reconnection behavior.\nA:H - Leaving RDS_RECONNECT_PENDING set can prevent future reconnect scheduling indefinitely, making the affected RDS path or peer connection unavailable until administrative recovery or another reset. In a critical RDS deployment this can fully deny communication to that peer, so high availability impact is appropriate."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:26:43.969Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/3cf001aff71b1db1b4732a5381b012a114720664"
        },
        {
          "url": "https://git.kernel.org/stable/c/60b347333ec259ac7352f62cbbc365b04c065ff8"
        },
        {
          "url": "https://git.kernel.org/stable/c/597c46a42930c963f448720aaf5001dd4ed98af4"
        },
        {
          "url": "https://git.kernel.org/stable/c/391200c274e90c34071b909ba12e3390b81b767f"
        },
        {
          "url": "https://git.kernel.org/stable/c/ba2e3472022f44baddf000621fed150d7a599ea3"
        },
        {
          "url": "https://git.kernel.org/stable/c/14eae5564053ac3973b9369dc674638f22f4765e"
        },
        {
          "url": "https://git.kernel.org/stable/c/bcf034fa5f66b6a3e787f765a917934a2045cf7a"
        },
        {
          "url": "https://git.kernel.org/stable/c/b89fc7c2523b2b0750d91840f4e52521270d70ed"
        }
      ],
      "title": "net/rds: Clear reconnect pending bit",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43230",
    "datePublished": "2026-05-06T11:28:27.620Z",
    "dateReserved": "2026-05-01T14:12:55.994Z",
    "dateUpdated": "2026-08-05T12:26:43.969Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-43230",
      "date": "2026-09-15",
      "epss": "0.00523",
      "percentile": "0.42943"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-43230\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-06T12:16:42.957\",\"lastModified\":\"2026-06-17T10:49:11.923\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet/rds: Clear reconnect pending bit\\n\\nWhen canceling the reconnect worker, care must be taken to reset the\\nreconnect-pending bit. If the reconnect worker has not yet been\\nscheduled before it is canceled, the reconnect-pending bit will stay\\non forever.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/rds/connection.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"00e0f34c616603ba6500f41943cbf89eb4a8a5be\",\"lessThan\":\"3cf001aff71b1db1b4732a5381b012a114720664\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"00e0f34c616603ba6500f41943cbf89eb4a8a5be\",\"lessThan\":\"60b347333ec259ac7352f62cbbc365b04c065ff8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"00e0f34c616603ba6500f41943cbf89eb4a8a5be\",\"lessThan\":\"597c46a42930c963f448720aaf5001dd4ed98af4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"00e0f34c616603ba6500f41943cbf89eb4a8a5be\",\"lessThan\":\"391200c274e90c34071b909ba12e3390b81b767f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"00e0f34c616603ba6500f41943cbf89eb4a8a5be\",\"lessThan\":\"ba2e3472022f44baddf000621fed150d7a599ea3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"00e0f34c616603ba6500f41943cbf89eb4a8a5be\",\"lessThan\":\"14eae5564053ac3973b9369dc674638f22f4765e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"00e0f34c616603ba6500f41943cbf89eb4a8a5be\",\"lessThan\":\"bcf034fa5f66b6a3e787f765a917934a2045cf7a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"00e0f34c616603ba6500f41943cbf89eb4a8a5be\",\"lessThan\":\"b89fc7c2523b2b0750d91840f4e52521270d70ed\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/rds/connection.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.30\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.30\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.252\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.202\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.165\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.128\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.75\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.16\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19.6\",\"lessThanOrEqual\":\"6.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.30\",\"versionEndExcluding\":\"5.10.252\",\"matchCriteriaId\":\"46998DEF-E2A4-4BB4-9EF9-8CFBFF126504\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.202\",\"matchCriteriaId\":\"4002FC2B-1456-4666-B240-0EBF590C4671\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.165\",\"matchCriteriaId\":\"797C7F46-D0BE-4FB8-A502-C5EF8E6B6654\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.128\",\"matchCriteriaId\":\"851E9353-6C09-4CC9-877E-E09DB164A3C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.75\",\"matchCriteriaId\":\"BCE16369-98ED-41CF-8995-DFDC10B288D2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.16\",\"matchCriteriaId\":\"B4B8CDA9-BADF-4CF5-8B3B-702DE8EEA40B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"6.19.6\",\"matchCriteriaId\":\"373EEEDA-FAA1-4FB4-B6ED-DB4DD99DBE67\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/14eae5564053ac3973b9369dc674638f22f4765e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/391200c274e90c34071b909ba12e3390b81b767f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3cf001aff71b1db1b4732a5381b012a114720664\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/597c46a42930c963f448720aaf5001dd4ed98af4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/60b347333ec259ac7352f62cbbc365b04c065ff8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b89fc7c2523b2b0750d91840f4e52521270d70ed\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ba2e3472022f44baddf000621fed150d7a599ea3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/bcf034fa5f66b6a3e787f765a917934a2045cf7a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-05T14:55:29+00:00",
      "cve": "CVE-2026-43230",
      "id": "CVE-2026-43230",
      "initial_release_date": "2026-05-06T00:00:00+00:00",
      "product_status:known_affected": "14",
      "product_status:known_not_affected": "260",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net/rds: Clear reconnect pending bit",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43230.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T01:19:45Z",
      "cve": "CVE-2026-43230",
      "id": "CVE-2026-43230",
      "initial_release_date": "2026-05-07T02:16:59Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "678",
      "product_status:recommended": "273",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-43230",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-43230.json",
      "version": "13"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.