GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-64547 (GCVE-0-2026-64547)

Vulnerability from cvelistv5 – Published: 2026-07-27 20:10 – Updated: 2026-08-17 04:57
VLAI
Title
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
Summary
In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packet_len before pad-byte access in rx_fixup For an even packet_len, net1080_rx_fixup() reads the pad byte at skb->data[packet_len] before the skb->len != packet_len check further down, and packet_len is only bounded against NC_MAX_PACKET. A malicious NetChip 1080 device can send a short frame advertising a large even packet_len (e.g. 0x4000), so the pad-byte read lands past the end of the skb: BUG: KASAN: slab-out-of-bounds in net1080_rx_fixup Read of size 1 at addr ffff8880106c83c6 by task ksoftirqd/0/14 ... net1080_rx_fixup (drivers/net/usb/net1080.c:384) usbnet_bh (drivers/net/usb/usbnet.c:1589) process_one_work (kernel/workqueue.c:3322) bh_worker (kernel/workqueue.c:3708) tasklet_action (kernel/softirq.c:965) handle_softirqs (kernel/softirq.c:622) ... Reject the frame when packet_len >= skb->len before reading.
Severity
8.1 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 904813cd8a0b334189da285bb05af0b18b062502 , < f42217fa7d535e9ec4151f7971f06f6ea65e850a (git)
Affected: 904813cd8a0b334189da285bb05af0b18b062502 , < c087749815379e9af2fdbeb08bfc33870b103958 (git)
Affected: 904813cd8a0b334189da285bb05af0b18b062502 , < e4a87126c085b097d29e17e3b7647295bba8be7c (git)
Affected: 904813cd8a0b334189da285bb05af0b18b062502 , < 685e92934f11d5e215dad58813e2f9955ac2f436 (git)
Affected: 904813cd8a0b334189da285bb05af0b18b062502 , < 4dc8484be3302d187274364820d3bef6c62bde32 (git)
Affected: 904813cd8a0b334189da285bb05af0b18b062502 , < b153cfe84b1340c69a13d0957665a2bfcf21239c (git)
Affected: 904813cd8a0b334189da285bb05af0b18b062502 , < ea866cab12db1a2100b400a8b03569e5bc0ee29a (git)
Affected: 904813cd8a0b334189da285bb05af0b18b062502 , < 03f384bc0cb8d4a1301d4f5b0baef2d980258383 (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.14
Unaffected: 0 , < 2.6.14 (semver)
Unaffected: 5.10.261 , ≤ 5.10.* (semver)
Unaffected: 5.15.212 , ≤ 5.15.* (semver)
Unaffected: 6.1.178 , ≤ 6.1.* (semver)
Unaffected: 6.6.145 , ≤ 6.6.* (semver)
Unaffected: 6.12.97 , ≤ 6.12.* (semver)
Unaffected: 6.18.40 , ≤ 6.18.* (semver)
Unaffected: 7.1.5 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/usb/net1080.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f42217fa7d535e9ec4151f7971f06f6ea65e850a",
              "status": "affected",
              "version": "904813cd8a0b334189da285bb05af0b18b062502",
              "versionType": "git"
            },
            {
              "lessThan": "c087749815379e9af2fdbeb08bfc33870b103958",
              "status": "affected",
              "version": "904813cd8a0b334189da285bb05af0b18b062502",
              "versionType": "git"
            },
            {
              "lessThan": "e4a87126c085b097d29e17e3b7647295bba8be7c",
              "status": "affected",
              "version": "904813cd8a0b334189da285bb05af0b18b062502",
              "versionType": "git"
            },
            {
              "lessThan": "685e92934f11d5e215dad58813e2f9955ac2f436",
              "status": "affected",
              "version": "904813cd8a0b334189da285bb05af0b18b062502",
              "versionType": "git"
            },
            {
              "lessThan": "4dc8484be3302d187274364820d3bef6c62bde32",
              "status": "affected",
              "version": "904813cd8a0b334189da285bb05af0b18b062502",
              "versionType": "git"
            },
            {
              "lessThan": "b153cfe84b1340c69a13d0957665a2bfcf21239c",
              "status": "affected",
              "version": "904813cd8a0b334189da285bb05af0b18b062502",
              "versionType": "git"
            },
            {
              "lessThan": "ea866cab12db1a2100b400a8b03569e5bc0ee29a",
              "status": "affected",
              "version": "904813cd8a0b334189da285bb05af0b18b062502",
              "versionType": "git"
            },
            {
              "lessThan": "03f384bc0cb8d4a1301d4f5b0baef2d980258383",
              "status": "affected",
              "version": "904813cd8a0b334189da285bb05af0b18b062502",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/usb/net1080.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.14"
            },
            {
              "lessThan": "2.6.14",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.261",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.212",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.261",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.212",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.178",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.145",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.97",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.40",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.5",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: net1080: validate packet_len before pad-byte access in rx_fixup\n\nFor an even packet_len, net1080_rx_fixup() reads the pad byte at\nskb-\u003edata[packet_len] before the skb-\u003elen != packet_len check further\ndown, and packet_len is only bounded against NC_MAX_PACKET. A malicious\nNetChip 1080 device can send a short frame advertising a large even\npacket_len (e.g. 0x4000), so the pad-byte read lands past the end of the\nskb:\n\n  BUG: KASAN: slab-out-of-bounds in net1080_rx_fixup\n  Read of size 1 at addr ffff8880106c83c6 by task ksoftirqd/0/14\n   ...\n   net1080_rx_fixup (drivers/net/usb/net1080.c:384)\n   usbnet_bh (drivers/net/usb/usbnet.c:1589)\n   process_one_work (kernel/workqueue.c:3322)\n   bh_worker (kernel/workqueue.c:3708)\n   tasklet_action (kernel/softirq.c:965)\n   handle_softirqs (kernel/softirq.c:622)\n   ...\n\nReject the frame when packet_len \u003e= skb-\u003elen before reading."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:A - net1080 implements a point-to-point Ethernet link over a USB host-to-host cable, so the malformed NC frame originates from the logically adjacent peer host/device on that link rather than from a local user; a compromised peer (or a gadget-mode board presenting 0525:1080, which autoloads the default-y driver) sends the frame over an already-established link with no physical interaction at attack time.\nAC:L - The attacker fully and deterministically controls packet_len and the frame length in every received frame, so the out-of-bounds read is triggered on demand with no race, no timing dependency, and no reliance on memory layout the attacker cannot influence.\nPR:N - The rx path runs in softirq/workqueue context on every received URB with no authentication, no capability check, and no local account on the target; USB/link-level peers are entirely untrusted and ungated.\nUI:N - The driver binds automatically via MODULE_DEVICE_TABLE and processes frames in usbnet_bh without any user action; on an already-connected host-to-host cable the victim does nothing at all.\nS:U - The out-of-bounds read stays within the kernel\u0027s own memory and security authority, with no crossing of a VM, IOMMU, or sandbox boundary.\nC:H - The attacker controls the read offset across a ~32 KB range past a 1523-byte slab/page-frag object, and the comparison outcome is leaked back over the wire because only the matching path reaches nc_ensure_sync()\u0027s vendor control transfer, yielding a repeatable oracle for probing kernel heap contents rather than a bounded few-byte read.\nI:N - The path performs only a one-byte read; the subsequent skb-\u003elen != packet_len check still rejects the frame, and the skb_trim calls on the underflow paths are no-ops, so no kernel memory or network data is modified.\nA:H - The read reaches roughly 31 KB beyond the allocation, which can cross into a KFENCE guard page, an unmapped hole, or a page-frag boundary and oops in softirq context, and on KASAN/panic_on_warn hardened kernels it panics the machine outright \u2014 repeatable per frame."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T04:57:24.361Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f42217fa7d535e9ec4151f7971f06f6ea65e850a"
        },
        {
          "url": "https://git.kernel.org/stable/c/c087749815379e9af2fdbeb08bfc33870b103958"
        },
        {
          "url": "https://git.kernel.org/stable/c/e4a87126c085b097d29e17e3b7647295bba8be7c"
        },
        {
          "url": "https://git.kernel.org/stable/c/685e92934f11d5e215dad58813e2f9955ac2f436"
        },
        {
          "url": "https://git.kernel.org/stable/c/4dc8484be3302d187274364820d3bef6c62bde32"
        },
        {
          "url": "https://git.kernel.org/stable/c/b153cfe84b1340c69a13d0957665a2bfcf21239c"
        },
        {
          "url": "https://git.kernel.org/stable/c/ea866cab12db1a2100b400a8b03569e5bc0ee29a"
        },
        {
          "url": "https://git.kernel.org/stable/c/03f384bc0cb8d4a1301d4f5b0baef2d980258383"
        }
      ],
      "title": "net: usb: net1080: validate packet_len before pad-byte access in rx_fixup",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-64547",
    "datePublished": "2026-07-27T20:10:37.786Z",
    "dateReserved": "2026-07-19T15:36:31.795Z",
    "dateUpdated": "2026-08-17T04:57:24.361Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-64547",
      "date": "2026-09-19",
      "epss": "0.00274",
      "percentile": "0.20026"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/net/usb/net1080.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "f42217fa7d535e9ec4151f7971f06f6ea65e850a",
                    "status": "affected",
                    "version": "904813cd8a0b334189da285bb05af0b18b062502",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "c087749815379e9af2fdbeb08bfc33870b103958",
                    "status": "affected",
                    "version": "904813cd8a0b334189da285bb05af0b18b062502",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e4a87126c085b097d29e17e3b7647295bba8be7c",
                    "status": "affected",
                    "version": "904813cd8a0b334189da285bb05af0b18b062502",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "685e92934f11d5e215dad58813e2f9955ac2f436",
                    "status": "affected",
                    "version": "904813cd8a0b334189da285bb05af0b18b062502",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "4dc8484be3302d187274364820d3bef6c62bde32",
                    "status": "affected",
                    "version": "904813cd8a0b334189da285bb05af0b18b062502",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "b153cfe84b1340c69a13d0957665a2bfcf21239c",
                    "status": "affected",
                    "version": "904813cd8a0b334189da285bb05af0b18b062502",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "ea866cab12db1a2100b400a8b03569e5bc0ee29a",
                    "status": "affected",
                    "version": "904813cd8a0b334189da285bb05af0b18b062502",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "03f384bc0cb8d4a1301d4f5b0baef2d980258383",
                    "status": "affected",
                    "version": "904813cd8a0b334189da285bb05af0b18b062502",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/net/usb/net1080.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "2.6.14"
                  },
                  {
                    "lessThan": "2.6.14",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.261",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.212",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.178",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.145",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.97",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.40",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.1.*",
                    "status": "unaffected",
                    "version": "7.1.5",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.2",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: net1080: validate packet_len before pad-byte access in rx_fixup\n\nFor an even packet_len, net1080_rx_fixup() reads the pad byte at\nskb-\u003edata[packet_len] before the skb-\u003elen != packet_len check further\ndown, and packet_len is only bounded against NC_MAX_PACKET. A malicious\nNetChip 1080 device can send a short frame advertising a large even\npacket_len (e.g. 0x4000), so the pad-byte read lands past the end of the\nskb:\n\n  BUG: KASAN: slab-out-of-bounds in net1080_rx_fixup\n  Read of size 1 at addr ffff8880106c83c6 by task ksoftirqd/0/14\n   ...\n   net1080_rx_fixup (drivers/net/usb/net1080.c:384)\n   usbnet_bh (drivers/net/usb/usbnet.c:1589)\n   process_one_work (kernel/workqueue.c:3322)\n   bh_worker (kernel/workqueue.c:3708)\n   tasklet_action (kernel/softirq.c:965)\n   handle_softirqs (kernel/softirq.c:622)\n   ...\n\nReject the frame when packet_len \u003e= skb-\u003elen before reading."
          }
        ],
        "id": "CVE-2026-64547",
        "lastModified": "2026-08-17T05:17:59.960",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 5.2,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-07-27T21:17:07.427",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/03f384bc0cb8d4a1301d4f5b0baef2d980258383"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/4dc8484be3302d187274364820d3bef6c62bde32"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/685e92934f11d5e215dad58813e2f9955ac2f436"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/b153cfe84b1340c69a13d0957665a2bfcf21239c"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/c087749815379e9af2fdbeb08bfc33870b103958"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/e4a87126c085b097d29e17e3b7647295bba8be7c"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/ea866cab12db1a2100b400a8b03569e5bc0ee29a"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/f42217fa7d535e9ec4151f7971f06f6ea65e850a"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-07-30T08:28:37+00:00",
      "cve": "CVE-2026-64547",
      "id": "CVE-2026-64547",
      "initial_release_date": "2026-07-27T00:00:00+00:00",
      "product_status:known_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net: usb: net1080: validate packet_len before pad-byte access in rx_fixup",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64547.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-18T00:38:29Z",
      "cve": "CVE-2026-64547",
      "id": "CVE-2026-64547",
      "initial_release_date": "2026-07-28T17:07:58Z",
      "product_status:first_fixed": "23",
      "product_status:known_affected": "675",
      "product_status:known_not_affected": "58",
      "product_status:recommended": "111",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-64547",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-64547.json",
      "version": "11"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.