GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-80620 (GCVE-0-2026-80620)

Vulnerability from cvelistv5 – Published: 2026-08-28 06:48 – Updated: 2026-08-28 06:48
VLAI
Title
Revert "PCI/MSI: Unmap MSI-X region on error"
Summary
In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/MSI: Unmap MSI-X region on error" This reverts commit 1a8d4c6ecb4c81261bcdf13556abd4a958eca202. Commit 1a8d4c6ecb4c ("PCI/MSI: Unmap MSI-X region on error") added an iounmap(dev->msix_base) on the error path of msix_capability_init() to release the MSI-X region when msix_setup_interrupts() fails. When msix_setup_interrupts() fails, the call chain is: msix_setup_interrupts() -> __msix_setup_interrupts() struct pci_dev *dev __free(free_msi_irqs) = __dev; ... return ret; // __free cleanup fires on error The __free(free_msi_irqs) cleanup calls pci_free_msi_irqs(), which already handles the unmap: void pci_free_msi_irqs(struct pci_dev *dev) { pci_msi_teardown_msi_irqs(dev); if (dev->msix_base) { iounmap(dev->msix_base); // already unmapped here dev->msix_base = NULL; // and set to NULL } } So dev->msix_base is unmapped and set to NULL before msix_setup_interrupts() returns to msix_capability_init(). The "goto out_unmap" introduced by commit 1a8d4c6ecb4c ("PCI/MSI: Unmap MSI-X region on error") then calls iounmap() a second time on a NULL pointer. This was reproduced on Intel Emerald Rapids (192 CPUs) while running tools/testing/selftests/kexec/test_kexec_jump.sh: WARNING: CPU#44 at iounmap+0x2a/0xe0 RIP: 0010:iounmap+0x2a/0xe0 RDI: 0000000000000000 Call Trace: msix_capability_init+0x317/0x3f0 __pci_enable_msix_range+0x21d/0x2c0 pci_alloc_irq_vectors_affinity+0xa9/0x130 nvme_setup_io_queues+0x2a8/0x420 [nvme] nvme_reset_work+0x151/0x340 [nvme] ... RDI=0 confirms iounmap() is called with NULL. Restore the original "goto out_disable" and leave the unmap to the existing __free(free_msi_irqs) cleanup.
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 4a7589b615a3db6792d36b874add86cd22188c95 , < 82e120a7dd566c476ba923d30e3fb78e8118a1dd (git)
Affected: 5f007c6acaa7d9a543b492c1e48c48a0ea1d7147 , < 6848ca381edff84f87dd1b6973848c271541e813 (git)
Affected: 76f7abd4ee0188f06465bdd3c053fdc5e8595152 , < 0a2aeb02894b839ecc3ece6dc7e5c3d6c3def16f (git)
Affected: aee8db5f048616990dbdefcc25689ade0a2620ec , < f79519f636059b007d6abc91652f36dea4f54a20 (git)
Affected: 1a8d4c6ecb4c81261bcdf13556abd4a958eca202 , < 3691a82be2095abaf3326a1cbf7b25858a1d959c (git)
Affected: 1a8d4c6ecb4c81261bcdf13556abd4a958eca202 , < f64e03da0d83cb173743888bff4a7e61476a8fc2 (git)
Affected: 19bf27b450fcd5309bacd614b12bd7de1ac6535b (git)
Affected: 6.1.165 , < 6.1.178 (semver)
Affected: 6.6.128 , < 6.6.145 (semver)
Affected: 6.12.75 , < 6.12.97 (semver)
Affected: 6.18.16 , < 6.18.40 (semver)
Affected: 6.19.6 , < 6.20 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 7.0
Unaffected: 0 , < 7.0 (semver)
Unaffected: 6.1.178 , ≤ 6.1.* (semver)
Unaffected: 6.6.145 , ≤ 6.6.* (semver)
Unaffected: 6.12.97 , ≤ 6.12.* (semver)
Unaffected: 6.18.40 , ≤ 6.18.* (semver)
Unaffected: 7.1.5 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/pci/msi/msi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "82e120a7dd566c476ba923d30e3fb78e8118a1dd",
              "status": "affected",
              "version": "4a7589b615a3db6792d36b874add86cd22188c95",
              "versionType": "git"
            },
            {
              "lessThan": "6848ca381edff84f87dd1b6973848c271541e813",
              "status": "affected",
              "version": "5f007c6acaa7d9a543b492c1e48c48a0ea1d7147",
              "versionType": "git"
            },
            {
              "lessThan": "0a2aeb02894b839ecc3ece6dc7e5c3d6c3def16f",
              "status": "affected",
              "version": "76f7abd4ee0188f06465bdd3c053fdc5e8595152",
              "versionType": "git"
            },
            {
              "lessThan": "f79519f636059b007d6abc91652f36dea4f54a20",
              "status": "affected",
              "version": "aee8db5f048616990dbdefcc25689ade0a2620ec",
              "versionType": "git"
            },
            {
              "lessThan": "3691a82be2095abaf3326a1cbf7b25858a1d959c",
              "status": "affected",
              "version": "1a8d4c6ecb4c81261bcdf13556abd4a958eca202",
              "versionType": "git"
            },
            {
              "lessThan": "f64e03da0d83cb173743888bff4a7e61476a8fc2",
              "status": "affected",
              "version": "1a8d4c6ecb4c81261bcdf13556abd4a958eca202",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "19bf27b450fcd5309bacd614b12bd7de1ac6535b",
              "versionType": "git"
            },
            {
              "lessThan": "6.1.178",
              "status": "affected",
              "version": "6.1.165",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.145",
              "status": "affected",
              "version": "6.6.128",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.97",
              "status": "affected",
              "version": "6.12.75",
              "versionType": "semver"
            },
            {
              "lessThan": "6.18.40",
              "status": "affected",
              "version": "6.18.16",
              "versionType": "semver"
            },
            {
              "lessThan": "6.20",
              "status": "affected",
              "version": "6.19.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/pci/msi/msi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "7.0"
            },
            {
              "lessThan": "7.0",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.178",
                  "versionStartIncluding": "6.1.165",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.145",
                  "versionStartIncluding": "6.6.128",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.97",
                  "versionStartIncluding": "6.12.75",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.40",
                  "versionStartIncluding": "6.18.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.5",
                  "versionStartIncluding": "7.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "7.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.19.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"PCI/MSI: Unmap MSI-X region on error\"\n\nThis reverts commit 1a8d4c6ecb4c81261bcdf13556abd4a958eca202.\n\nCommit 1a8d4c6ecb4c (\"PCI/MSI: Unmap MSI-X region on error\") added an\niounmap(dev-\u003emsix_base) on the error path of msix_capability_init() to\nrelease the MSI-X region when msix_setup_interrupts() fails.\n\nWhen msix_setup_interrupts() fails, the call chain is:\n\n  msix_setup_interrupts()\n    -\u003e __msix_setup_interrupts()\n         struct pci_dev *dev __free(free_msi_irqs) = __dev;\n         ...\n         return ret;  // __free cleanup fires on error\n\nThe __free(free_msi_irqs) cleanup calls pci_free_msi_irqs(), which\nalready handles the unmap:\n\n  void pci_free_msi_irqs(struct pci_dev *dev)\n  {\n      pci_msi_teardown_msi_irqs(dev);\n      if (dev-\u003emsix_base) {\n          iounmap(dev-\u003emsix_base);   // already unmapped here\n          dev-\u003emsix_base = NULL;     // and set to NULL\n      }\n  }\n\nSo dev-\u003emsix_base is unmapped and set to NULL before\nmsix_setup_interrupts() returns to msix_capability_init(). The\n\"goto out_unmap\" introduced by commit 1a8d4c6ecb4c (\"PCI/MSI: Unmap\nMSI-X region on error\") then calls iounmap() a second time on a NULL\npointer.\n\nThis was reproduced on Intel Emerald Rapids (192 CPUs) while\nrunning tools/testing/selftests/kexec/test_kexec_jump.sh:\n\n  WARNING: CPU#44 at iounmap+0x2a/0xe0\n  RIP: 0010:iounmap+0x2a/0xe0\n  RDI: 0000000000000000\n  Call Trace:\n   msix_capability_init+0x317/0x3f0\n   __pci_enable_msix_range+0x21d/0x2c0\n   pci_alloc_irq_vectors_affinity+0xa9/0x130\n   nvme_setup_io_queues+0x2a8/0x420 [nvme]\n   nvme_reset_work+0x151/0x340 [nvme]\n   ...\n\nRDI=0 confirms iounmap() is called with NULL.\n\nRestore the original \"goto out_disable\" and leave the unmap to the\nexisting __free(free_msi_irqs) cleanup."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-28T06:48:40.340Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/82e120a7dd566c476ba923d30e3fb78e8118a1dd"
        },
        {
          "url": "https://git.kernel.org/stable/c/6848ca381edff84f87dd1b6973848c271541e813"
        },
        {
          "url": "https://git.kernel.org/stable/c/0a2aeb02894b839ecc3ece6dc7e5c3d6c3def16f"
        },
        {
          "url": "https://git.kernel.org/stable/c/f79519f636059b007d6abc91652f36dea4f54a20"
        },
        {
          "url": "https://git.kernel.org/stable/c/3691a82be2095abaf3326a1cbf7b25858a1d959c"
        },
        {
          "url": "https://git.kernel.org/stable/c/f64e03da0d83cb173743888bff4a7e61476a8fc2"
        }
      ],
      "title": "Revert \"PCI/MSI: Unmap MSI-X region on error\"",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-80620",
    "datePublished": "2026-08-28T06:48:40.340Z",
    "dateReserved": "2026-08-26T14:34:25.774Z",
    "dateUpdated": "2026-08-28T06:48:40.340Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-80620",
      "date": "2026-09-17",
      "epss": "0.00172",
      "percentile": "0.0696"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-80620\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-08-28T08:16:46.083\",\"lastModified\":\"2026-08-28T08:16:46.083\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nRevert \\\"PCI/MSI: Unmap MSI-X region on error\\\"\\n\\nThis reverts commit 1a8d4c6ecb4c81261bcdf13556abd4a958eca202.\\n\\nCommit 1a8d4c6ecb4c (\\\"PCI/MSI: Unmap MSI-X region on error\\\") added an\\niounmap(dev-\u003emsix_base) on the error path of msix_capability_init() to\\nrelease the MSI-X region when msix_setup_interrupts() fails.\\n\\nWhen msix_setup_interrupts() fails, the call chain is:\\n\\n  msix_setup_interrupts()\\n    -\u003e __msix_setup_interrupts()\\n         struct pci_dev *dev __free(free_msi_irqs) = __dev;\\n         ...\\n         return ret;  // __free cleanup fires on error\\n\\nThe __free(free_msi_irqs) cleanup calls pci_free_msi_irqs(), which\\nalready handles the unmap:\\n\\n  void pci_free_msi_irqs(struct pci_dev *dev)\\n  {\\n      pci_msi_teardown_msi_irqs(dev);\\n      if (dev-\u003emsix_base) {\\n          iounmap(dev-\u003emsix_base);   // already unmapped here\\n          dev-\u003emsix_base = NULL;     // and set to NULL\\n      }\\n  }\\n\\nSo dev-\u003emsix_base is unmapped and set to NULL before\\nmsix_setup_interrupts() returns to msix_capability_init(). The\\n\\\"goto out_unmap\\\" introduced by commit 1a8d4c6ecb4c (\\\"PCI/MSI: Unmap\\nMSI-X region on error\\\") then calls iounmap() a second time on a NULL\\npointer.\\n\\nThis was reproduced on Intel Emerald Rapids (192 CPUs) while\\nrunning tools/testing/selftests/kexec/test_kexec_jump.sh:\\n\\n  WARNING: CPU#44 at iounmap+0x2a/0xe0\\n  RIP: 0010:iounmap+0x2a/0xe0\\n  RDI: 0000000000000000\\n  Call Trace:\\n   msix_capability_init+0x317/0x3f0\\n   __pci_enable_msix_range+0x21d/0x2c0\\n   pci_alloc_irq_vectors_affinity+0xa9/0x130\\n   nvme_setup_io_queues+0x2a8/0x420 [nvme]\\n   nvme_reset_work+0x151/0x340 [nvme]\\n   ...\\n\\nRDI=0 confirms iounmap() is called with NULL.\\n\\nRestore the original \\\"goto out_disable\\\" and leave the unmap to the\\nexisting __free(free_msi_irqs) cleanup.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/pci/msi/msi.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4a7589b615a3db6792d36b874add86cd22188c95\",\"lessThan\":\"82e120a7dd566c476ba923d30e3fb78e8118a1dd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5f007c6acaa7d9a543b492c1e48c48a0ea1d7147\",\"lessThan\":\"6848ca381edff84f87dd1b6973848c271541e813\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"76f7abd4ee0188f06465bdd3c053fdc5e8595152\",\"lessThan\":\"0a2aeb02894b839ecc3ece6dc7e5c3d6c3def16f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"aee8db5f048616990dbdefcc25689ade0a2620ec\",\"lessThan\":\"f79519f636059b007d6abc91652f36dea4f54a20\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1a8d4c6ecb4c81261bcdf13556abd4a958eca202\",\"lessThan\":\"3691a82be2095abaf3326a1cbf7b25858a1d959c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1a8d4c6ecb4c81261bcdf13556abd4a958eca202\",\"lessThan\":\"f64e03da0d83cb173743888bff4a7e61476a8fc2\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"19bf27b450fcd5309bacd614b12bd7de1ac6535b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6.1.165\",\"lessThan\":\"6.1.178\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.6.128\",\"lessThan\":\"6.6.145\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.12.75\",\"lessThan\":\"6.12.97\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.18.16\",\"lessThan\":\"6.18.40\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.19.6\",\"lessThan\":\"6.20\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/pci/msi/msi.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"7.0\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"7.0\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.178\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.145\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.97\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.40\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1.5\",\"lessThanOrEqual\":\"7.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0a2aeb02894b839ecc3ece6dc7e5c3d6c3def16f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/3691a82be2095abaf3326a1cbf7b25858a1d959c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/6848ca381edff84f87dd1b6973848c271541e813\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/82e120a7dd566c476ba923d30e3fb78e8118a1dd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f64e03da0d83cb173743888bff4a7e61476a8fc2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f79519f636059b007d6abc91652f36dea4f54a20\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-31T11:14:58+00:00",
      "cve": "CVE-2026-80620",
      "id": "CVE-2026-80620",
      "initial_release_date": "2026-08-28T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Revert \"PCI/MSI: Unmap MSI-X region on error\"",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80620.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-15T01:10:41Z",
      "cve": "CVE-2026-80620",
      "id": "CVE-2026-80620",
      "initial_release_date": "2026-08-28T16:36:09Z",
      "product_status:known_affected": "84",
      "product_status:known_not_affected": "269",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-80620",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-80620.json",
      "version": "7"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.