CVE-2026-68125 (GCVE-0-2026-68125)

Vulnerability from cvelistv5 – Published: 2026-08-10 11:58 – Updated: 2026-08-19 16:29
VLAI
Title
mac802154: llsec: reject frames shorter than the authentication tag
Summary
In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: reject frames shorter than the authentication tag llsec_do_decrypt_auth() computes the associated-data length for the AEAD request as assoclen += datalen - authlen; where datalen is the number of bytes after the MAC header and authlen (4, 8 or 16) is the length of the authentication tag. Nothing verifies that the frame actually carries at least authlen payload bytes. A secured frame whose payload is shorter than the tag makes datalen - authlen negative; assoclen is then passed to aead_request_set_ad() as an unsigned value close to 4 GiB, so crypto_aead_decrypt() walks far off the end of the scatterlist that only spans the real frame. The frame is fully attacker-controlled and reaches this path from any IEEE 802.15.4 peer in radio range. Reject frames whose payload is shorter than the authentication tag before the subtraction. Dynamically reproduced on a KASAN kernel as a general-protection-fault in the AEAD scatterwalk, and the fix confirmed.
Severity
8.8 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 4c14a2fb5d143e4ed94143be2b8c1961b47df9af , < f27ce82eb04960465df71634b196a48a4ecafd50 (git)
Affected: 4c14a2fb5d143e4ed94143be2b8c1961b47df9af , < 2d6b42a61373144298070668fddf06efe79cf2ff (git)
Affected: 4c14a2fb5d143e4ed94143be2b8c1961b47df9af , < ec7e62d77193131227df49d654d118fdf5a59892 (git)
Affected: 4c14a2fb5d143e4ed94143be2b8c1961b47df9af , < 5bbf0cd9b6a7076af86c75e87e180099be2e11ae (git)
Affected: 4c14a2fb5d143e4ed94143be2b8c1961b47df9af , < de80808f37d99c6dc67bb6f97eea00c8f57a8821 (git)
Affected: 4c14a2fb5d143e4ed94143be2b8c1961b47df9af , < f20dedce0429b293d4bad604e0d3f65d8ac96c83 (git)
Affected: 4c14a2fb5d143e4ed94143be2b8c1961b47df9af , < e09e0301d616c1ef38a5e64e8e4326fd39df13cc (git)
Affected: 4c14a2fb5d143e4ed94143be2b8c1961b47df9af , < fd3a3f28ed60c6af4b2a39933b151d6b27842c3b (git)
guessed Create a notification for this product.
Linux Linux Affected: 3.16
Unaffected: 0 , < 3.16 (semver)
Unaffected: 5.10.265 , ≤ 5.10.* (semver)
Unaffected: 5.15.216 , ≤ 5.15.* (semver)
Unaffected: 6.1.183 , ≤ 6.1.* (semver)
Unaffected: 6.6.148 , ≤ 6.6.* (semver)
Unaffected: 6.12.101 , ≤ 6.12.* (semver)
Unaffected: 6.18.42 , ≤ 6.18.* (semver)
Unaffected: 7.1.6 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/mac802154/llsec.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f27ce82eb04960465df71634b196a48a4ecafd50",
              "status": "affected",
              "version": "4c14a2fb5d143e4ed94143be2b8c1961b47df9af",
              "versionType": "git"
            },
            {
              "lessThan": "2d6b42a61373144298070668fddf06efe79cf2ff",
              "status": "affected",
              "version": "4c14a2fb5d143e4ed94143be2b8c1961b47df9af",
              "versionType": "git"
            },
            {
              "lessThan": "ec7e62d77193131227df49d654d118fdf5a59892",
              "status": "affected",
              "version": "4c14a2fb5d143e4ed94143be2b8c1961b47df9af",
              "versionType": "git"
            },
            {
              "lessThan": "5bbf0cd9b6a7076af86c75e87e180099be2e11ae",
              "status": "affected",
              "version": "4c14a2fb5d143e4ed94143be2b8c1961b47df9af",
              "versionType": "git"
            },
            {
              "lessThan": "de80808f37d99c6dc67bb6f97eea00c8f57a8821",
              "status": "affected",
              "version": "4c14a2fb5d143e4ed94143be2b8c1961b47df9af",
              "versionType": "git"
            },
            {
              "lessThan": "f20dedce0429b293d4bad604e0d3f65d8ac96c83",
              "status": "affected",
              "version": "4c14a2fb5d143e4ed94143be2b8c1961b47df9af",
              "versionType": "git"
            },
            {
              "lessThan": "e09e0301d616c1ef38a5e64e8e4326fd39df13cc",
              "status": "affected",
              "version": "4c14a2fb5d143e4ed94143be2b8c1961b47df9af",
              "versionType": "git"
            },
            {
              "lessThan": "fd3a3f28ed60c6af4b2a39933b151d6b27842c3b",
              "status": "affected",
              "version": "4c14a2fb5d143e4ed94143be2b8c1961b47df9af",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/mac802154/llsec.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.16"
            },
            {
              "lessThan": "3.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.265",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.216",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.183",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.148",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.101",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.42",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.265",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.216",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.183",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.148",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.101",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.42",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.6",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmac802154: llsec: reject frames shorter than the authentication tag\n\nllsec_do_decrypt_auth() computes the associated-data length for the\nAEAD request as\n\n\tassoclen += datalen - authlen;\n\nwhere datalen is the number of bytes after the MAC header and authlen\n(4, 8 or 16) is the length of the authentication tag. Nothing verifies\nthat the frame actually carries at least authlen payload bytes. A\nsecured frame whose payload is shorter than the tag makes\ndatalen - authlen negative; assoclen is then passed to\naead_request_set_ad() as an unsigned value close to 4 GiB, so\ncrypto_aead_decrypt() walks far off the end of the scatterlist that\nonly spans the real frame.\n\nThe frame is fully attacker-controlled and reaches this path from any\nIEEE 802.15.4 peer in radio range. Reject frames whose payload is\nshorter than the authentication tag before the subtraction.\n\nDynamically reproduced on a KASAN kernel as a general-protection-fault\nin the AEAD scatterwalk, and the fix confirmed."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:A - Exploitation requires sending crafted IEEE 802.15.4 frames over the WPAN radio interface; any peer within RF range can reach mac802154 receive/decrypt without IP routing or local shell access, matching Adjacent wireless attack guidance like Bluetooth.\nAC:L - The attacker fully controls frame length and security header fields; once LLSEC is enabled on the victim, a single undersized MIC-only secured frame reliably triggers the assoclen underflow and was dynamically reproduced as a KASAN GPF.\nPR:N - No Linux credentials or capabilities are required on the target; exploitation is performed by an over-the-air 802.15.4 peer spoofing a known PAN device/key/frame counter, not via local syscalls, ioctl, or netlink.\nUI:N - No victim user action is needed beyond normal operation of an LLSEC-enabled 802.15.4 interface; the malicious frame is processed automatically in the softirq receive path before delivery to userspace.\nS:U - Impact is confined to kernel memory and availability on the attacked host\u0027s WPAN stack; it does not cross a VM, container, or IOMMU security boundary into a separate authority.\nC:H - The wrapped assoclen makes crypto_aead_decrypt() scatterwalk read gigabytes beyond the skb-backed scatterlist, causing out-of-bounds kernel memory reads that can disclose adjacent heap or slab data and enable further exploitation primitives.\nI:H - Kernel memory corruption in the AEAD decrypt scatterwalk path can be leveraged for control-flow hijack or arbitrary write primitives beyond the demonstrated crash, consistent with high integrity impact for exploitable OOB access in crypto handlers.\nA:H - The bug was reproduced on a KASAN kernel as a general-protection fault in the AEAD scatterwalk, and repeated malicious frames can panic or hang the kernel on LLSEC-enabled coordinators, gateways, and IoT border routers."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-19T16:29:39.507Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f27ce82eb04960465df71634b196a48a4ecafd50"
        },
        {
          "url": "https://git.kernel.org/stable/c/2d6b42a61373144298070668fddf06efe79cf2ff"
        },
        {
          "url": "https://git.kernel.org/stable/c/ec7e62d77193131227df49d654d118fdf5a59892"
        },
        {
          "url": "https://git.kernel.org/stable/c/5bbf0cd9b6a7076af86c75e87e180099be2e11ae"
        },
        {
          "url": "https://git.kernel.org/stable/c/de80808f37d99c6dc67bb6f97eea00c8f57a8821"
        },
        {
          "url": "https://git.kernel.org/stable/c/f20dedce0429b293d4bad604e0d3f65d8ac96c83"
        },
        {
          "url": "https://git.kernel.org/stable/c/e09e0301d616c1ef38a5e64e8e4326fd39df13cc"
        },
        {
          "url": "https://git.kernel.org/stable/c/fd3a3f28ed60c6af4b2a39933b151d6b27842c3b"
        }
      ],
      "title": "mac802154: llsec: reject frames shorter than the authentication tag",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-68125",
    "datePublished": "2026-08-10T11:58:46.198Z",
    "dateReserved": "2026-07-30T09:28:09.369Z",
    "dateUpdated": "2026-08-19T16:29:39.507Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-68125",
      "date": "2026-09-21",
      "epss": "0.00316",
      "percentile": "0.24705"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "net/mac802154/llsec.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "f27ce82eb04960465df71634b196a48a4ecafd50",
                    "status": "affected",
                    "version": "4c14a2fb5d143e4ed94143be2b8c1961b47df9af",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "2d6b42a61373144298070668fddf06efe79cf2ff",
                    "status": "affected",
                    "version": "4c14a2fb5d143e4ed94143be2b8c1961b47df9af",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "ec7e62d77193131227df49d654d118fdf5a59892",
                    "status": "affected",
                    "version": "4c14a2fb5d143e4ed94143be2b8c1961b47df9af",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "5bbf0cd9b6a7076af86c75e87e180099be2e11ae",
                    "status": "affected",
                    "version": "4c14a2fb5d143e4ed94143be2b8c1961b47df9af",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "de80808f37d99c6dc67bb6f97eea00c8f57a8821",
                    "status": "affected",
                    "version": "4c14a2fb5d143e4ed94143be2b8c1961b47df9af",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "f20dedce0429b293d4bad604e0d3f65d8ac96c83",
                    "status": "affected",
                    "version": "4c14a2fb5d143e4ed94143be2b8c1961b47df9af",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e09e0301d616c1ef38a5e64e8e4326fd39df13cc",
                    "status": "affected",
                    "version": "4c14a2fb5d143e4ed94143be2b8c1961b47df9af",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "fd3a3f28ed60c6af4b2a39933b151d6b27842c3b",
                    "status": "affected",
                    "version": "4c14a2fb5d143e4ed94143be2b8c1961b47df9af",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "net/mac802154/llsec.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "3.16"
                  },
                  {
                    "lessThan": "3.16",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.265",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.216",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.183",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.148",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.101",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.42",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.1.*",
                    "status": "unaffected",
                    "version": "7.1.6",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.2",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmac802154: llsec: reject frames shorter than the authentication tag\n\nllsec_do_decrypt_auth() computes the associated-data length for the\nAEAD request as\n\n\tassoclen += datalen - authlen;\n\nwhere datalen is the number of bytes after the MAC header and authlen\n(4, 8 or 16) is the length of the authentication tag. Nothing verifies\nthat the frame actually carries at least authlen payload bytes. A\nsecured frame whose payload is shorter than the tag makes\ndatalen - authlen negative; assoclen is then passed to\naead_request_set_ad() as an unsigned value close to 4 GiB, so\ncrypto_aead_decrypt() walks far off the end of the scatterlist that\nonly spans the real frame.\n\nThe frame is fully attacker-controlled and reaches this path from any\nIEEE 802.15.4 peer in radio range. Reject frames whose payload is\nshorter than the authentication tag before the subtraction.\n\nDynamically reproduced on a KASAN kernel as a general-protection-fault\nin the AEAD scatterwalk, and the fix confirmed."
          }
        ],
        "id": "CVE-2026-68125",
        "lastModified": "2026-08-19T17:20:30.007",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-08-10T13:19:57.690",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/2d6b42a61373144298070668fddf06efe79cf2ff"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/5bbf0cd9b6a7076af86c75e87e180099be2e11ae"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/de80808f37d99c6dc67bb6f97eea00c8f57a8821"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/e09e0301d616c1ef38a5e64e8e4326fd39df13cc"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/ec7e62d77193131227df49d654d118fdf5a59892"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/f20dedce0429b293d4bad604e0d3f65d8ac96c83"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/f27ce82eb04960465df71634b196a48a4ecafd50"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/fd3a3f28ed60c6af4b2a39933b151d6b27842c3b"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-31T11:16:36+00:00",
      "cve": "CVE-2026-68125",
      "id": "CVE-2026-68125",
      "initial_release_date": "2026-08-10T00:00:00+00:00",
      "product_status:known_affected": "233",
      "product_status:known_not_affected": "44",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: mac802154: llsec: reject frames shorter than the authentication tag",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68125.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-18T00:35:39Z",
      "cve": "CVE-2026-68125",
      "id": "CVE-2026-68125",
      "initial_release_date": "2026-08-17T16:29:58Z",
      "product_status:known_affected": "671",
      "product_status:known_not_affected": "77",
      "product_status:recommended": "107",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-68125",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-68125.json",
      "version": "8"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.