CVE-2026-72005 (GCVE-0-2026-72005)

Vulnerability from cvelistv5 – Published: 2026-08-15 05:51 – Updated: 2026-08-17 05:39
VLAI
Title
wifi: rt2x00: avoid full teardown before work setup in probe
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00lib_probe_dev() uses the full rt2x00lib_remove_dev() teardown for all probe failures. However, drv_data allocation and workqueue allocation can fail before intf_work, autowakeup_work and sleep_work have been initialized. Do not enter the full remove path until the probe has reached the point where those work items are set up. Return directly for drv_data allocation failure, and use a small early cleanup path for workqueue allocation failure. This issue was found by our static analysis tool and then confirmed by manual review of rt2x00lib_probe_dev() and rt2x00lib_remove_dev(). The early probe exits should not call a common teardown path that assumes the later work setup has already completed. A QEMU PoC forced alloc_ordered_workqueue() to fail before the work initializers are reached. The resulting fail path entered rt2x00lib_remove_dev(), and DEBUG_OBJECTS reported invalid work drains with rt2x00lib_probe_dev() and rt2x00lib_remove_dev() in the stack.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2 , < 8b58d1f1356df6a7d2de3f55bb665b18b04ffda0 (git)
Affected: 0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2 , < 59afe6148927395cf86f9429900e029a48b1d42b (git)
Affected: 0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2 , < 3c0427d719bddb33caf18ff4ffb77cb47de7eb00 (git)
Affected: 0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2 , < eb7474d0253bb2de4793e1d3ce833e8564bbe732 (git)
Affected: 0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2 , < 66bd9b1a72de7c2f5141b02d796048aafaed8a49 (git)
Affected: 0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2 , < 816559409e340acaa5c9d868291dab30d8c80263 (git)
Affected: 0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2 , < 56994852d704535ea354a4627ca667b1b4fa0deb (git)
Affected: 0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2 , < 536fb3d739d75a03cb318c0c6fe799425cfea501 (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.39
Unaffected: 0 , < 2.6.39 (semver)
Unaffected: 5.10.261 , ≤ 5.10.* (semver)
Unaffected: 5.15.212 , ≤ 5.15.* (semver)
Unaffected: 6.1.178 , ≤ 6.1.* (semver)
Unaffected: 6.6.145 , ≤ 6.6.* (semver)
Unaffected: 6.12.97 , ≤ 6.12.* (semver)
Unaffected: 6.18.40 , ≤ 6.18.* (semver)
Unaffected: 7.1.5 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/ralink/rt2x00/rt2x00dev.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "8b58d1f1356df6a7d2de3f55bb665b18b04ffda0",
              "status": "affected",
              "version": "0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2",
              "versionType": "git"
            },
            {
              "lessThan": "59afe6148927395cf86f9429900e029a48b1d42b",
              "status": "affected",
              "version": "0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2",
              "versionType": "git"
            },
            {
              "lessThan": "3c0427d719bddb33caf18ff4ffb77cb47de7eb00",
              "status": "affected",
              "version": "0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2",
              "versionType": "git"
            },
            {
              "lessThan": "eb7474d0253bb2de4793e1d3ce833e8564bbe732",
              "status": "affected",
              "version": "0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2",
              "versionType": "git"
            },
            {
              "lessThan": "66bd9b1a72de7c2f5141b02d796048aafaed8a49",
              "status": "affected",
              "version": "0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2",
              "versionType": "git"
            },
            {
              "lessThan": "816559409e340acaa5c9d868291dab30d8c80263",
              "status": "affected",
              "version": "0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2",
              "versionType": "git"
            },
            {
              "lessThan": "56994852d704535ea354a4627ca667b1b4fa0deb",
              "status": "affected",
              "version": "0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2",
              "versionType": "git"
            },
            {
              "lessThan": "536fb3d739d75a03cb318c0c6fe799425cfea501",
              "status": "affected",
              "version": "0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/ralink/rt2x00/rt2x00dev.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.39"
            },
            {
              "lessThan": "2.6.39",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.261",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.212",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.261",
                  "versionStartIncluding": "2.6.39",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.212",
                  "versionStartIncluding": "2.6.39",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.178",
                  "versionStartIncluding": "2.6.39",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.145",
                  "versionStartIncluding": "2.6.39",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.97",
                  "versionStartIncluding": "2.6.39",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.40",
                  "versionStartIncluding": "2.6.39",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.5",
                  "versionStartIncluding": "2.6.39",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "2.6.39",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rt2x00: avoid full teardown before work setup in probe\n\nrt2x00lib_probe_dev() uses the full rt2x00lib_remove_dev() teardown for\nall probe failures. However, drv_data allocation and workqueue allocation\ncan fail before intf_work, autowakeup_work and sleep_work have been\ninitialized.\n\nDo not enter the full remove path until the probe has reached the point\nwhere those work items are set up. Return directly for drv_data allocation\nfailure, and use a small early cleanup path for workqueue allocation\nfailure.\n\nThis issue was found by our static analysis tool and then confirmed by\nmanual review of rt2x00lib_probe_dev() and rt2x00lib_remove_dev(). The\nearly probe exits should not call a common teardown path that assumes the\nlater work setup has already completed.\n\nA QEMU PoC forced alloc_ordered_workqueue() to fail before the work\ninitializers are reached. The resulting fail path entered\nrt2x00lib_remove_dev(), and DEBUG_OBJECTS reported invalid work drains with\nrt2x00lib_probe_dev() and rt2x00lib_remove_dev() in the stack."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The flaw is in rt2x00 driver probe (rt2x00usb_probe/rt2x00pci_probe/rt2800soc_probe), triggered during device initialization on boot or hotplug, not by remote WiFi frames; worst case is built-in SoC/PCI WiFi on internet-facing routers/APs under local memory pressure.\nAC:L - An attacker can reliably force kzalloc or alloc_ordered_workqueue() to fail with a memory exhaustion attack and retry on reboot or USB reinsertion; success does not depend on uncontrollable layout or victim-only timing beyond attacker-driven ENOMEM.\nPR:L - Triggering probe-time ENOMEM requires only an unprivileged local process to exhaust memory during driver initialization; no CAP_NET_ADMIN, real root, or user-namespace capability is needed to reach the vulnerable teardown path.\nUI:N - Exploitation does not require a victim to click, mount, or configure anything; probe runs automatically at boot or on device hotplug while the attacker maintains memory pressure.\nS:U - Impact is confined to kernel/driver state on the host being probed; it is not a VM escape, sandbox breakout, or cross-authority boundary crossing beyond standard local kernel compromise.\nC:H - rt2x00lib_remove_dev() calls cancel_work_sync/cancel_delayed_work_sync and hrtimer_cancel on objects never initialized by INIT_WORK/hrtimer_setup, corrupting workqueue/timer metadata and creating undefined behavior that can expose kernel memory.\nI:H - Invalid cancel/flush/drain of uninitialized work items and tasklet_kill on uninitialized tasklets can corrupt adjacent kernel heap objects and workqueue state, plausibly yielding write primitives beyond a simple denial of service.\nA:H - A QEMU PoC forcing alloc_ordered_workqueue() failure hit DEBUG_OBJECTS invalid work drains in rt2x00lib_remove_dev(); this teardown path can WARN/OOPS/panic the kernel during probe failure cleanup."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T05:39:22.758Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/8b58d1f1356df6a7d2de3f55bb665b18b04ffda0"
        },
        {
          "url": "https://git.kernel.org/stable/c/59afe6148927395cf86f9429900e029a48b1d42b"
        },
        {
          "url": "https://git.kernel.org/stable/c/3c0427d719bddb33caf18ff4ffb77cb47de7eb00"
        },
        {
          "url": "https://git.kernel.org/stable/c/eb7474d0253bb2de4793e1d3ce833e8564bbe732"
        },
        {
          "url": "https://git.kernel.org/stable/c/66bd9b1a72de7c2f5141b02d796048aafaed8a49"
        },
        {
          "url": "https://git.kernel.org/stable/c/816559409e340acaa5c9d868291dab30d8c80263"
        },
        {
          "url": "https://git.kernel.org/stable/c/56994852d704535ea354a4627ca667b1b4fa0deb"
        },
        {
          "url": "https://git.kernel.org/stable/c/536fb3d739d75a03cb318c0c6fe799425cfea501"
        }
      ],
      "title": "wifi: rt2x00: avoid full teardown before work setup in probe",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-72005",
    "datePublished": "2026-08-15T05:51:36.005Z",
    "dateReserved": "2026-08-09T03:40:39.898Z",
    "dateUpdated": "2026-08-17T05:39:22.758Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-72005",
      "date": "2026-09-22",
      "epss": "0.00164",
      "percentile": "0.06028"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/net/wireless/ralink/rt2x00/rt2x00dev.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "8b58d1f1356df6a7d2de3f55bb665b18b04ffda0",
                    "status": "affected",
                    "version": "0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "59afe6148927395cf86f9429900e029a48b1d42b",
                    "status": "affected",
                    "version": "0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "3c0427d719bddb33caf18ff4ffb77cb47de7eb00",
                    "status": "affected",
                    "version": "0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "eb7474d0253bb2de4793e1d3ce833e8564bbe732",
                    "status": "affected",
                    "version": "0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "66bd9b1a72de7c2f5141b02d796048aafaed8a49",
                    "status": "affected",
                    "version": "0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "816559409e340acaa5c9d868291dab30d8c80263",
                    "status": "affected",
                    "version": "0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "56994852d704535ea354a4627ca667b1b4fa0deb",
                    "status": "affected",
                    "version": "0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "536fb3d739d75a03cb318c0c6fe799425cfea501",
                    "status": "affected",
                    "version": "0439f5367c8d8bb2ebaca8d7329f51f3148b2fb2",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/net/wireless/ralink/rt2x00/rt2x00dev.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "2.6.39"
                  },
                  {
                    "lessThan": "2.6.39",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.261",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.212",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.178",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.145",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.97",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.40",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.1.*",
                    "status": "unaffected",
                    "version": "7.1.5",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.2",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rt2x00: avoid full teardown before work setup in probe\n\nrt2x00lib_probe_dev() uses the full rt2x00lib_remove_dev() teardown for\nall probe failures. However, drv_data allocation and workqueue allocation\ncan fail before intf_work, autowakeup_work and sleep_work have been\ninitialized.\n\nDo not enter the full remove path until the probe has reached the point\nwhere those work items are set up. Return directly for drv_data allocation\nfailure, and use a small early cleanup path for workqueue allocation\nfailure.\n\nThis issue was found by our static analysis tool and then confirmed by\nmanual review of rt2x00lib_probe_dev() and rt2x00lib_remove_dev(). The\nearly probe exits should not call a common teardown path that assumes the\nlater work setup has already completed.\n\nA QEMU PoC forced alloc_ordered_workqueue() to fail before the work\ninitializers are reached. The resulting fail path entered\nrt2x00lib_remove_dev(), and DEBUG_OBJECTS reported invalid work drains with\nrt2x00lib_probe_dev() and rt2x00lib_remove_dev() in the stack."
          }
        ],
        "id": "CVE-2026-72005",
        "lastModified": "2026-08-17T06:17:57.943",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-08-15T06:20:59.113",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/3c0427d719bddb33caf18ff4ffb77cb47de7eb00"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/536fb3d739d75a03cb318c0c6fe799425cfea501"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/56994852d704535ea354a4627ca667b1b4fa0deb"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/59afe6148927395cf86f9429900e029a48b1d42b"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/66bd9b1a72de7c2f5141b02d796048aafaed8a49"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/816559409e340acaa5c9d868291dab30d8c80263"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/8b58d1f1356df6a7d2de3f55bb665b18b04ffda0"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/eb7474d0253bb2de4793e1d3ce833e8564bbe732"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-08-19T05:26:37+00:00",
      "cve": "CVE-2026-72005",
      "id": "CVE-2026-72005",
      "initial_release_date": "2026-08-15T00:00:00+00:00",
      "product_status:known_affected": "260",
      "product_status:known_not_affected": "14",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: wifi: rt2x00: avoid full teardown before work setup in probe",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-72005.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-10T02:11:41Z",
      "cve": "CVE-2026-72005",
      "id": "CVE-2026-72005",
      "initial_release_date": "2026-08-26T01:14:48Z",
      "product_status:known_affected": "263",
      "product_status:known_not_affected": "99",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-72005",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-72005.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.