CVE-2026-72052 (GCVE-0-2026-72052)

Vulnerability from cvelistv5 – Published: 2026-08-15 05:52 – Updated: 2026-08-17 05:39
VLAI
Title
net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink
Summary
In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink ip6gre_changelink() and ip6erspan_changelink() operate on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net. Gate both ops on rtnl_dev_link_net_capable() at their top, before any attribute is parsed.
Severity
8.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 690afc165bb314354667f67157c1a1aea7dc797a , < 129f8939e5af683cec3a1a5edcb40a64636ad81e (git)
Affected: 690afc165bb314354667f67157c1a1aea7dc797a , < e3724dedf57761c6de52f4d604ec74f66fd61611 (git)
Affected: 690afc165bb314354667f67157c1a1aea7dc797a , < 220162c9fedbe992da70d70f50a10da4f45f914c (git)
Affected: 690afc165bb314354667f67157c1a1aea7dc797a , < 1d4d8ee002083ca4ead5353662bf8362428af57f (git)
Affected: 690afc165bb314354667f67157c1a1aea7dc797a , < 0caa9f348f8b5356900de77b0bb89a697c4aff20 (git)
Affected: 690afc165bb314354667f67157c1a1aea7dc797a , < 03d8843b143ebbbfaf48511922abc6e886575a61 (git)
Affected: 690afc165bb314354667f67157c1a1aea7dc797a , < c38c8b0db3c65b597e7ece317b6cb59de3d15e69 (git)
Affected: 690afc165bb314354667f67157c1a1aea7dc797a , < f00a50876d2818bd6dc86fa98b3ef360884c53c8 (git)
Affected: d0201d2405dac8d9b16773e97709925e397552d0 (git)
Affected: 7943bb0f06365cf5e32f3cf8a6b29eeae981fb8a (git)
Affected: 4.19.100 , < 4.20 (semver)
Affected: 5.4.16 , < 5.5 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 5.5
Unaffected: 0 , < 5.5 (semver)
Unaffected: 5.10.261 , ≤ 5.10.* (semver)
Unaffected: 5.15.212 , ≤ 5.15.* (semver)
Unaffected: 6.1.178 , ≤ 6.1.* (semver)
Unaffected: 6.6.145 , ≤ 6.6.* (semver)
Unaffected: 6.12.97 , ≤ 6.12.* (semver)
Unaffected: 6.18.40 , ≤ 6.18.* (semver)
Unaffected: 7.1.5 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/ip6_gre.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "129f8939e5af683cec3a1a5edcb40a64636ad81e",
              "status": "affected",
              "version": "690afc165bb314354667f67157c1a1aea7dc797a",
              "versionType": "git"
            },
            {
              "lessThan": "e3724dedf57761c6de52f4d604ec74f66fd61611",
              "status": "affected",
              "version": "690afc165bb314354667f67157c1a1aea7dc797a",
              "versionType": "git"
            },
            {
              "lessThan": "220162c9fedbe992da70d70f50a10da4f45f914c",
              "status": "affected",
              "version": "690afc165bb314354667f67157c1a1aea7dc797a",
              "versionType": "git"
            },
            {
              "lessThan": "1d4d8ee002083ca4ead5353662bf8362428af57f",
              "status": "affected",
              "version": "690afc165bb314354667f67157c1a1aea7dc797a",
              "versionType": "git"
            },
            {
              "lessThan": "0caa9f348f8b5356900de77b0bb89a697c4aff20",
              "status": "affected",
              "version": "690afc165bb314354667f67157c1a1aea7dc797a",
              "versionType": "git"
            },
            {
              "lessThan": "03d8843b143ebbbfaf48511922abc6e886575a61",
              "status": "affected",
              "version": "690afc165bb314354667f67157c1a1aea7dc797a",
              "versionType": "git"
            },
            {
              "lessThan": "c38c8b0db3c65b597e7ece317b6cb59de3d15e69",
              "status": "affected",
              "version": "690afc165bb314354667f67157c1a1aea7dc797a",
              "versionType": "git"
            },
            {
              "lessThan": "f00a50876d2818bd6dc86fa98b3ef360884c53c8",
              "status": "affected",
              "version": "690afc165bb314354667f67157c1a1aea7dc797a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "d0201d2405dac8d9b16773e97709925e397552d0",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7943bb0f06365cf5e32f3cf8a6b29eeae981fb8a",
              "versionType": "git"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.100",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.16",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/ip6_gre.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.5"
            },
            {
              "lessThan": "5.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.261",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.212",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.261",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.212",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.178",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.145",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.97",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.40",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.5",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.100",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink\n\nip6gre_changelink() and ip6erspan_changelink() operate on at most two\nnetns, dev_net(dev) and the tunnel link netns t-\u003enet. They differ once\nthe device is created in or moved to a netns other than the one the\nrequest runs in. The rtnl changelink path checks CAP_NET_ADMIN only\nagainst dev_net(dev), so a caller privileged there but not in t-\u003enet can\nrewrite a tunnel that lives in t-\u003enet.\n\nGate both ops on rtnl_dev_link_net_capable() at their top, before any\nattribute is parsed."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is reached only via rtnetlink (RTM_NEWLINK changelink) on a local NETLINK_ROUTE socket, not by processing attacker-controlled network packets; kernel guidance classifies rtnetlink control-plane bugs as Local.\nAC:L - With CAP_NET_ADMIN in dev_net(dev) (e.g. via user namespaces), an attacker can move a cross-netns ip6gre device or use an existing one, then issue a single deterministic changelink; no uncontrollable races or rare kernel configs are required.\nPR:L - Exploitation requires CAP_NET_ADMIN in dev_net(dev) to issue RTM_NEWLINK changelink; this capability is available to unprivileged users creating user+network namespaces (unshare -Urn), not only real init-namespace root.\nUI:N - No victim interaction is needed once the attacker has a suitable ip6gre/ip6gretap/ip6erspan netdev handle and issues rtnetlink changelink requests to rewrite tunnel parameters.\nS:C - The flaw crosses the network-namespace security boundary: a caller authorized only in dev_net(dev) can modify ip6gre state and routing tables in t-\u003enet (another tenant/host namespace), violating netns isolation relied on by containers and Kubernetes.\nC:H - changelink can point tunnels/ERSPAN mirroring at attacker-chosen IPv6 endpoints and keys, enabling interception and collection of traffic that other namespaces expect to be privately encapsulated or mirrored only to trusted collectors.\nI:H - The attacker can arbitrarily rewrite tunnel link parameters (local/remote addresses, keys, encap, fwmark, ERSPAN index) and rehash tunnel state in the victim link netns, redirecting or corrupting network paths outside their authorization.\nA:H - Rewriting or unlinking tunnel entries can immediately break GRE/ERSPAN connectivity depended on for production links, causing sustained network outage or repeated loss of availability without kernel interaction from the victim."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T05:39:48.851Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/129f8939e5af683cec3a1a5edcb40a64636ad81e"
        },
        {
          "url": "https://git.kernel.org/stable/c/e3724dedf57761c6de52f4d604ec74f66fd61611"
        },
        {
          "url": "https://git.kernel.org/stable/c/220162c9fedbe992da70d70f50a10da4f45f914c"
        },
        {
          "url": "https://git.kernel.org/stable/c/1d4d8ee002083ca4ead5353662bf8362428af57f"
        },
        {
          "url": "https://git.kernel.org/stable/c/0caa9f348f8b5356900de77b0bb89a697c4aff20"
        },
        {
          "url": "https://git.kernel.org/stable/c/03d8843b143ebbbfaf48511922abc6e886575a61"
        },
        {
          "url": "https://git.kernel.org/stable/c/c38c8b0db3c65b597e7ece317b6cb59de3d15e69"
        },
        {
          "url": "https://git.kernel.org/stable/c/f00a50876d2818bd6dc86fa98b3ef360884c53c8"
        }
      ],
      "title": "net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-72052",
    "datePublished": "2026-08-15T05:52:09.194Z",
    "dateReserved": "2026-08-09T03:40:39.902Z",
    "dateUpdated": "2026-08-17T05:39:48.851Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-72052",
      "date": "2026-09-22",
      "epss": "0.00169",
      "percentile": "0.06598"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "net/ipv6/ip6_gre.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "129f8939e5af683cec3a1a5edcb40a64636ad81e",
                    "status": "affected",
                    "version": "690afc165bb314354667f67157c1a1aea7dc797a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e3724dedf57761c6de52f4d604ec74f66fd61611",
                    "status": "affected",
                    "version": "690afc165bb314354667f67157c1a1aea7dc797a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "220162c9fedbe992da70d70f50a10da4f45f914c",
                    "status": "affected",
                    "version": "690afc165bb314354667f67157c1a1aea7dc797a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "1d4d8ee002083ca4ead5353662bf8362428af57f",
                    "status": "affected",
                    "version": "690afc165bb314354667f67157c1a1aea7dc797a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "0caa9f348f8b5356900de77b0bb89a697c4aff20",
                    "status": "affected",
                    "version": "690afc165bb314354667f67157c1a1aea7dc797a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "03d8843b143ebbbfaf48511922abc6e886575a61",
                    "status": "affected",
                    "version": "690afc165bb314354667f67157c1a1aea7dc797a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "c38c8b0db3c65b597e7ece317b6cb59de3d15e69",
                    "status": "affected",
                    "version": "690afc165bb314354667f67157c1a1aea7dc797a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "f00a50876d2818bd6dc86fa98b3ef360884c53c8",
                    "status": "affected",
                    "version": "690afc165bb314354667f67157c1a1aea7dc797a",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "d0201d2405dac8d9b16773e97709925e397552d0",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "7943bb0f06365cf5e32f3cf8a6b29eeae981fb8a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "4.20",
                    "status": "affected",
                    "version": "4.19.100",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.5",
                    "status": "affected",
                    "version": "5.4.16",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "net/ipv6/ip6_gre.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "5.5"
                  },
                  {
                    "lessThan": "5.5",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.261",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.212",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.178",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.145",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.97",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.40",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.1.*",
                    "status": "unaffected",
                    "version": "7.1.5",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.2",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink\n\nip6gre_changelink() and ip6erspan_changelink() operate on at most two\nnetns, dev_net(dev) and the tunnel link netns t-\u003enet. They differ once\nthe device is created in or moved to a netns other than the one the\nrequest runs in. The rtnl changelink path checks CAP_NET_ADMIN only\nagainst dev_net(dev), so a caller privileged there but not in t-\u003enet can\nrewrite a tunnel that lives in t-\u003enet.\n\nGate both ops on rtnl_dev_link_net_capable() at their top, before any\nattribute is parsed."
          }
        ],
        "id": "CVE-2026-72052",
        "lastModified": "2026-08-17T06:18:03.330",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.0,
              "impactScore": 6.0,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-08-15T06:21:14.523",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/03d8843b143ebbbfaf48511922abc6e886575a61"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/0caa9f348f8b5356900de77b0bb89a697c4aff20"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/129f8939e5af683cec3a1a5edcb40a64636ad81e"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/1d4d8ee002083ca4ead5353662bf8362428af57f"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/220162c9fedbe992da70d70f50a10da4f45f914c"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/c38c8b0db3c65b597e7ece317b6cb59de3d15e69"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/e3724dedf57761c6de52f4d604ec74f66fd61611"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/f00a50876d2818bd6dc86fa98b3ef360884c53c8"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-08-27T14:51:10+00:00",
      "cve": "CVE-2026-72052",
      "id": "CVE-2026-72052",
      "initial_release_date": "2026-08-15T00:00:00+00:00",
      "product_status:known_affected": "232",
      "product_status:known_not_affected": "42",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-72052.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-09-15T01:30:41Z",
      "cve": "CVE-2026-72052",
      "id": "CVE-2026-72052",
      "initial_release_date": "2026-08-27T00:23:59Z",
      "product_status:known_affected": "356",
      "product_status:known_not_affected": "6",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-72052",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-72052.json",
      "version": "4"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.