CVE-2026-72502 (GCVE-0-2026-72502)

Vulnerability from cvelistv5 – Published: 2026-08-15 05:57 – Updated: 2026-08-17 05:45
VLAI
Title
tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
Summary
In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) When MTU is large, ip6_default_advmss() can return IPV6_MAXPLEN (65535). This is interpreted by TCP as mss_clamp, allowing the MSS to reach 65535. However, 0xFFFF is also used as a magic value GSO_BY_FRAGS in the kernel. If a TCP packet with gso_size=0xFFFF is passed to skb_segment(), it will be mistakenly treated as GSO_BY_FRAGS, leading to a NULL pointer dereference because local TCP packets do not use frag_list. Fix this by returning min(IPV6_MAXPLEN, GSO_BY_FRAGS - 1) (65534) from ip6_default_advmss() when MTU is large. Also update the stale comment in ip6_default_advmss() which suggested that IPV6_MAXPLEN is returned to mean "any MSS".
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 3953c46c3ac7eef31a9935427371c6f54a22f1ba , < 560b33b434e922ef97f9ff23aa2e909ef7aacd5c (git)
Affected: 3953c46c3ac7eef31a9935427371c6f54a22f1ba , < 21f69ac1879bb970588d5e7c12a96e6542f7c1a7 (git)
Affected: 3953c46c3ac7eef31a9935427371c6f54a22f1ba , < c0db3dc2ac323b6c4b76adede3b355a9daa6dea8 (git)
Affected: 3953c46c3ac7eef31a9935427371c6f54a22f1ba , < 572fff10819dfc359298d1f774839e76a4d96f93 (git)
Affected: 3953c46c3ac7eef31a9935427371c6f54a22f1ba , < 8e6214a530c03e341dc1b0a846c8f2b716b3551a (git)
Affected: 3953c46c3ac7eef31a9935427371c6f54a22f1ba , < d774cdbda6634a78d0f2baf201ee5a8c57f3bc0e (git)
Affected: 3953c46c3ac7eef31a9935427371c6f54a22f1ba , < a210791f33345aa87187f7d7a9f3b9b7f4a28e6d (git)
Affected: 3953c46c3ac7eef31a9935427371c6f54a22f1ba , < 2bf43d0e2e6a27d52a7d624e2d6b9116972e8a22 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.8
Unaffected: 0 , < 4.8 (semver)
Unaffected: 5.10.261 , ≤ 5.10.* (semver)
Unaffected: 5.15.212 , ≤ 5.15.* (semver)
Unaffected: 6.1.178 , ≤ 6.1.* (semver)
Unaffected: 6.6.145 , ≤ 6.6.* (semver)
Unaffected: 6.12.97 , ≤ 6.12.* (semver)
Unaffected: 6.18.40 , ≤ 6.18.* (semver)
Unaffected: 7.1.5 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/route.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "560b33b434e922ef97f9ff23aa2e909ef7aacd5c",
              "status": "affected",
              "version": "3953c46c3ac7eef31a9935427371c6f54a22f1ba",
              "versionType": "git"
            },
            {
              "lessThan": "21f69ac1879bb970588d5e7c12a96e6542f7c1a7",
              "status": "affected",
              "version": "3953c46c3ac7eef31a9935427371c6f54a22f1ba",
              "versionType": "git"
            },
            {
              "lessThan": "c0db3dc2ac323b6c4b76adede3b355a9daa6dea8",
              "status": "affected",
              "version": "3953c46c3ac7eef31a9935427371c6f54a22f1ba",
              "versionType": "git"
            },
            {
              "lessThan": "572fff10819dfc359298d1f774839e76a4d96f93",
              "status": "affected",
              "version": "3953c46c3ac7eef31a9935427371c6f54a22f1ba",
              "versionType": "git"
            },
            {
              "lessThan": "8e6214a530c03e341dc1b0a846c8f2b716b3551a",
              "status": "affected",
              "version": "3953c46c3ac7eef31a9935427371c6f54a22f1ba",
              "versionType": "git"
            },
            {
              "lessThan": "d774cdbda6634a78d0f2baf201ee5a8c57f3bc0e",
              "status": "affected",
              "version": "3953c46c3ac7eef31a9935427371c6f54a22f1ba",
              "versionType": "git"
            },
            {
              "lessThan": "a210791f33345aa87187f7d7a9f3b9b7f4a28e6d",
              "status": "affected",
              "version": "3953c46c3ac7eef31a9935427371c6f54a22f1ba",
              "versionType": "git"
            },
            {
              "lessThan": "2bf43d0e2e6a27d52a7d624e2d6b9116972e8a22",
              "status": "affected",
              "version": "3953c46c3ac7eef31a9935427371c6f54a22f1ba",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/route.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.8"
            },
            {
              "lessThan": "4.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.261",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.212",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.261",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.212",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.178",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.145",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.97",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.40",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.5",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)\n\nWhen MTU is large, ip6_default_advmss() can return IPV6_MAXPLEN (65535).\nThis is interpreted by TCP as mss_clamp, allowing the MSS to reach 65535.\n\nHowever, 0xFFFF is also used as a magic value GSO_BY_FRAGS in the kernel.\nIf a TCP packet with gso_size=0xFFFF is passed to skb_segment(), it will\nbe mistakenly treated as GSO_BY_FRAGS, leading to a NULL pointer\ndereference because local TCP packets do not use frag_list.\n\nFix this by returning min(IPV6_MAXPLEN, GSO_BY_FRAGS - 1) (65534) from\nip6_default_advmss() when MTU is large.\n\nAlso update the stale comment in ip6_default_advmss() which suggested\nthat IPV6_MAXPLEN is returned to mean \"any MSS\"."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - Reachable from the network via IPv6 TCP: a remote peer sends a crafted SYN (MSS=65535) or connects over a large-MTU IPv6 route, causing outbound TCP GSO skbs with gso_size=0xFFFF to be software-segmented in skb_segment() during normal packet transmit.\nAC:L - The attacker controls the TCP handshake MSS option and can induce \u003e64KB outbound segments; syzbot reproduced this reliably, and software GSO paths (loopback, veth, NETIF_F_GSO_SOFTWARE) are common in cloud/container deployments where skb_segment() is invoked.\nPR:N - No privileges are required; exploitation occurs on the pre-authentication passive-open path where the kernel accepts a remote TCP SYN and MSS option before any application-level authentication.\nUI:N - No victim user interaction is needed beyond the target system normally accepting IPv6 TCP connections and transmitting response data to the attacker-controlled peer.\nS:U - The vulnerability causes a kernel crash on the attacked host itself; it does not cross a security boundary such as a VM escape, container sandbox breakout, or IOMMU/DMA isolation bypass.\nC:N - Impact is a NULL pointer dereference in skb_segment() when gso_size equals GSO_BY_FRAGS; there is no out-of-bounds read, use-after-free, or other memory disclosure primitive.\nI:N - The bug does not corrupt or modify attacker-controlled memory; it dereferences a NULL frag_list pointer during segmentation, yielding a crash rather than a write or code-execution primitive.\nA:H - The NULL pointer dereference in skb_segment() triggers a kernel oops/panic, causing complete loss of availability for the affected system when the malicious IPv6 TCP traffic path is exercised."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T05:45:02.121Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/560b33b434e922ef97f9ff23aa2e909ef7aacd5c"
        },
        {
          "url": "https://git.kernel.org/stable/c/21f69ac1879bb970588d5e7c12a96e6542f7c1a7"
        },
        {
          "url": "https://git.kernel.org/stable/c/c0db3dc2ac323b6c4b76adede3b355a9daa6dea8"
        },
        {
          "url": "https://git.kernel.org/stable/c/572fff10819dfc359298d1f774839e76a4d96f93"
        },
        {
          "url": "https://git.kernel.org/stable/c/8e6214a530c03e341dc1b0a846c8f2b716b3551a"
        },
        {
          "url": "https://git.kernel.org/stable/c/d774cdbda6634a78d0f2baf201ee5a8c57f3bc0e"
        },
        {
          "url": "https://git.kernel.org/stable/c/a210791f33345aa87187f7d7a9f3b9b7f4a28e6d"
        },
        {
          "url": "https://git.kernel.org/stable/c/2bf43d0e2e6a27d52a7d624e2d6b9116972e8a22"
        }
      ],
      "title": "tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-72502",
    "datePublished": "2026-08-15T05:57:33.647Z",
    "dateReserved": "2026-08-09T03:40:39.938Z",
    "dateUpdated": "2026-08-17T05:45:02.121Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-72502",
      "date": "2026-09-21",
      "epss": "0.00696",
      "percentile": "0.51164"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "net/ipv6/route.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "560b33b434e922ef97f9ff23aa2e909ef7aacd5c",
                    "status": "affected",
                    "version": "3953c46c3ac7eef31a9935427371c6f54a22f1ba",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "21f69ac1879bb970588d5e7c12a96e6542f7c1a7",
                    "status": "affected",
                    "version": "3953c46c3ac7eef31a9935427371c6f54a22f1ba",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "c0db3dc2ac323b6c4b76adede3b355a9daa6dea8",
                    "status": "affected",
                    "version": "3953c46c3ac7eef31a9935427371c6f54a22f1ba",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "572fff10819dfc359298d1f774839e76a4d96f93",
                    "status": "affected",
                    "version": "3953c46c3ac7eef31a9935427371c6f54a22f1ba",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "8e6214a530c03e341dc1b0a846c8f2b716b3551a",
                    "status": "affected",
                    "version": "3953c46c3ac7eef31a9935427371c6f54a22f1ba",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "d774cdbda6634a78d0f2baf201ee5a8c57f3bc0e",
                    "status": "affected",
                    "version": "3953c46c3ac7eef31a9935427371c6f54a22f1ba",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "a210791f33345aa87187f7d7a9f3b9b7f4a28e6d",
                    "status": "affected",
                    "version": "3953c46c3ac7eef31a9935427371c6f54a22f1ba",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "2bf43d0e2e6a27d52a7d624e2d6b9116972e8a22",
                    "status": "affected",
                    "version": "3953c46c3ac7eef31a9935427371c6f54a22f1ba",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "net/ipv6/route.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "4.8"
                  },
                  {
                    "lessThan": "4.8",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.261",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.212",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.178",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.145",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.97",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.40",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.1.*",
                    "status": "unaffected",
                    "version": "7.1.5",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.2",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)\n\nWhen MTU is large, ip6_default_advmss() can return IPV6_MAXPLEN (65535).\nThis is interpreted by TCP as mss_clamp, allowing the MSS to reach 65535.\n\nHowever, 0xFFFF is also used as a magic value GSO_BY_FRAGS in the kernel.\nIf a TCP packet with gso_size=0xFFFF is passed to skb_segment(), it will\nbe mistakenly treated as GSO_BY_FRAGS, leading to a NULL pointer\ndereference because local TCP packets do not use frag_list.\n\nFix this by returning min(IPV6_MAXPLEN, GSO_BY_FRAGS - 1) (65534) from\nip6_default_advmss() when MTU is large.\n\nAlso update the stale comment in ip6_default_advmss() which suggested\nthat IPV6_MAXPLEN is returned to mean \"any MSS\"."
          }
        ],
        "id": "CVE-2026-72502",
        "lastModified": "2026-08-17T06:19:18.647",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-08-15T06:22:24.510",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/21f69ac1879bb970588d5e7c12a96e6542f7c1a7"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/2bf43d0e2e6a27d52a7d624e2d6b9116972e8a22"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/560b33b434e922ef97f9ff23aa2e909ef7aacd5c"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/572fff10819dfc359298d1f774839e76a4d96f93"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/8e6214a530c03e341dc1b0a846c8f2b716b3551a"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/a210791f33345aa87187f7d7a9f3b9b7f4a28e6d"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/c0db3dc2ac323b6c4b76adede3b355a9daa6dea8"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/d774cdbda6634a78d0f2baf201ee5a8c57f3bc0e"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-19T19:39:16+00:00",
      "cve": "CVE-2026-72502",
      "id": "CVE-2026-72502",
      "initial_release_date": "2026-08-15T00:00:00+00:00",
      "product_status:known_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-72502.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-18T00:27:45Z",
      "cve": "CVE-2026-72502",
      "id": "CVE-2026-72502",
      "initial_release_date": "2026-08-26T01:14:31Z",
      "product_status:first_fixed": "23",
      "product_status:known_affected": "713",
      "product_status:known_not_affected": "6",
      "product_status:recommended": "107",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-72502",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-72502.json",
      "version": "9"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.