CVE-2026-74497 (GCVE-0-2026-74497)

Vulnerability from cvelistv5 – Published: 2026-08-15 12:27 – Updated: 2026-08-19 16:37
VLAI
Title
ALSA: usb-audio: Clamp frame size in implicit-feedback mode
Summary
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedback mode snd_usb_handle_sync_urb() scales received sync packet sizes by the sender's stride and stores the result directly in out_packet->packet_size[i]. If a connected USB device sends an oversized sync packet, this frame count can exceed ep->maxframesize. The un-clamped frame count then propagates to the playback endpoint queue, potentially driving packet transfers beyond the endpoint's hardware frame limits. Cap the calculated frame count against ep->maxframesize in snd_usb_handle_sync_urb() to prevent oversized packets from entering the playback queue.
Severity
8.4 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 28acb12014fb0c3e1edfdab1b1e3e266cf651550 , < 2d39fea6d3c19a2f5811d123114d92e3d0115fd1 (git)
Affected: 28acb12014fb0c3e1edfdab1b1e3e266cf651550 , < 09cf3dbbb4256a43feb91d2f51f274510a9ada47 (git)
Affected: 28acb12014fb0c3e1edfdab1b1e3e266cf651550 , < cfa8d3e0e8b812c4db4d5241f62b6bdbab2bd7be (git)
Affected: 28acb12014fb0c3e1edfdab1b1e3e266cf651550 , < 56ac3e7c90f6b45969c3fd07a98fad760ffd6901 (git)
Affected: 28acb12014fb0c3e1edfdab1b1e3e266cf651550 , < be97fea7451d758881b95af78e900dd0d58a382a (git)
Affected: 28acb12014fb0c3e1edfdab1b1e3e266cf651550 , < 2db4535d6af79276a64449201c5be5feffb31c64 (git)
Affected: 28acb12014fb0c3e1edfdab1b1e3e266cf651550 , < 53f0aa37eb945f3c983f61d12fc35eb33debb8a9 (git)
Affected: 28acb12014fb0c3e1edfdab1b1e3e266cf651550 , < 8d7a30c50c2e58a6839634ed0acde14466d1dc61 (git)
guessed Create a notification for this product.
Linux Linux Affected: 3.8
Unaffected: 0 , < 3.8 (semver)
Unaffected: 5.10.265 , ≤ 5.10.* (semver)
Unaffected: 5.15.216 , ≤ 5.15.* (semver)
Unaffected: 6.1.183 , ≤ 6.1.* (semver)
Unaffected: 6.6.151 , ≤ 6.6.* (semver)
Unaffected: 6.12.103 , ≤ 6.12.* (semver)
Unaffected: 6.18.44 , ≤ 6.18.* (semver)
Unaffected: 7.1.8 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "sound/usb/endpoint.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "2d39fea6d3c19a2f5811d123114d92e3d0115fd1",
              "status": "affected",
              "version": "28acb12014fb0c3e1edfdab1b1e3e266cf651550",
              "versionType": "git"
            },
            {
              "lessThan": "09cf3dbbb4256a43feb91d2f51f274510a9ada47",
              "status": "affected",
              "version": "28acb12014fb0c3e1edfdab1b1e3e266cf651550",
              "versionType": "git"
            },
            {
              "lessThan": "cfa8d3e0e8b812c4db4d5241f62b6bdbab2bd7be",
              "status": "affected",
              "version": "28acb12014fb0c3e1edfdab1b1e3e266cf651550",
              "versionType": "git"
            },
            {
              "lessThan": "56ac3e7c90f6b45969c3fd07a98fad760ffd6901",
              "status": "affected",
              "version": "28acb12014fb0c3e1edfdab1b1e3e266cf651550",
              "versionType": "git"
            },
            {
              "lessThan": "be97fea7451d758881b95af78e900dd0d58a382a",
              "status": "affected",
              "version": "28acb12014fb0c3e1edfdab1b1e3e266cf651550",
              "versionType": "git"
            },
            {
              "lessThan": "2db4535d6af79276a64449201c5be5feffb31c64",
              "status": "affected",
              "version": "28acb12014fb0c3e1edfdab1b1e3e266cf651550",
              "versionType": "git"
            },
            {
              "lessThan": "53f0aa37eb945f3c983f61d12fc35eb33debb8a9",
              "status": "affected",
              "version": "28acb12014fb0c3e1edfdab1b1e3e266cf651550",
              "versionType": "git"
            },
            {
              "lessThan": "8d7a30c50c2e58a6839634ed0acde14466d1dc61",
              "status": "affected",
              "version": "28acb12014fb0c3e1edfdab1b1e3e266cf651550",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "sound/usb/endpoint.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.8"
            },
            {
              "lessThan": "3.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.265",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.216",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.183",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.151",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.265",
                  "versionStartIncluding": "3.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.216",
                  "versionStartIncluding": "3.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.183",
                  "versionStartIncluding": "3.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.151",
                  "versionStartIncluding": "3.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.103",
                  "versionStartIncluding": "3.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.44",
                  "versionStartIncluding": "3.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.8",
                  "versionStartIncluding": "3.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "3.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Clamp frame size in implicit-feedback mode\n\nsnd_usb_handle_sync_urb() scales received sync packet sizes by the sender\u0027s\nstride and stores the result directly in out_packet-\u003epacket_size[i]. If a\nconnected USB device sends an oversized sync packet, this frame count can\nexceed ep-\u003emaxframesize.\n\nThe un-clamped frame count then propagates to the playback endpoint queue,\npotentially driving packet transfers beyond the endpoint\u0027s hardware frame\nlimits.\n\nCap the calculated frame count against ep-\u003emaxframesize in\nsnd_usb_handle_sync_urb() to prevent oversized packets from entering the\nplayback queue."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is reached via local ALSA USB-audio PCM syscalls (open/hw_params/prepare/trigger) that start isochronous streaming; once implicit-feedback playback is active, malicious inbound USB sync URB completions invoke snd_usb_handle_sync_urb() without any network path.\nAC:L - A malicious USB audio gadget can deterministically send oversized implicit-feedback sync isochronous packets during active playback; the attacker controls both the device firmware and timing, with no race or uncontrollable memory-layout dependency required.\nPR:N - Exploitation is driven by a connected malicious USB audio device sending crafted isochronous IN packets; the attacker needs no host account, kernel capability, or user-namespace privilege on the victim system once playback is running.\nUI:N - After implicit-feedback USB audio playback is started, the malicious device can continuously inject oversized sync packets without further victim interaction; no additional discretionary user actions are needed beyond normal streaming operation.\nS:U - Impact is confined to host-kernel USB-audio transfer-buffer corruption and crashes within the same kernel security authority; it does not constitute a VM escape, IOMMU bypass, or other cross-scope boundary violation.\nC:H - Uncapped frame counts stored in the playback queue propagate into URB preparation, causing out-of-bounds access against kernel-coherent USB DMA transfer buffers and adjacent heap memory, enabling information disclosure from corrupted kernel memory.\nI:H - Oversized packet_size values drive memset/copy and iso_frame_desc lengths beyond allocated URB buffer bounds in prepare_silent_urb() and prepare_playback_urb(), yielding controllable out-of-bounds kernel memory writes and heap corruption.\nA:H - The resulting kernel memory corruption and invalid oversized URB transfers trigger kernel oops/panic and repeatable audio-pipeline failure; related mitigations for this implicit-feedback packet-size mismatch explicitly document crash behavior from the same root cause."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-19T16:37:55.435Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/2d39fea6d3c19a2f5811d123114d92e3d0115fd1"
        },
        {
          "url": "https://git.kernel.org/stable/c/09cf3dbbb4256a43feb91d2f51f274510a9ada47"
        },
        {
          "url": "https://git.kernel.org/stable/c/cfa8d3e0e8b812c4db4d5241f62b6bdbab2bd7be"
        },
        {
          "url": "https://git.kernel.org/stable/c/56ac3e7c90f6b45969c3fd07a98fad760ffd6901"
        },
        {
          "url": "https://git.kernel.org/stable/c/be97fea7451d758881b95af78e900dd0d58a382a"
        },
        {
          "url": "https://git.kernel.org/stable/c/2db4535d6af79276a64449201c5be5feffb31c64"
        },
        {
          "url": "https://git.kernel.org/stable/c/53f0aa37eb945f3c983f61d12fc35eb33debb8a9"
        },
        {
          "url": "https://git.kernel.org/stable/c/8d7a30c50c2e58a6839634ed0acde14466d1dc61"
        }
      ],
      "title": "ALSA: usb-audio: Clamp frame size in implicit-feedback mode",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-74497",
    "datePublished": "2026-08-15T12:27:24.494Z",
    "dateReserved": "2026-08-15T05:44:03.907Z",
    "dateUpdated": "2026-08-19T16:37:55.435Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-74497",
      "date": "2026-09-21",
      "epss": "0.00142",
      "percentile": "0.03837"
    },
    "microsoft_vex": {
      "current_release_date": "2026-09-11T01:56:11.000Z",
      "cve": "CVE-2026-74497",
      "id": "msrc_CVE-2026-74497",
      "initial_release_date": "2026-08-23T15:01:40.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "ALSA: usb-audio: Clamp frame size in implicit-feedback mode",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-74497.json",
      "version": "2"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "sound/usb/endpoint.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "2d39fea6d3c19a2f5811d123114d92e3d0115fd1",
                    "status": "affected",
                    "version": "28acb12014fb0c3e1edfdab1b1e3e266cf651550",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "09cf3dbbb4256a43feb91d2f51f274510a9ada47",
                    "status": "affected",
                    "version": "28acb12014fb0c3e1edfdab1b1e3e266cf651550",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "cfa8d3e0e8b812c4db4d5241f62b6bdbab2bd7be",
                    "status": "affected",
                    "version": "28acb12014fb0c3e1edfdab1b1e3e266cf651550",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "56ac3e7c90f6b45969c3fd07a98fad760ffd6901",
                    "status": "affected",
                    "version": "28acb12014fb0c3e1edfdab1b1e3e266cf651550",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "be97fea7451d758881b95af78e900dd0d58a382a",
                    "status": "affected",
                    "version": "28acb12014fb0c3e1edfdab1b1e3e266cf651550",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "2db4535d6af79276a64449201c5be5feffb31c64",
                    "status": "affected",
                    "version": "28acb12014fb0c3e1edfdab1b1e3e266cf651550",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "53f0aa37eb945f3c983f61d12fc35eb33debb8a9",
                    "status": "affected",
                    "version": "28acb12014fb0c3e1edfdab1b1e3e266cf651550",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "8d7a30c50c2e58a6839634ed0acde14466d1dc61",
                    "status": "affected",
                    "version": "28acb12014fb0c3e1edfdab1b1e3e266cf651550",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "sound/usb/endpoint.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "3.8"
                  },
                  {
                    "lessThan": "3.8",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.265",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.216",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.183",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.151",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.103",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.44",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.1.*",
                    "status": "unaffected",
                    "version": "7.1.8",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.2",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Clamp frame size in implicit-feedback mode\n\nsnd_usb_handle_sync_urb() scales received sync packet sizes by the sender\u0027s\nstride and stores the result directly in out_packet-\u003epacket_size[i]. If a\nconnected USB device sends an oversized sync packet, this frame count can\nexceed ep-\u003emaxframesize.\n\nThe un-clamped frame count then propagates to the playback endpoint queue,\npotentially driving packet transfers beyond the endpoint\u0027s hardware frame\nlimits.\n\nCap the calculated frame count against ep-\u003emaxframesize in\nsnd_usb_handle_sync_urb() to prevent oversized packets from entering the\nplayback queue."
          }
        ],
        "id": "CVE-2026-74497",
        "lastModified": "2026-08-19T17:21:06.910",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 8.4,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.5,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-08-15T13:17:54.657",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/09cf3dbbb4256a43feb91d2f51f274510a9ada47"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/2d39fea6d3c19a2f5811d123114d92e3d0115fd1"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/2db4535d6af79276a64449201c5be5feffb31c64"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/53f0aa37eb945f3c983f61d12fc35eb33debb8a9"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/56ac3e7c90f6b45969c3fd07a98fad760ffd6901"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/8d7a30c50c2e58a6839634ed0acde14466d1dc61"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/be97fea7451d758881b95af78e900dd0d58a382a"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/cfa8d3e0e8b812c4db4d5241f62b6bdbab2bd7be"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-19T17:41:52+00:00",
      "cve": "CVE-2026-74497",
      "id": "CVE-2026-74497",
      "initial_release_date": "2026-08-15T00:00:00+00:00",
      "product_status:known_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: ALSA: usb-audio: Clamp frame size in implicit-feedback mode",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74497.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-10T02:01:09Z",
      "cve": "CVE-2026-74497",
      "id": "CVE-2026-74497",
      "initial_release_date": "2026-08-15T23:51:36Z",
      "product_status:known_affected": "265",
      "product_status:known_not_affected": "97",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-74497",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-74497.json",
      "version": "5"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.