CVE-2026-23383 (GCVE-0-2026-23383)
Vulnerability from cvelistv5 – Published: 2026-03-25 10:28 – Updated: 2026-08-05 12:21
VLAI
EPSS
VEX
Title
bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
Summary
In the Linux kernel, the following vulnerability has been resolved:
bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
struct bpf_plt contains a u64 target field. Currently, the BPF JIT
allocator requests an alignment of 4 bytes (sizeof(u32)) for the JIT
buffer.
Because the base address of the JIT buffer can be 4-byte aligned (e.g.,
ending in 0x4 or 0xc), the relative padding logic in build_plt() fails
to ensure that target lands on an 8-byte boundary.
This leads to two issues:
1. UBSAN reports misaligned-access warnings when dereferencing the
structure.
2. More critically, target is updated concurrently via WRITE_ONCE() in
bpf_arch_text_poke() while the JIT'd code executes ldr. On arm64,
64-bit loads/stores are only guaranteed to be single-copy atomic if
they are 64-bit aligned. A misaligned target risks a torn read,
causing the JIT to jump to a corrupted address.
Fix this by increasing the allocation alignment requirement to 8 bytes
(sizeof(u64)) in bpf_jit_binary_pack_alloc(). This anchors the base of
the JIT buffer to an 8-byte boundary, allowing the relative padding math
in build_plt() to correctly align the target field.
Severity
7.8 (High)
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Linux | Linux |
Affected:
b2ad54e1533e91449cb2a371e034942bd7882b58 , < 80ad264da02cc4aee718e799c2b79f0f834673dc
(git)
Affected: b2ad54e1533e91449cb2a371e034942bd7882b58 , < 519b1ad91de5bf7a496f2b858e9212db6328e1de (git) Affected: b2ad54e1533e91449cb2a371e034942bd7882b58 , < 66959ed481a474eaae278c7f6860a2a9b188a4d6 (git) Affected: b2ad54e1533e91449cb2a371e034942bd7882b58 , < ef06fd16d48704eac868441d98d4ef083d8f3d07 (git) |
guessed | |
| Linux | Linux |
Affected:
6.0
Unaffected: 0 , < 6.0 (semver) Unaffected: 6.12.77 , ≤ 6.12.* (semver) Unaffected: 6.18.17 , ≤ 6.18.* (semver) Unaffected: 6.19.7 , ≤ 6.19.* (semver) Unaffected: 7.0 , ≤ * (original_commit_for_fix) |
guessed |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"arch/arm64/net/bpf_jit_comp.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "80ad264da02cc4aee718e799c2b79f0f834673dc",
"status": "affected",
"version": "b2ad54e1533e91449cb2a371e034942bd7882b58",
"versionType": "git"
},
{
"lessThan": "519b1ad91de5bf7a496f2b858e9212db6328e1de",
"status": "affected",
"version": "b2ad54e1533e91449cb2a371e034942bd7882b58",
"versionType": "git"
},
{
"lessThan": "66959ed481a474eaae278c7f6860a2a9b188a4d6",
"status": "affected",
"version": "b2ad54e1533e91449cb2a371e034942bd7882b58",
"versionType": "git"
},
{
"lessThan": "ef06fd16d48704eac868441d98d4ef083d8f3d07",
"status": "affected",
"version": "b2ad54e1533e91449cb2a371e034942bd7882b58",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"arch/arm64/net/bpf_jit_comp.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "6.0"
},
{
"lessThan": "6.0",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.12.*",
"status": "unaffected",
"version": "6.12.77",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.18.*",
"status": "unaffected",
"version": "6.18.17",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.19.*",
"status": "unaffected",
"version": "6.19.7",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "7.0",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.12.77",
"versionStartIncluding": "6.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.18.17",
"versionStartIncluding": "6.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.19.7",
"versionStartIncluding": "6.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.0",
"versionStartIncluding": "6.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing\n\nstruct bpf_plt contains a u64 target field. Currently, the BPF JIT\nallocator requests an alignment of 4 bytes (sizeof(u32)) for the JIT\nbuffer.\n\nBecause the base address of the JIT buffer can be 4-byte aligned (e.g.,\nending in 0x4 or 0xc), the relative padding logic in build_plt() fails\nto ensure that target lands on an 8-byte boundary.\n\nThis leads to two issues:\n1. UBSAN reports misaligned-access warnings when dereferencing the\n structure.\n2. More critically, target is updated concurrently via WRITE_ONCE() in\n bpf_arch_text_poke() while the JIT\u0027d code executes ldr. On arm64,\n 64-bit loads/stores are only guaranteed to be single-copy atomic if\n they are 64-bit aligned. A misaligned target risks a torn read,\n causing the JIT to jump to a corrupted address.\n\nFix this by increasing the allocation alignment requirement to 8 bytes\n(sizeof(u64)) in bpf_jit_binary_pack_alloc(). This anchors the base of\nthe JIT buffer to an 8-byte boundary, allowing the relative padding math\nin build_plt() to correctly align the target field."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"scenarios": [
{
"lang": "en",
"value": "AV:L - BPF is accessed via the bpf() syscall, requiring local system access. There is no remote or adjacent network path to trigger BPF program loading or trampoline attachment.\nAC:L - The attacker controls both sides of the race \u2014 they load the BPF program (creating the misaligned PLT) and trigger the text_poke (by attaching a trampoline). The ~50% misalignment chance is overcome by loading multiple programs. No conditions beyond attacker control are needed.\nPR:L - While CAP_BPF and CAP_PERFMON are required, the BPF token delegation mechanism allows these capabilities to be granted to users in user namespaces. This is a supported, reasonable deployment scenario for containerized BPF workloads.\nUI:N - No user interaction is required. The attacker independently loads BPF programs and attaches trampolines.\nS:U - The vulnerability results in kernel-level control flow corruption within the same security authority. No VM escape, IOMMU bypass, or sandbox boundary crossing occurs.\nC:H - The torn PLT target causes a kernel-mode jump to a corrupted address, which is a control-flow hijack in kernel context. This could be leveraged to read arbitrary kernel memory through code execution.\nI:H - A kernel-mode jump to a corrupted address constitutes control-flow hijacking that could be leveraged for arbitrary code execution in kernel context, enabling arbitrary memory writes.\nA:H - Jumping to a corrupted address in kernel mode will almost certainly cause a kernel panic/oops, resulting in complete denial of service."
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T12:21:21.051Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/80ad264da02cc4aee718e799c2b79f0f834673dc"
},
{
"url": "https://git.kernel.org/stable/c/519b1ad91de5bf7a496f2b858e9212db6328e1de"
},
{
"url": "https://git.kernel.org/stable/c/66959ed481a474eaae278c7f6860a2a9b188a4d6"
},
{
"url": "https://git.kernel.org/stable/c/ef06fd16d48704eac868441d98d4ef083d8f3d07"
}
],
"title": "bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2026-23383",
"datePublished": "2026-03-25T10:28:02.126Z",
"dateReserved": "2026-01-13T15:37:46.007Z",
"dateUpdated": "2026-08-05T12:21:21.051Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-23383",
"date": "2026-09-16",
"epss": "0.00129",
"percentile": "0.02857"
},
"microsoft_vex": {
"current_release_date": "2026-08-10T14:52:45.000Z",
"cve": "CVE-2026-23383",
"id": "msrc_CVE-2026-23383",
"initial_release_date": "2026-03-26T01:03:48.000Z",
"product_status:known_affected": "11",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-23383.json",
"version": "12"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-23383\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-03-25T11:16:38.487\",\"lastModified\":\"2026-06-17T10:21:28.433\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nbpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing\\n\\nstruct bpf_plt contains a u64 target field. Currently, the BPF JIT\\nallocator requests an alignment of 4 bytes (sizeof(u32)) for the JIT\\nbuffer.\\n\\nBecause the base address of the JIT buffer can be 4-byte aligned (e.g.,\\nending in 0x4 or 0xc), the relative padding logic in build_plt() fails\\nto ensure that target lands on an 8-byte boundary.\\n\\nThis leads to two issues:\\n1. UBSAN reports misaligned-access warnings when dereferencing the\\n structure.\\n2. More critically, target is updated concurrently via WRITE_ONCE() in\\n bpf_arch_text_poke() while the JIT\u0027d code executes ldr. On arm64,\\n 64-bit loads/stores are only guaranteed to be single-copy atomic if\\n they are 64-bit aligned. A misaligned target risks a torn read,\\n causing the JIT to jump to a corrupted address.\\n\\nFix this by increasing the allocation alignment requirement to 8 bytes\\n(sizeof(u64)) in bpf_jit_binary_pack_alloc(). This anchors the base of\\nthe JIT buffer to an 8-byte boundary, allowing the relative padding math\\nin build_plt() to correctly align the target field.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\\n\\nbpf, arm64: Forzar alineaci\u00f3n de 8 bytes para el b\u00fafer JIT para prevenir el desgarro at\u00f3mico\\n\\nstruct bpf_plt contiene un campo objetivo u64. Actualmente, el asignador JIT de BPF solicita una alineaci\u00f3n de 4 bytes (sizeof(u32)) para el b\u00fafer JIT.\\n\\nDebido a que la direcci\u00f3n base del b\u00fafer JIT puede estar alineada a 4 bytes (p. ej., terminando en 0x4 o 0xc), la l\u00f3gica de relleno relativo en build_plt() no logra asegurar que target caiga en un l\u00edmite de 8 bytes.\\n\\nEsto lleva a dos problemas:\\n1. UBSAN informa advertencias de acceso desalineado al desreferenciar la estructura.\\n2. M\u00e1s cr\u00edticamente, target se actualiza concurrentemente a trav\u00e9s de WRITE_ONCE() en bpf_arch_text_poke() mientras el c\u00f3digo JIT\u0027d ejecuta ldr. En arm64, las cargas/almacenamientos de 64 bits solo se garantiza que sean at\u00f3micos de copia \u00fanica si est\u00e1n alineados a 64 bits. Un target desalineado arriesga una lectura desgarrada, haciendo que el JIT salte a una direcci\u00f3n corrupta.\\n\\nSolucione esto aumentando el requisito de alineaci\u00f3n de asignaci\u00f3n a 8 bytes (sizeof(u64)) en bpf_jit_binary_pack_alloc(). Esto ancla la base del b\u00fafer JIT a un l\u00edmite de 8 bytes, permitiendo que las matem\u00e1ticas de relleno relativo en build_plt() alineen correctamente el campo target.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"arch/arm64/net/bpf_jit_comp.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"b2ad54e1533e91449cb2a371e034942bd7882b58\",\"lessThan\":\"80ad264da02cc4aee718e799c2b79f0f834673dc\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b2ad54e1533e91449cb2a371e034942bd7882b58\",\"lessThan\":\"519b1ad91de5bf7a496f2b858e9212db6328e1de\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b2ad54e1533e91449cb2a371e034942bd7882b58\",\"lessThan\":\"66959ed481a474eaae278c7f6860a2a9b188a4d6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b2ad54e1533e91449cb2a371e034942bd7882b58\",\"lessThan\":\"ef06fd16d48704eac868441d98d4ef083d8f3d07\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"arch/arm64/net/bpf_jit_comp.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.0\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.0\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.77\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.17\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19.7\",\"lessThanOrEqual\":\"6.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.0.1\",\"versionEndExcluding\":\"6.12.77\",\"matchCriteriaId\":\"5D973B34-246F-4A22-882C-BBD5EB00997D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.17\",\"matchCriteriaId\":\"A5E006E4-59C7-43C1-9231-62A72219F2BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"6.19.7\",\"matchCriteriaId\":\"69245D10-0B71-485E-80C3-A64F077004D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BE551E5-89CF-47A8-9B26-03CE727FBA37\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F253B622-8837-4245-BCE5-A7BF8FC76A16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F666C8D8-6538-46D4-B318-87610DE64C34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"02259FDA-961B-47BC-AE7F-93D7EC6E90C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"58A9FEFF-C040-420D-8F0A-BFDAAA1DF258\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D2315C0-D46F-4F85-9754-F9E5E11374A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"512EE3A8-A590-4501-9A94-5D4B268D6138\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/519b1ad91de5bf7a496f2b858e9212db6328e1de\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/66959ed481a474eaae278c7f6860a2a9b188a4d6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/80ad264da02cc4aee718e799c2b79f0f834673dc\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ef06fd16d48704eac868441d98d4ef083d8f3d07\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
"redhat_vex": {
"aggregate_severity": "Moderate",
"current_release_date": "2026-08-21T20:34:26+00:00",
"cve": "CVE-2026-23383",
"id": "CVE-2026-23383",
"initial_release_date": "2026-03-25T00:00:00+00:00",
"product_status:known_affected": "184",
"product_status:known_not_affected": "90",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "kernel: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23383.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "moderate",
"current_release_date": "2026-09-11T01:36:40Z",
"cve": "CVE-2026-23383",
"id": "CVE-2026-23383",
"initial_release_date": "2026-03-25T16:55:05Z",
"product_status:first_fixed": "2",
"product_status:known_affected": "449",
"product_status:known_not_affected": "312",
"product_status:recommended": "280",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-23383",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-23383.json",
"version": "36"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…