CVE-2026-63870 (GCVE-0-2026-63870)

Vulnerability from cvelistv5 – Published: 2026-07-19 14:18 – Updated: 2026-08-05 12:36
VLAI
Title
ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()
Summary
In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() The aoe driver (or similar) generates a non-IPv6 packet (e.g., ETH_P_AOE) and queues it for transmission via dev_queue_xmit() on a 6LoWPAN interface (configured by the user or test case). Since the packet is not IPv6, the 6LoWPAN header_ops->create function (lowpan_header_create or header_create) returns early without initializing the lowpan_addr_info structure in the skb headroom. In the transmit function (lowpan_xmit), the driver calls lowpan_header (or setup_header) which unconditionally copies and uses the lowpan_addr_info from the headroom, which contains uninitialized data. Fix this by dropping non IPv6 packets. A similar fix is needed in net/bluetooth/6lowpan.c bt_xmit().
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 4dc315e267fe4a3c863fec21f26aa0a418c3f07a , < af07fffbd53ddc3ec3c2a4ca914f27899fa89bca (git)
Affected: 4dc315e267fe4a3c863fec21f26aa0a418c3f07a , < 3150e6d3223dfc356308125cabf9c34169842d2a (git)
Affected: 4dc315e267fe4a3c863fec21f26aa0a418c3f07a , < 8da95cb6ad7d656c871e776a9c7b77e894d6d89c (git)
Affected: 4dc315e267fe4a3c863fec21f26aa0a418c3f07a , < 1a827b95e62b4cbe851ae7cc9c961cdfa769cca4 (git)
Affected: 4dc315e267fe4a3c863fec21f26aa0a418c3f07a , < c1819c8defa235c7beda859bc185b1c429a55ecd (git)
Affected: 4dc315e267fe4a3c863fec21f26aa0a418c3f07a , < 285b0842f2e01c3edf805f1fd64da11d9b7f6b4c (git)
Affected: 4dc315e267fe4a3c863fec21f26aa0a418c3f07a , < 87172cc8dc49aaf54407a31edffb0232f8cb93ab (git)
Affected: 4dc315e267fe4a3c863fec21f26aa0a418c3f07a , < 3a5f3f7aff18bcc36a57839cf50cf0cc8de707f3 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.0
Unaffected: 0 , < 4.0 (semver)
Unaffected: 5.10.259 , ≤ 5.10.* (semver)
Unaffected: 5.15.210 , ≤ 5.15.* (semver)
Unaffected: 6.1.176 , ≤ 6.1.* (semver)
Unaffected: 6.6.143 , ≤ 6.6.* (semver)
Unaffected: 6.12.94 , ≤ 6.12.* (semver)
Unaffected: 6.18.36 , ≤ 6.18.* (semver)
Unaffected: 7.0.13 , ≤ 7.0.* (semver)
Unaffected: 7.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ieee802154/6lowpan/tx.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "af07fffbd53ddc3ec3c2a4ca914f27899fa89bca",
              "status": "affected",
              "version": "4dc315e267fe4a3c863fec21f26aa0a418c3f07a",
              "versionType": "git"
            },
            {
              "lessThan": "3150e6d3223dfc356308125cabf9c34169842d2a",
              "status": "affected",
              "version": "4dc315e267fe4a3c863fec21f26aa0a418c3f07a",
              "versionType": "git"
            },
            {
              "lessThan": "8da95cb6ad7d656c871e776a9c7b77e894d6d89c",
              "status": "affected",
              "version": "4dc315e267fe4a3c863fec21f26aa0a418c3f07a",
              "versionType": "git"
            },
            {
              "lessThan": "1a827b95e62b4cbe851ae7cc9c961cdfa769cca4",
              "status": "affected",
              "version": "4dc315e267fe4a3c863fec21f26aa0a418c3f07a",
              "versionType": "git"
            },
            {
              "lessThan": "c1819c8defa235c7beda859bc185b1c429a55ecd",
              "status": "affected",
              "version": "4dc315e267fe4a3c863fec21f26aa0a418c3f07a",
              "versionType": "git"
            },
            {
              "lessThan": "285b0842f2e01c3edf805f1fd64da11d9b7f6b4c",
              "status": "affected",
              "version": "4dc315e267fe4a3c863fec21f26aa0a418c3f07a",
              "versionType": "git"
            },
            {
              "lessThan": "87172cc8dc49aaf54407a31edffb0232f8cb93ab",
              "status": "affected",
              "version": "4dc315e267fe4a3c863fec21f26aa0a418c3f07a",
              "versionType": "git"
            },
            {
              "lessThan": "3a5f3f7aff18bcc36a57839cf50cf0cc8de707f3",
              "status": "affected",
              "version": "4dc315e267fe4a3c863fec21f26aa0a418c3f07a",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ieee802154/6lowpan/tx.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.0"
            },
            {
              "lessThan": "4.0",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.259",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.210",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.176",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.143",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.94",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.36",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.259",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.210",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.176",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.143",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.94",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.36",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.13",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()\n\nThe aoe driver (or similar) generates a non-IPv6 packet\n(e.g., ETH_P_AOE) and queues it for transmission via dev_queue_xmit()\non a 6LoWPAN interface (configured by the user or test case).\n\nSince the packet is not IPv6, the 6LoWPAN header_ops-\u003ecreate function\n(lowpan_header_create or header_create) returns early without initializing\nthe lowpan_addr_info structure in the skb headroom.\n\nIn the transmit function (lowpan_xmit), the driver calls lowpan_header\n(or setup_header) which unconditionally copies and uses the lowpan_addr_info\nfrom the headroom, which contains uninitialized data.\n\nFix this by dropping non IPv6 packets.\n\nA similar fix is needed in net/bluetooth/6lowpan.c bt_xmit()."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The flaw is in the transmit path (`lowpan_xmit`) reached only when locally queued skbs are sent via `dev_queue_xmit()` (syzbot: AoE \u2192 `aoenet.c:tx` \u2192 `lowpan_xmit`), not from remote 802.15.4 packet reception.\nAC:L - An attacker who can create a 6LoWPAN interface and queue non-IPv6 packets (or misconfigure AoE onto it) reliably triggers the uninitialized read; syzbot reproduced it deterministically with no race or rare layout dependency.\nPR:L - Exploitation requires creating a `lowpan` RTNL link (`CAP_NET_ADMIN`, obtainable in a user namespace) and transmitting non-IPv6 frames via `AF_PACKET` or a misbound driver; no real-root-only capability is strictly required on typical userns-enabled systems.\nUI:N - No victim interaction is needed beyond the attacker (or fuzzer) configuring the interface and injecting the malformed transmit; exploitation is fully attacker-driven.\nS:U - Impact is confined to kernel memory handling and 802.15.4 transmission on the same host; it does not cross a VM, container, or IOMMU security boundary.\nC:H - `lowpan_header()` copies uninitialized slab contents from skb headroom (`KMSAN: uninit-value` at `tx.c:231/240`) and uses them in 802.15.4 address fields, leaking kernel heap bytes that may be encoded into transmitted WPAN frames.\nI:H - Uninitialized `ieee802154_addr` values drive `wpan_dev_hard_header()` and frame transmission, allowing heap-spray-influenced 802.15.4 destinations and corrupted over-the-air frames rather than only a benign drop.\nA:H - Successful transmission of malformed WPAN frames with attacker-influenced addressing can disrupt 802.15.4 mesh/IoT availability, and memory-safety bugs on the xmit path can escalate to kernel faults under heap-controlled conditions."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:36:45.663Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/af07fffbd53ddc3ec3c2a4ca914f27899fa89bca"
        },
        {
          "url": "https://git.kernel.org/stable/c/3150e6d3223dfc356308125cabf9c34169842d2a"
        },
        {
          "url": "https://git.kernel.org/stable/c/8da95cb6ad7d656c871e776a9c7b77e894d6d89c"
        },
        {
          "url": "https://git.kernel.org/stable/c/1a827b95e62b4cbe851ae7cc9c961cdfa769cca4"
        },
        {
          "url": "https://git.kernel.org/stable/c/c1819c8defa235c7beda859bc185b1c429a55ecd"
        },
        {
          "url": "https://git.kernel.org/stable/c/285b0842f2e01c3edf805f1fd64da11d9b7f6b4c"
        },
        {
          "url": "https://git.kernel.org/stable/c/87172cc8dc49aaf54407a31edffb0232f8cb93ab"
        },
        {
          "url": "https://git.kernel.org/stable/c/3a5f3f7aff18bcc36a57839cf50cf0cc8de707f3"
        }
      ],
      "title": "ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-63870",
    "datePublished": "2026-07-19T14:18:39.113Z",
    "dateReserved": "2026-07-19T07:54:57.017Z",
    "dateUpdated": "2026-08-05T12:36:45.663Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-63870",
      "date": "2026-09-21",
      "epss": "0.00176",
      "percentile": "0.07354"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "net/ieee802154/6lowpan/tx.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "af07fffbd53ddc3ec3c2a4ca914f27899fa89bca",
                    "status": "affected",
                    "version": "4dc315e267fe4a3c863fec21f26aa0a418c3f07a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "3150e6d3223dfc356308125cabf9c34169842d2a",
                    "status": "affected",
                    "version": "4dc315e267fe4a3c863fec21f26aa0a418c3f07a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "8da95cb6ad7d656c871e776a9c7b77e894d6d89c",
                    "status": "affected",
                    "version": "4dc315e267fe4a3c863fec21f26aa0a418c3f07a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "1a827b95e62b4cbe851ae7cc9c961cdfa769cca4",
                    "status": "affected",
                    "version": "4dc315e267fe4a3c863fec21f26aa0a418c3f07a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "c1819c8defa235c7beda859bc185b1c429a55ecd",
                    "status": "affected",
                    "version": "4dc315e267fe4a3c863fec21f26aa0a418c3f07a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "285b0842f2e01c3edf805f1fd64da11d9b7f6b4c",
                    "status": "affected",
                    "version": "4dc315e267fe4a3c863fec21f26aa0a418c3f07a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "87172cc8dc49aaf54407a31edffb0232f8cb93ab",
                    "status": "affected",
                    "version": "4dc315e267fe4a3c863fec21f26aa0a418c3f07a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "3a5f3f7aff18bcc36a57839cf50cf0cc8de707f3",
                    "status": "affected",
                    "version": "4dc315e267fe4a3c863fec21f26aa0a418c3f07a",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "net/ieee802154/6lowpan/tx.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "4.0"
                  },
                  {
                    "lessThan": "4.0",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.259",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.210",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.176",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.143",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.94",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.36",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.0.*",
                    "status": "unaffected",
                    "version": "7.0.13",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.1",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()\n\nThe aoe driver (or similar) generates a non-IPv6 packet\n(e.g., ETH_P_AOE) and queues it for transmission via dev_queue_xmit()\non a 6LoWPAN interface (configured by the user or test case).\n\nSince the packet is not IPv6, the 6LoWPAN header_ops-\u003ecreate function\n(lowpan_header_create or header_create) returns early without initializing\nthe lowpan_addr_info structure in the skb headroom.\n\nIn the transmit function (lowpan_xmit), the driver calls lowpan_header\n(or setup_header) which unconditionally copies and uses the lowpan_addr_info\nfrom the headroom, which contains uninitialized data.\n\nFix this by dropping non IPv6 packets.\n\nA similar fix is needed in net/bluetooth/6lowpan.c bt_xmit()."
          }
        ],
        "id": "CVE-2026-63870",
        "lastModified": "2026-07-27T17:44:23.777",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-07-19T15:16:53.990",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/1a827b95e62b4cbe851ae7cc9c961cdfa769cca4"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/285b0842f2e01c3edf805f1fd64da11d9b7f6b4c"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/3150e6d3223dfc356308125cabf9c34169842d2a"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/3a5f3f7aff18bcc36a57839cf50cf0cc8de707f3"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/87172cc8dc49aaf54407a31edffb0232f8cb93ab"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/8da95cb6ad7d656c871e776a9c7b77e894d6d89c"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/af07fffbd53ddc3ec3c2a4ca914f27899fa89bca"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/c1819c8defa235c7beda859bc185b1c429a55ecd"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Awaiting Analysis"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-07-22T07:05:53+00:00",
      "cve": "CVE-2026-63870",
      "id": "CVE-2026-63870",
      "initial_release_date": "2026-07-19T00:00:00+00:00",
      "product_status:known_affected": "156",
      "product_status:known_not_affected": "118",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63870.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-15T01:58:35Z",
      "cve": "CVE-2026-63870",
      "id": "CVE-2026-63870",
      "initial_release_date": "2026-07-24T02:13:18Z",
      "product_status:known_affected": "372",
      "product_status:known_not_affected": "4",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-63870",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-63870.json",
      "version": "5"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.