CVE-2026-72035 (GCVE-0-2026-72035)

Vulnerability from cvelistv5 – Published: 2026-08-15 05:51 – Updated: 2026-08-23 12:46
VLAI
Title
net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked
Summary
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked When taprio's software path peeks a non-work-conserving child qdisc, the child stashes the peeked skb in its gso_skb; taprio_dequeue_from_txq() then takes the packet with a direct child ->dequeue() call, which ignores that stash, orphans the peeked skb and desyncs the child's qlen/backlog. With a qfq child this re-enters the child on an emptied list and dereferences NULL, panicking the kernel from softirq on ordinary egress. Take the packet through qdisc_dequeue_peeked(), as sch_red and sch_sfb now do. The helper returns the child's stashed skb first and is a no-op when there is none, so a work-conserving child is unaffected and the gated path now consumes the skb whose length was charged to the budget.
Severity
8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 5a781ccbd19e4664babcbe4b4ead7aa2b9283d22 , < 51f8af240aed903e988755af33d7491030b50ae9 (git)
Affected: 5a781ccbd19e4664babcbe4b4ead7aa2b9283d22 , < 17ab5f76f3899f67e5569722f334591f4b88b17b (git)
Affected: 5a781ccbd19e4664babcbe4b4ead7aa2b9283d22 , < f60d5c12e0551012cee5c272b0bcbcc78f7bb506 (git)
Affected: 5a781ccbd19e4664babcbe4b4ead7aa2b9283d22 , < 6ee5a7665a9080bcb05d703bf981a579436fd05e (git)
Affected: 5a781ccbd19e4664babcbe4b4ead7aa2b9283d22 , < 18d580cb00c55805633bae45e90cf22ed6b8e424 (git)
Affected: 5a781ccbd19e4664babcbe4b4ead7aa2b9283d22 , < e2b7ee61989f2d39df6c2cc06f9db1aea69bdb09 (git)
Affected: 5a781ccbd19e4664babcbe4b4ead7aa2b9283d22 , < 2dcebbd1ad2e180fe7b98bf346ced69a872e11e6 (git)
Affected: 5a781ccbd19e4664babcbe4b4ead7aa2b9283d22 , < e056e1dfcddca877dd46d704e8ec9860cfc9ec44 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.20
Unaffected: 0 , < 4.20 (semver)
Unaffected: 5.10.266 , ≤ 5.10.* (semver)
Unaffected: 5.15.217 , ≤ 5.15.* (semver)
Unaffected: 6.1.184 , ≤ 6.1.* (semver)
Unaffected: 6.6.145 , ≤ 6.6.* (semver)
Unaffected: 6.12.97 , ≤ 6.12.* (semver)
Unaffected: 6.18.40 , ≤ 6.18.* (semver)
Unaffected: 7.1.5 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/sched/sch_taprio.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "51f8af240aed903e988755af33d7491030b50ae9",
              "status": "affected",
              "version": "5a781ccbd19e4664babcbe4b4ead7aa2b9283d22",
              "versionType": "git"
            },
            {
              "lessThan": "17ab5f76f3899f67e5569722f334591f4b88b17b",
              "status": "affected",
              "version": "5a781ccbd19e4664babcbe4b4ead7aa2b9283d22",
              "versionType": "git"
            },
            {
              "lessThan": "f60d5c12e0551012cee5c272b0bcbcc78f7bb506",
              "status": "affected",
              "version": "5a781ccbd19e4664babcbe4b4ead7aa2b9283d22",
              "versionType": "git"
            },
            {
              "lessThan": "6ee5a7665a9080bcb05d703bf981a579436fd05e",
              "status": "affected",
              "version": "5a781ccbd19e4664babcbe4b4ead7aa2b9283d22",
              "versionType": "git"
            },
            {
              "lessThan": "18d580cb00c55805633bae45e90cf22ed6b8e424",
              "status": "affected",
              "version": "5a781ccbd19e4664babcbe4b4ead7aa2b9283d22",
              "versionType": "git"
            },
            {
              "lessThan": "e2b7ee61989f2d39df6c2cc06f9db1aea69bdb09",
              "status": "affected",
              "version": "5a781ccbd19e4664babcbe4b4ead7aa2b9283d22",
              "versionType": "git"
            },
            {
              "lessThan": "2dcebbd1ad2e180fe7b98bf346ced69a872e11e6",
              "status": "affected",
              "version": "5a781ccbd19e4664babcbe4b4ead7aa2b9283d22",
              "versionType": "git"
            },
            {
              "lessThan": "e056e1dfcddca877dd46d704e8ec9860cfc9ec44",
              "status": "affected",
              "version": "5a781ccbd19e4664babcbe4b4ead7aa2b9283d22",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/sched/sch_taprio.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.20"
            },
            {
              "lessThan": "4.20",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.266",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.217",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.184",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.266",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.217",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.184",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.145",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.97",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.40",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.5",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked\n\nWhen taprio\u0027s software path peeks a non-work-conserving child qdisc, the\nchild stashes the peeked skb in its gso_skb; taprio_dequeue_from_txq()\nthen takes the packet with a direct child -\u003edequeue() call, which ignores\nthat stash, orphans the peeked skb and desyncs the child\u0027s qlen/backlog.\nWith a qfq child this re-enters the child on an emptied list and\ndereferences NULL, panicking the kernel from softirq on ordinary egress.\n\nTake the packet through qdisc_dequeue_peeked(), as sch_red and sch_sfb\nnow do. The helper returns the child\u0027s stashed skb first and is a no-op\nwhen there is none, so a work-conserving child is unaffected and the\ngated path now consumes the skb whose length was charged to the budget."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The fault is in taprio\u0027s software egress dequeue path (`__dev_queue_xmit` \u2192 `__qdisc_run` \u2192 `taprio_dequeue` \u2192 `taprio_dequeue_from_txq`) during ordinary packet transmission in softirq; on TSN/automotive/industrial gateways where taprio+qfq is already deployed, any remote peer can trigger it by sending traffic that causes egress through the gated queues.\nAC:L - Once taprio is configured with a non-work-conserving child such as qfq on the software path (no full offload, TXTIME_ASSIST disabled), peek followed by the incorrect direct `dequeue()` deterministically orphans the stashed skb, desyncs qlen/backlog, and re-enters qfq on an emptied list; the attacker fully controls triggering traffic with no uncontrollable races.\nPR:N - Installing taprio and grafting a qfq child requires CAP_NET_ADMIN via RTM_NEWQDISC, but on reasonably deployed TSN/industrial systems where operators have already configured this stack, triggering the bug requires only the ability to send packets through the affected interface\u2014no credentials or capabilities on the victim host.\nUI:N - Exploitation needs only attacker-generated network traffic (or any local sender) once the qdisc hierarchy exists; no victim login, mount, file open, or other interactive action is required at trigger time.\nS:U - The NULL dereference kernel panic and qdisc qlen/backlog corruption occur entirely within the host kernel\u0027s security authority; this is not a VM escape, container breakout, or IOMMU/DMA boundary bypass.\nC:N - The published failure mode is a NULL pointer dereference in qfq after taprio mishandles the peek stash; although the peeked skb is orphaned and child counters desync, there is no use-after-free, out-of-bounds read, or demonstrated arbitrary kernel memory disclosure primitive.\nI:L - Calling `child-\u003eops-\u003edequeue()` instead of `qdisc_dequeue_peeked()` orphans the peek-stashed skb and corrupts the child qdisc\u0027s qlen/backlog accounting before the fatal qfq re-entry, enabling attacker-driven mis-accounting of queued traffic on the affected egress path prior to panic.\nA:H - With a qfq child the desynchronized dequeue path dereferences NULL from softirq during ordinary egress, panicking the kernel; the condition is repeatable whenever gated transmission exercises the peek/dequeue mismatch, causing total host availability loss."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-23T12:46:29.870Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/51f8af240aed903e988755af33d7491030b50ae9"
        },
        {
          "url": "https://git.kernel.org/stable/c/17ab5f76f3899f67e5569722f334591f4b88b17b"
        },
        {
          "url": "https://git.kernel.org/stable/c/f60d5c12e0551012cee5c272b0bcbcc78f7bb506"
        },
        {
          "url": "https://git.kernel.org/stable/c/6ee5a7665a9080bcb05d703bf981a579436fd05e"
        },
        {
          "url": "https://git.kernel.org/stable/c/18d580cb00c55805633bae45e90cf22ed6b8e424"
        },
        {
          "url": "https://git.kernel.org/stable/c/e2b7ee61989f2d39df6c2cc06f9db1aea69bdb09"
        },
        {
          "url": "https://git.kernel.org/stable/c/2dcebbd1ad2e180fe7b98bf346ced69a872e11e6"
        },
        {
          "url": "https://git.kernel.org/stable/c/e056e1dfcddca877dd46d704e8ec9860cfc9ec44"
        }
      ],
      "title": "net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-72035",
    "datePublished": "2026-08-15T05:51:56.374Z",
    "dateReserved": "2026-08-09T03:40:39.901Z",
    "dateUpdated": "2026-08-23T12:46:29.870Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-72035",
      "date": "2026-09-22",
      "epss": "0.00573",
      "percentile": "0.46085"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "net/sched/sch_taprio.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "51f8af240aed903e988755af33d7491030b50ae9",
                    "status": "affected",
                    "version": "5a781ccbd19e4664babcbe4b4ead7aa2b9283d22",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "17ab5f76f3899f67e5569722f334591f4b88b17b",
                    "status": "affected",
                    "version": "5a781ccbd19e4664babcbe4b4ead7aa2b9283d22",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "f60d5c12e0551012cee5c272b0bcbcc78f7bb506",
                    "status": "affected",
                    "version": "5a781ccbd19e4664babcbe4b4ead7aa2b9283d22",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "6ee5a7665a9080bcb05d703bf981a579436fd05e",
                    "status": "affected",
                    "version": "5a781ccbd19e4664babcbe4b4ead7aa2b9283d22",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "18d580cb00c55805633bae45e90cf22ed6b8e424",
                    "status": "affected",
                    "version": "5a781ccbd19e4664babcbe4b4ead7aa2b9283d22",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e2b7ee61989f2d39df6c2cc06f9db1aea69bdb09",
                    "status": "affected",
                    "version": "5a781ccbd19e4664babcbe4b4ead7aa2b9283d22",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "2dcebbd1ad2e180fe7b98bf346ced69a872e11e6",
                    "status": "affected",
                    "version": "5a781ccbd19e4664babcbe4b4ead7aa2b9283d22",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e056e1dfcddca877dd46d704e8ec9860cfc9ec44",
                    "status": "affected",
                    "version": "5a781ccbd19e4664babcbe4b4ead7aa2b9283d22",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "net/sched/sch_taprio.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "4.20"
                  },
                  {
                    "lessThan": "4.20",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.266",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.217",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.184",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.145",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.97",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.40",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.1.*",
                    "status": "unaffected",
                    "version": "7.1.5",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.2",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked\n\nWhen taprio\u0027s software path peeks a non-work-conserving child qdisc, the\nchild stashes the peeked skb in its gso_skb; taprio_dequeue_from_txq()\nthen takes the packet with a direct child -\u003edequeue() call, which ignores\nthat stash, orphans the peeked skb and desyncs the child\u0027s qlen/backlog.\nWith a qfq child this re-enters the child on an emptied list and\ndereferences NULL, panicking the kernel from softirq on ordinary egress.\n\nTake the packet through qdisc_dequeue_peeked(), as sch_red and sch_sfb\nnow do. The helper returns the child\u0027s stashed skb first and is a no-op\nwhen there is none, so a work-conserving child is unaffected and the\ngated path now consumes the skb whose length was charged to the budget."
          }
        ],
        "id": "CVE-2026-72035",
        "lastModified": "2026-08-23T13:16:37.730",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 4.2,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-08-15T06:21:12.497",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/17ab5f76f3899f67e5569722f334591f4b88b17b"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/18d580cb00c55805633bae45e90cf22ed6b8e424"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/2dcebbd1ad2e180fe7b98bf346ced69a872e11e6"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/51f8af240aed903e988755af33d7491030b50ae9"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/6ee5a7665a9080bcb05d703bf981a579436fd05e"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/e056e1dfcddca877dd46d704e8ec9860cfc9ec44"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/e2b7ee61989f2d39df6c2cc06f9db1aea69bdb09"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/f60d5c12e0551012cee5c272b0bcbcc78f7bb506"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-23T14:23:28+00:00",
      "cve": "CVE-2026-72035",
      "id": "CVE-2026-72035",
      "initial_release_date": "2026-08-15T00:00:00+00:00",
      "product_status:known_affected": "184",
      "product_status:known_not_affected": "90",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-72035.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-18T00:29:00Z",
      "cve": "CVE-2026-72035",
      "id": "CVE-2026-72035",
      "initial_release_date": "2026-08-27T00:24:09Z",
      "product_status:known_affected": "480",
      "product_status:known_not_affected": "239",
      "product_status:recommended": "107",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-72035",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-72035.json",
      "version": "10"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.