GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2025-68220 (GCVE-0-2025-68220)

Vulnerability from cvelistv5 – Published: 2025-12-16 13:57 – Updated: 2026-05-11 21:49
VLAI
Title
net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
Summary
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error Make knav_dma_open_channel consistently return NULL on error instead of ERR_PTR. Currently the header include/linux/soc/ti/knav_dma.h returns NULL when the driver is disabled, but the driver implementation does not even return NULL or ERR_PTR on failure, causing inconsistency in the users. This results in a crash in netcp_free_navigator_resources as followed (trimmed): Unhandled fault: alignment exception (0x221) at 0xfffffff2 [fffffff2] *pgd=80000800207003, *pmd=82ffda003, *pte=00000000 Internal error: : 221 [#1] SMP ARM Modules linked in: CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.17.0-rc7 #1 NONE Hardware name: Keystone PC is at knav_dma_close_channel+0x30/0x19c LR is at netcp_free_navigator_resources+0x2c/0x28c [... TRIM...] Call trace: knav_dma_close_channel from netcp_free_navigator_resources+0x2c/0x28c netcp_free_navigator_resources from netcp_ndo_open+0x430/0x46c netcp_ndo_open from __dev_open+0x114/0x29c __dev_open from __dev_change_flags+0x190/0x208 __dev_change_flags from netif_change_flags+0x1c/0x58 netif_change_flags from dev_change_flags+0x38/0xa0 dev_change_flags from ip_auto_config+0x2c4/0x11f0 ip_auto_config from do_one_initcall+0x58/0x200 do_one_initcall from kernel_init_freeable+0x1cc/0x238 kernel_init_freeable from kernel_init+0x1c/0x12c kernel_init from ret_from_fork+0x14/0x38 [... TRIM...] Standardize the error handling by making the function return NULL on all error conditions. The API is used in just the netcp_core.c so the impact is limited. Note, this change, in effect reverts commit 5b6cb43b4d62 ("net: ethernet: ti: netcp_core: return error while dma channel open issue"), but provides a less error prone implementation.
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 88139ed030583557751e279968e13e892ae10825 , < af6b10a13fc0aee37df4a8292414cc055c263fa3 (git)
Affected: 88139ed030583557751e279968e13e892ae10825 , < 8427218ecbd7f8559c37972e66cb0fa06e82353b (git)
Affected: 88139ed030583557751e279968e13e892ae10825 , < 3afeb909c3e2e0eb19b1e20506196e5f2d9c2259 (git)
Affected: 88139ed030583557751e279968e13e892ae10825 , < 2572c358ee434ce4b994472cceeb4043cbff5bc5 (git)
Affected: 88139ed030583557751e279968e13e892ae10825 , < 952637c5b9be64539cd0e13ef88db71a1df46373 (git)
Affected: 88139ed030583557751e279968e13e892ae10825 , < fbb53727ca789a8d27052aab4b77ca9e2a0fae2b (git)
Affected: 88139ed030583557751e279968e13e892ae10825 , < f9608637ecc165d7d6341df105aee44691461fb9 (git)
Affected: 88139ed030583557751e279968e13e892ae10825 , < 90a88306eb874fe4bbdd860e6c9787f5bbc588b5 (git)
guessed Create a notification for this product.
Linux Linux Affected: 3.18
Unaffected: 0 , < 3.18 (semver)
Unaffected: 5.4.302 , ≤ 5.4.* (semver)
Unaffected: 5.10.247 , ≤ 5.10.* (semver)
Unaffected: 5.15.197 , ≤ 5.15.* (semver)
Unaffected: 6.1.159 , ≤ 6.1.* (semver)
Unaffected: 6.6.118 , ≤ 6.6.* (semver)
Unaffected: 6.12.60 , ≤ 6.12.* (semver)
Unaffected: 6.17.10 , ≤ 6.17.* (semver)
Unaffected: 6.18 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/ti/netcp_core.c",
            "drivers/soc/ti/knav_dma.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "af6b10a13fc0aee37df4a8292414cc055c263fa3",
              "status": "affected",
              "version": "88139ed030583557751e279968e13e892ae10825",
              "versionType": "git"
            },
            {
              "lessThan": "8427218ecbd7f8559c37972e66cb0fa06e82353b",
              "status": "affected",
              "version": "88139ed030583557751e279968e13e892ae10825",
              "versionType": "git"
            },
            {
              "lessThan": "3afeb909c3e2e0eb19b1e20506196e5f2d9c2259",
              "status": "affected",
              "version": "88139ed030583557751e279968e13e892ae10825",
              "versionType": "git"
            },
            {
              "lessThan": "2572c358ee434ce4b994472cceeb4043cbff5bc5",
              "status": "affected",
              "version": "88139ed030583557751e279968e13e892ae10825",
              "versionType": "git"
            },
            {
              "lessThan": "952637c5b9be64539cd0e13ef88db71a1df46373",
              "status": "affected",
              "version": "88139ed030583557751e279968e13e892ae10825",
              "versionType": "git"
            },
            {
              "lessThan": "fbb53727ca789a8d27052aab4b77ca9e2a0fae2b",
              "status": "affected",
              "version": "88139ed030583557751e279968e13e892ae10825",
              "versionType": "git"
            },
            {
              "lessThan": "f9608637ecc165d7d6341df105aee44691461fb9",
              "status": "affected",
              "version": "88139ed030583557751e279968e13e892ae10825",
              "versionType": "git"
            },
            {
              "lessThan": "90a88306eb874fe4bbdd860e6c9787f5bbc588b5",
              "status": "affected",
              "version": "88139ed030583557751e279968e13e892ae10825",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/ti/netcp_core.c",
            "drivers/soc/ti/knav_dma.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.18"
            },
            {
              "lessThan": "3.18",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.302",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.247",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.197",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.159",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.118",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.60",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.17.*",
              "status": "unaffected",
              "version": "6.17.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.18",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.302",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.247",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.197",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.159",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.118",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.60",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17.10",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error\n\nMake knav_dma_open_channel consistently return NULL on error instead\nof ERR_PTR. Currently the header include/linux/soc/ti/knav_dma.h\nreturns NULL when the driver is disabled, but the driver\nimplementation does not even return NULL or ERR_PTR on failure,\ncausing inconsistency in the users. This results in a crash in\nnetcp_free_navigator_resources as followed (trimmed):\n\nUnhandled fault: alignment exception (0x221) at 0xfffffff2\n[fffffff2] *pgd=80000800207003, *pmd=82ffda003, *pte=00000000\nInternal error: : 221 [#1] SMP ARM\nModules linked in:\nCPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.17.0-rc7 #1 NONE\nHardware name: Keystone\nPC is at knav_dma_close_channel+0x30/0x19c\nLR is at netcp_free_navigator_resources+0x2c/0x28c\n\n[... TRIM...]\n\nCall trace:\n knav_dma_close_channel from netcp_free_navigator_resources+0x2c/0x28c\n netcp_free_navigator_resources from netcp_ndo_open+0x430/0x46c\n netcp_ndo_open from __dev_open+0x114/0x29c\n __dev_open from __dev_change_flags+0x190/0x208\n __dev_change_flags from netif_change_flags+0x1c/0x58\n netif_change_flags from dev_change_flags+0x38/0xa0\n dev_change_flags from ip_auto_config+0x2c4/0x11f0\n ip_auto_config from do_one_initcall+0x58/0x200\n do_one_initcall from kernel_init_freeable+0x1cc/0x238\n kernel_init_freeable from kernel_init+0x1c/0x12c\n kernel_init from ret_from_fork+0x14/0x38\n[... TRIM...]\n\nStandardize the error handling by making the function return NULL on\nall error conditions. The API is used in just the netcp_core.c so the\nimpact is limited.\n\nNote, this change, in effect reverts commit 5b6cb43b4d62 (\"net:\nethernet: ti: netcp_core: return error while dma channel open issue\"),\nbut provides a less error prone implementation."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T21:49:02.647Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/af6b10a13fc0aee37df4a8292414cc055c263fa3"
        },
        {
          "url": "https://git.kernel.org/stable/c/8427218ecbd7f8559c37972e66cb0fa06e82353b"
        },
        {
          "url": "https://git.kernel.org/stable/c/3afeb909c3e2e0eb19b1e20506196e5f2d9c2259"
        },
        {
          "url": "https://git.kernel.org/stable/c/2572c358ee434ce4b994472cceeb4043cbff5bc5"
        },
        {
          "url": "https://git.kernel.org/stable/c/952637c5b9be64539cd0e13ef88db71a1df46373"
        },
        {
          "url": "https://git.kernel.org/stable/c/fbb53727ca789a8d27052aab4b77ca9e2a0fae2b"
        },
        {
          "url": "https://git.kernel.org/stable/c/f9608637ecc165d7d6341df105aee44691461fb9"
        },
        {
          "url": "https://git.kernel.org/stable/c/90a88306eb874fe4bbdd860e6c9787f5bbc588b5"
        }
      ],
      "title": "net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-68220",
    "datePublished": "2025-12-16T13:57:14.142Z",
    "dateReserved": "2025-12-16T13:41:40.257Z",
    "dateUpdated": "2026-05-11T21:49:02.647Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-68220",
      "date": "2026-09-16",
      "epss": "0.0021",
      "percentile": "0.11382"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-68220\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-12-16T14:15:55.143\",\"lastModified\":\"2026-06-17T09:58:45.467\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error\\n\\nMake knav_dma_open_channel consistently return NULL on error instead\\nof ERR_PTR. Currently the header include/linux/soc/ti/knav_dma.h\\nreturns NULL when the driver is disabled, but the driver\\nimplementation does not even return NULL or ERR_PTR on failure,\\ncausing inconsistency in the users. This results in a crash in\\nnetcp_free_navigator_resources as followed (trimmed):\\n\\nUnhandled fault: alignment exception (0x221) at 0xfffffff2\\n[fffffff2] *pgd=80000800207003, *pmd=82ffda003, *pte=00000000\\nInternal error: : 221 [#1] SMP ARM\\nModules linked in:\\nCPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.17.0-rc7 #1 NONE\\nHardware name: Keystone\\nPC is at knav_dma_close_channel+0x30/0x19c\\nLR is at netcp_free_navigator_resources+0x2c/0x28c\\n\\n[... TRIM...]\\n\\nCall trace:\\n knav_dma_close_channel from netcp_free_navigator_resources+0x2c/0x28c\\n netcp_free_navigator_resources from netcp_ndo_open+0x430/0x46c\\n netcp_ndo_open from __dev_open+0x114/0x29c\\n __dev_open from __dev_change_flags+0x190/0x208\\n __dev_change_flags from netif_change_flags+0x1c/0x58\\n netif_change_flags from dev_change_flags+0x38/0xa0\\n dev_change_flags from ip_auto_config+0x2c4/0x11f0\\n ip_auto_config from do_one_initcall+0x58/0x200\\n do_one_initcall from kernel_init_freeable+0x1cc/0x238\\n kernel_init_freeable from kernel_init+0x1c/0x12c\\n kernel_init from ret_from_fork+0x14/0x38\\n[... TRIM...]\\n\\nStandardize the error handling by making the function return NULL on\\nall error conditions. The API is used in just the netcp_core.c so the\\nimpact is limited.\\n\\nNote, this change, in effect reverts commit 5b6cb43b4d62 (\\\"net:\\nethernet: ti: netcp_core: return error while dma channel open issue\\\"),\\nbut provides a less error prone implementation.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/net/ethernet/ti/netcp_core.c\",\"drivers/soc/ti/knav_dma.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"88139ed030583557751e279968e13e892ae10825\",\"lessThan\":\"af6b10a13fc0aee37df4a8292414cc055c263fa3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"88139ed030583557751e279968e13e892ae10825\",\"lessThan\":\"8427218ecbd7f8559c37972e66cb0fa06e82353b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"88139ed030583557751e279968e13e892ae10825\",\"lessThan\":\"3afeb909c3e2e0eb19b1e20506196e5f2d9c2259\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"88139ed030583557751e279968e13e892ae10825\",\"lessThan\":\"2572c358ee434ce4b994472cceeb4043cbff5bc5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"88139ed030583557751e279968e13e892ae10825\",\"lessThan\":\"952637c5b9be64539cd0e13ef88db71a1df46373\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"88139ed030583557751e279968e13e892ae10825\",\"lessThan\":\"fbb53727ca789a8d27052aab4b77ca9e2a0fae2b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"88139ed030583557751e279968e13e892ae10825\",\"lessThan\":\"f9608637ecc165d7d6341df105aee44691461fb9\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"88139ed030583557751e279968e13e892ae10825\",\"lessThan\":\"90a88306eb874fe4bbdd860e6c9787f5bbc588b5\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/net/ethernet/ti/netcp_core.c\",\"drivers/soc/ti/knav_dma.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"3.18\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"3.18\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.302\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.247\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.197\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.159\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.118\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.60\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.17.10\",\"lessThanOrEqual\":\"6.17.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/2572c358ee434ce4b994472cceeb4043cbff5bc5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/3afeb909c3e2e0eb19b1e20506196e5f2d9c2259\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/8427218ecbd7f8559c37972e66cb0fa06e82353b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/90a88306eb874fe4bbdd860e6c9787f5bbc588b5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/952637c5b9be64539cd0e13ef88db71a1df46373\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/af6b10a13fc0aee37df4a8292414cc055c263fa3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f9608637ecc165d7d6341df105aee44691461fb9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/fbb53727ca789a8d27052aab4b77ca9e2a0fae2b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-06-30T10:37:10+00:00",
      "cve": "CVE-2025-68220",
      "id": "CVE-2025-68220",
      "initial_release_date": "2025-12-16T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68220.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-30T01:43:30Z",
      "cve": "CVE-2025-68220",
      "id": "CVE-2025-68220",
      "initial_release_date": "2025-12-17T00:25:08Z",
      "product_status:known_not_affected": "560",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-68220",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-68220.json",
      "version": "16"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.