CVE-2026-46164 (GCVE-0-2026-46164)

Vulnerability from cvelistv5 – Published: 2026-05-28 09:36 – Updated: 2026-08-05 12:30
VLAI
Title
btrfs: fix double free in create_space_info_sub_group() error path
Summary
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free in create_space_info_sub_group() error path When kobject_init_and_add() fails, the call chain is: create_space_info_sub_group() -> btrfs_sysfs_add_space_info_type() -> kobject_init_and_add() -> failure -> kobject_put(&sub_group->kobj) -> space_info_release() -> kfree(sub_group) Then control returns to create_space_info_sub_group(), where: btrfs_sysfs_add_space_info_type() returns error -> kfree(sub_group) Thus, sub_group is freed twice. Keep parent->sub_group[index] = NULL for the failure path, but after btrfs_sysfs_add_space_info_type() has called kobject_put(), let the kobject release callback handle the cleanup.
Severity
7 (High)
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 64c7ddda83acfbaa0efb381a1928ce908c584607 , < c2d59527cba6d59f0d77a75c1101ab4e69758bea (git)
Affected: 0bd151ce4200ca847990e05cca29a76456982ca5 , < d2a675f2e238ec96c8e91e2718c1f910c9c8fb21 (git)
Affected: 190d5a7c4fe42b8c9aa46e3336389e7cb10395bb , < 14b22be1dd844383eb03af9b1ee3b6b25d32aeaf (git)
Affected: f92ee31e031c7819126d2febdda0c3e91f5d2eb9 , < dfd05a16b5c9d1d98b47905f37f2fccda52173d1 (git)
Affected: f92ee31e031c7819126d2febdda0c3e91f5d2eb9 , < 259af6857a1b4f1e9ef8b780353f9d11c26a22bd (git)
Affected: f92ee31e031c7819126d2febdda0c3e91f5d2eb9 , < a7449edf96143f192606ec8647e3167e1ecbd728 (git)
Affected: 6.1.162 , < 6.1.176 (semver)
Affected: 6.6.122 , < 6.6.141 (semver)
Affected: 6.12.67 , < 6.12.90 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.16
Unaffected: 0 , < 6.16 (semver)
Unaffected: 6.1.176 , ≤ 6.1.* (semver)
Unaffected: 6.6.141 , ≤ 6.6.* (semver)
Unaffected: 6.12.90 , ≤ 6.12.* (semver)
Unaffected: 6.18.32 , ≤ 6.18.* (semver)
Unaffected: 7.0.7 , ≤ 7.0.* (semver)
Unaffected: 7.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/btrfs/space-info.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "c2d59527cba6d59f0d77a75c1101ab4e69758bea",
              "status": "affected",
              "version": "64c7ddda83acfbaa0efb381a1928ce908c584607",
              "versionType": "git"
            },
            {
              "lessThan": "d2a675f2e238ec96c8e91e2718c1f910c9c8fb21",
              "status": "affected",
              "version": "0bd151ce4200ca847990e05cca29a76456982ca5",
              "versionType": "git"
            },
            {
              "lessThan": "14b22be1dd844383eb03af9b1ee3b6b25d32aeaf",
              "status": "affected",
              "version": "190d5a7c4fe42b8c9aa46e3336389e7cb10395bb",
              "versionType": "git"
            },
            {
              "lessThan": "dfd05a16b5c9d1d98b47905f37f2fccda52173d1",
              "status": "affected",
              "version": "f92ee31e031c7819126d2febdda0c3e91f5d2eb9",
              "versionType": "git"
            },
            {
              "lessThan": "259af6857a1b4f1e9ef8b780353f9d11c26a22bd",
              "status": "affected",
              "version": "f92ee31e031c7819126d2febdda0c3e91f5d2eb9",
              "versionType": "git"
            },
            {
              "lessThan": "a7449edf96143f192606ec8647e3167e1ecbd728",
              "status": "affected",
              "version": "f92ee31e031c7819126d2febdda0c3e91f5d2eb9",
              "versionType": "git"
            },
            {
              "lessThan": "6.1.176",
              "status": "affected",
              "version": "6.1.162",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.141",
              "status": "affected",
              "version": "6.6.122",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.90",
              "status": "affected",
              "version": "6.12.67",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/btrfs/space-info.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.16"
            },
            {
              "lessThan": "6.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.176",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.141",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.90",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.32",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.176",
                  "versionStartIncluding": "6.1.162",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.141",
                  "versionStartIncluding": "6.6.122",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.90",
                  "versionStartIncluding": "6.12.67",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.32",
                  "versionStartIncluding": "6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.7",
                  "versionStartIncluding": "6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "6.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix double free in create_space_info_sub_group() error path\n\nWhen kobject_init_and_add() fails, the call chain is:\n\ncreate_space_info_sub_group()\n-\u003e btrfs_sysfs_add_space_info_type()\n-\u003e kobject_init_and_add()\n-\u003e failure\n-\u003e kobject_put(\u0026sub_group-\u003ekobj)\n-\u003e space_info_release()\n-\u003e kfree(sub_group)\n\nThen control returns to create_space_info_sub_group(), where:\n\nbtrfs_sysfs_add_space_info_type() returns error\n-\u003e kfree(sub_group)\n\nThus, sub_group is freed twice.\n\nKeep parent-\u003esub_group[index] = NULL for the failure path, but after\nbtrfs_sysfs_add_space_info_type() has called kobject_put(), let the\nkobject release callback handle the cleanup."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable code is only reachable through `open_ctree()` during a btrfs mount; it is not exposed over any network protocol and requires local access to introduce and mount the filesystem.\nAC:H - The double-free only triggers when `kobject_init_and_add()` fails (effectively ENOMEM, which the attacker cannot reliably induce at that exact allocation), and additionally requires a rare zoned btrfs configuration \u2014 conditions beyond the attacker\u0027s control.\nPR:N - Following the kernel CNA crafted-image mount-bug model, the attacker needs no privileges to supply the malicious zoned btrfs image; the privileged mount operation is captured under User Interaction.\nUI:R - A victim must perform the mount of the attacker-supplied zoned btrfs filesystem for the vulnerable path to execute.\nS:U - The corruption stays within the kernel\u0027s own memory/security authority; there is no crossing of a VM, IOMMU, or sandbox boundary.\nC:H - A double-free corrupts the SLUB freelist and can be leveraged into a use-after-free granting attacker-controlled reads of freed/adjacent slab objects, enabling kernel memory disclosure.\nI:H - Freelist corruption from the double-free can be groomed into an arbitrary-write primitive, allowing modification of kernel data structures and control-flow hijacking.\nA:H - The double-free reliably corrupts slab state and (with freelist hardening) trips a BUG/panic, crashing the kernel."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:30:08.949Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/c2d59527cba6d59f0d77a75c1101ab4e69758bea"
        },
        {
          "url": "https://git.kernel.org/stable/c/d2a675f2e238ec96c8e91e2718c1f910c9c8fb21"
        },
        {
          "url": "https://git.kernel.org/stable/c/14b22be1dd844383eb03af9b1ee3b6b25d32aeaf"
        },
        {
          "url": "https://git.kernel.org/stable/c/dfd05a16b5c9d1d98b47905f37f2fccda52173d1"
        },
        {
          "url": "https://git.kernel.org/stable/c/259af6857a1b4f1e9ef8b780353f9d11c26a22bd"
        },
        {
          "url": "https://git.kernel.org/stable/c/a7449edf96143f192606ec8647e3167e1ecbd728"
        }
      ],
      "title": "btrfs: fix double free in create_space_info_sub_group() error path",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46164",
    "datePublished": "2026-05-28T09:36:19.810Z",
    "dateReserved": "2026-05-13T15:03:33.102Z",
    "dateUpdated": "2026-08-05T12:30:08.949Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-46164",
      "date": "2026-09-29",
      "epss": "0.00165",
      "percentile": "0.05055"
    },
    "microsoft_vex": {
      "current_release_date": "2026-06-09T14:41:15.000Z",
      "cve": "CVE-2026-46164",
      "id": "msrc_CVE-2026-46164",
      "initial_release_date": "2026-05-02T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "btrfs: fix double free in create_space_info_sub_group() error path",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-46164.json",
      "version": "3"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "fs/btrfs/space-info.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "c2d59527cba6d59f0d77a75c1101ab4e69758bea",
                    "status": "affected",
                    "version": "64c7ddda83acfbaa0efb381a1928ce908c584607",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "d2a675f2e238ec96c8e91e2718c1f910c9c8fb21",
                    "status": "affected",
                    "version": "0bd151ce4200ca847990e05cca29a76456982ca5",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "14b22be1dd844383eb03af9b1ee3b6b25d32aeaf",
                    "status": "affected",
                    "version": "190d5a7c4fe42b8c9aa46e3336389e7cb10395bb",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "dfd05a16b5c9d1d98b47905f37f2fccda52173d1",
                    "status": "affected",
                    "version": "f92ee31e031c7819126d2febdda0c3e91f5d2eb9",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "259af6857a1b4f1e9ef8b780353f9d11c26a22bd",
                    "status": "affected",
                    "version": "f92ee31e031c7819126d2febdda0c3e91f5d2eb9",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "a7449edf96143f192606ec8647e3167e1ecbd728",
                    "status": "affected",
                    "version": "f92ee31e031c7819126d2febdda0c3e91f5d2eb9",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "6.1.176",
                    "status": "affected",
                    "version": "6.1.162",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.6.141",
                    "status": "affected",
                    "version": "6.6.122",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.12.90",
                    "status": "affected",
                    "version": "6.12.67",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "fs/btrfs/space-info.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "6.16"
                  },
                  {
                    "lessThan": "6.16",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.176",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.141",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.90",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.32",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.0.*",
                    "status": "unaffected",
                    "version": "7.0.7",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.1",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CC09986F-7799-41B9-80E9-13187E3E33E7",
                    "versionEndExcluding": "6.2",
                    "versionStartIncluding": "6.1.162",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9DDACAED-DB5F-4215-90D1-9638039CD94F",
                    "versionEndExcluding": "6.6.141",
                    "versionStartIncluding": "6.6.122",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2B62EF25-7B21-4945-BFC3-D47BBC89F73F",
                    "versionEndExcluding": "6.12.90",
                    "versionStartIncluding": "6.12.67",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FF62AC18-3B67-498C-BE98-210B26013D50",
                    "versionEndExcluding": "6.18.32",
                    "versionStartIncluding": "6.16",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D0893CA7-9AE6-4DFE-AC75-48967D73AD8E",
                    "versionEndExcluding": "7.0.7",
                    "versionStartIncluding": "6.19",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix double free in create_space_info_sub_group() error path\n\nWhen kobject_init_and_add() fails, the call chain is:\n\ncreate_space_info_sub_group()\n-\u003e btrfs_sysfs_add_space_info_type()\n-\u003e kobject_init_and_add()\n-\u003e failure\n-\u003e kobject_put(\u0026sub_group-\u003ekobj)\n-\u003e space_info_release()\n-\u003e kfree(sub_group)\n\nThen control returns to create_space_info_sub_group(), where:\n\nbtrfs_sysfs_add_space_info_type() returns error\n-\u003e kfree(sub_group)\n\nThus, sub_group is freed twice.\n\nKeep parent-\u003esub_group[index] = NULL for the failure path, but after\nbtrfs_sysfs_add_space_info_type() has called kobject_put(), let the\nkobject release callback handle the cleanup."
          }
        ],
        "id": "CVE-2026-46164",
        "lastModified": "2026-06-19T13:16:34.477",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.0,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.0,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-05-28T10:16:32.043",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/14b22be1dd844383eb03af9b1ee3b6b25d32aeaf"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/259af6857a1b4f1e9ef8b780353f9d11c26a22bd"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/a7449edf96143f192606ec8647e3167e1ecbd728"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/c2d59527cba6d59f0d77a75c1101ab4e69758bea"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/d2a675f2e238ec96c8e91e2718c1f910c9c8fb21"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/dfd05a16b5c9d1d98b47905f37f2fccda52173d1"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-415"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-06-28T07:41:14+00:00",
      "cve": "CVE-2026-46164",
      "id": "CVE-2026-46164",
      "initial_release_date": "2026-05-28T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: btrfs: fix double free in create_space_info_sub_group() error path",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46164.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-06T01:17:44Z",
      "cve": "CVE-2026-46164",
      "id": "CVE-2026-46164",
      "initial_release_date": "2026-05-29T01:15:58Z",
      "product_status:known_not_affected": "293",
      "product_status:recommended": "4",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-46164",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46164.json",
      "version": "5"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.