GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-89656 (GCVE-0-2026-89656)

Vulnerability from cvelistv5 – Published: 2026-09-11 19:45 – Updated: 2026-09-14 12:01
VLAI
Title
libceph: reject buckets with mismatched CRUSH ids
Summary
In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crush_decode() stores bucket data by array slot, and the mapper later derives the per-bucket workspace index from the decoded bucket id. A malformed map can therefore make one bucket reuse another bucket's workspace by encoding an id different from -1 - slot. For uniform buckets, the second replica selection expands the source bucket's permutation into that aliased workspace buffer. If the source bucket is larger than the aliased bucket, the write runs past the smaller permutation array and can escape the kvmalloc'd CRUSH workspace. KASAN reports a slab OOB write of 4 bytes in bucket_perm_choose(). Reject buckets whose encoded id does not match their array slot. Valid CRUSH maps already use the canonical negative id corresponding to the bucket slot, so this restores the invariant expected by work->work[-1 - in->id] without changing valid map behavior.
Severity
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 66a0e2d579dbec5c676cfe446234ffebb267c564 , < ee59040d6ed1a5f8d10d27174b8f32c90ca8e89a (git)
Affected: 66a0e2d579dbec5c676cfe446234ffebb267c564 , < baad5875fdd2f5e248250fc3519bb045d64f1716 (git)
Affected: 66a0e2d579dbec5c676cfe446234ffebb267c564 , < 4aeb93daadf388e72073abc204312dd364eeb30a (git)
Affected: 66a0e2d579dbec5c676cfe446234ffebb267c564 , < 6e5c6ce252b1eccfd41670a5cf95ab44f7ba7022 (git)
Affected: 66a0e2d579dbec5c676cfe446234ffebb267c564 , < 3516a4131c4e45d62ee4e42e82c36930e8c1fbbd (git)
Affected: 66a0e2d579dbec5c676cfe446234ffebb267c564 , < 00562ccd4e88d092b9b851df50fad20442bfeb24 (git)
Affected: 66a0e2d579dbec5c676cfe446234ffebb267c564 , < 79900d978158b2d80eef952fc41b9e4dc58d7b83 (git)
Affected: 66a0e2d579dbec5c676cfe446234ffebb267c564 , < 3cde4a8302301679937474a5f7a851394cc1bd11 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.11
Unaffected: 0 , < 4.11 (semver)
Unaffected: 5.10.270 , ≤ 5.10.* (semver)
Unaffected: 5.15.221 , ≤ 5.15.* (semver)
Unaffected: 6.1.188 , ≤ 6.1.* (semver)
Unaffected: 6.6.157 , ≤ 6.6.* (semver)
Unaffected: 6.12.109 , ≤ 6.12.* (semver)
Unaffected: 6.18.50 , ≤ 6.18.* (semver)
Unaffected: 7.2.4 , ≤ 7.2.* (semver)
Unaffected: 7.3-rc1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ceph/osdmap.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ee59040d6ed1a5f8d10d27174b8f32c90ca8e89a",
              "status": "affected",
              "version": "66a0e2d579dbec5c676cfe446234ffebb267c564",
              "versionType": "git"
            },
            {
              "lessThan": "baad5875fdd2f5e248250fc3519bb045d64f1716",
              "status": "affected",
              "version": "66a0e2d579dbec5c676cfe446234ffebb267c564",
              "versionType": "git"
            },
            {
              "lessThan": "4aeb93daadf388e72073abc204312dd364eeb30a",
              "status": "affected",
              "version": "66a0e2d579dbec5c676cfe446234ffebb267c564",
              "versionType": "git"
            },
            {
              "lessThan": "6e5c6ce252b1eccfd41670a5cf95ab44f7ba7022",
              "status": "affected",
              "version": "66a0e2d579dbec5c676cfe446234ffebb267c564",
              "versionType": "git"
            },
            {
              "lessThan": "3516a4131c4e45d62ee4e42e82c36930e8c1fbbd",
              "status": "affected",
              "version": "66a0e2d579dbec5c676cfe446234ffebb267c564",
              "versionType": "git"
            },
            {
              "lessThan": "00562ccd4e88d092b9b851df50fad20442bfeb24",
              "status": "affected",
              "version": "66a0e2d579dbec5c676cfe446234ffebb267c564",
              "versionType": "git"
            },
            {
              "lessThan": "79900d978158b2d80eef952fc41b9e4dc58d7b83",
              "status": "affected",
              "version": "66a0e2d579dbec5c676cfe446234ffebb267c564",
              "versionType": "git"
            },
            {
              "lessThan": "3cde4a8302301679937474a5f7a851394cc1bd11",
              "status": "affected",
              "version": "66a0e2d579dbec5c676cfe446234ffebb267c564",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ceph/osdmap.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.11"
            },
            {
              "lessThan": "4.11",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.109",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.50",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.270",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.221",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.188",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.157",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.109",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.50",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.4",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3-rc1",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: reject buckets with mismatched CRUSH ids\n\ncrush_decode() stores bucket data by array slot, and the mapper later\nderives the per-bucket workspace index from the decoded bucket id. A\nmalformed map can therefore make one bucket reuse another bucket\u0027s\nworkspace by encoding an id different from -1 - slot.\n\nFor uniform buckets, the second replica selection expands the source\nbucket\u0027s permutation into that aliased workspace buffer. If the source\nbucket is larger than the aliased bucket, the write runs past the smaller\npermutation array and can escape the kvmalloc\u0027d CRUSH workspace. KASAN\nreports a slab OOB write of 4 bytes in bucket_perm_choose().\n\nReject buckets whose encoded id does not match their array slot. Valid\nCRUSH maps already use the canonical negative id corresponding to the\nbucket slot, so this restores the invariant expected by\nwork-\u003ework[-1 - in-\u003eid] without changing valid map behavior."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - Malformed CRUSH data arrives in CEPH_MSG_OSD_MAP over TCP from a Ceph monitor (mon_dispatch) or OSD (osd_dispatch); crush_decode() stores attacker-chosen bucket ids and crush_do_rule() later indexes the workspace from those ids with no local syscall.\nAC:L - A malicious monitor/OSD fully controls the OSD map and can encode a uniform bucket whose id aliases a smaller bucket\u0027s permutation buffer; the second replica expansion in bucket_perm_choose() then deterministically writes past the kvmalloc\u0027d CRUSH workspace without races or rare configs.\nPR:N - The attacker acts as the remote Ceph cluster peer delivering a forged osdmap to an already-connected kernel CephFS/RBD client and needs no local account, capabilities, or user-namespace privileges on the victim host.\nUI:N - Once a kernel Ceph client session exists, osdmap updates are applied automatically and scan_requests/kick_requests call calc_target()/crush_do_rule() without any further mount, open, or other victim interaction at exploit time.\nS:U - The out-of-bounds write corrupts kernel heap on the host running the Ceph client (the CRUSH workspace and adjacent kvmalloc memory), remaining in that kernel security domain rather than crossing a VM, container sandbox, or IOMMU boundary.\nC:H - Aliasing a large uniform bucket onto a smaller permutation array performs an attacker-sized slab out-of-bounds write into adjacent kernel heap, which can be leveraged as a memory-corruption primitive for arbitrary kernel reads and information disclosure.\nI:H - bucket_perm_choose() writes the source bucket\u0027s permutation past the aliased workspace into adjacent kvmalloc memory, giving a kernel heap out-of-bounds write that can be used for control-flow hijacking and arbitrary code execution.\nA:H - The slab out-of-bounds write reported by KASAN in bucket_perm_choose() can fault on unmapped adjacent memory or corrupt heap metadata, triggering a kernel oops or panic and complete loss of availability on affected Ceph client hosts."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T12:01:50.256Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ee59040d6ed1a5f8d10d27174b8f32c90ca8e89a"
        },
        {
          "url": "https://git.kernel.org/stable/c/baad5875fdd2f5e248250fc3519bb045d64f1716"
        },
        {
          "url": "https://git.kernel.org/stable/c/4aeb93daadf388e72073abc204312dd364eeb30a"
        },
        {
          "url": "https://git.kernel.org/stable/c/6e5c6ce252b1eccfd41670a5cf95ab44f7ba7022"
        },
        {
          "url": "https://git.kernel.org/stable/c/3516a4131c4e45d62ee4e42e82c36930e8c1fbbd"
        },
        {
          "url": "https://git.kernel.org/stable/c/00562ccd4e88d092b9b851df50fad20442bfeb24"
        },
        {
          "url": "https://git.kernel.org/stable/c/79900d978158b2d80eef952fc41b9e4dc58d7b83"
        },
        {
          "url": "https://git.kernel.org/stable/c/3cde4a8302301679937474a5f7a851394cc1bd11"
        }
      ],
      "title": "libceph: reject buckets with mismatched CRUSH ids",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-89656",
    "datePublished": "2026-09-11T19:45:45.483Z",
    "dateReserved": "2026-09-11T19:38:34.743Z",
    "dateUpdated": "2026-09-14T12:01:50.256Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-89656",
      "date": "2026-09-15",
      "epss": "0.00521",
      "percentile": "0.42765"
    },
    "microsoft_vex": {
      "current_release_date": "2026-09-14T14:54:21.000Z",
      "cve": "CVE-2026-89656",
      "id": "msrc_CVE-2026-89656",
      "initial_release_date": "2026-09-13T01:07:45.000Z",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "libceph: reject buckets with mismatched CRUSH ids",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-89656.json",
      "version": "2"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-89656\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-09-11T20:19:51.813\",\"lastModified\":\"2026-09-14T13:19:18.080\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nlibceph: reject buckets with mismatched CRUSH ids\\n\\ncrush_decode() stores bucket data by array slot, and the mapper later\\nderives the per-bucket workspace index from the decoded bucket id. A\\nmalformed map can therefore make one bucket reuse another bucket\u0027s\\nworkspace by encoding an id different from -1 - slot.\\n\\nFor uniform buckets, the second replica selection expands the source\\nbucket\u0027s permutation into that aliased workspace buffer. If the source\\nbucket is larger than the aliased bucket, the write runs past the smaller\\npermutation array and can escape the kvmalloc\u0027d CRUSH workspace. KASAN\\nreports a slab OOB write of 4 bytes in bucket_perm_choose().\\n\\nReject buckets whose encoded id does not match their array slot. Valid\\nCRUSH maps already use the canonical negative id corresponding to the\\nbucket slot, so this restores the invariant expected by\\nwork-\u003ework[-1 - in-\u003eid] without changing valid map behavior.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/ceph/osdmap.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"66a0e2d579dbec5c676cfe446234ffebb267c564\",\"lessThan\":\"ee59040d6ed1a5f8d10d27174b8f32c90ca8e89a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"66a0e2d579dbec5c676cfe446234ffebb267c564\",\"lessThan\":\"baad5875fdd2f5e248250fc3519bb045d64f1716\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"66a0e2d579dbec5c676cfe446234ffebb267c564\",\"lessThan\":\"4aeb93daadf388e72073abc204312dd364eeb30a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"66a0e2d579dbec5c676cfe446234ffebb267c564\",\"lessThan\":\"6e5c6ce252b1eccfd41670a5cf95ab44f7ba7022\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"66a0e2d579dbec5c676cfe446234ffebb267c564\",\"lessThan\":\"3516a4131c4e45d62ee4e42e82c36930e8c1fbbd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"66a0e2d579dbec5c676cfe446234ffebb267c564\",\"lessThan\":\"00562ccd4e88d092b9b851df50fad20442bfeb24\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"66a0e2d579dbec5c676cfe446234ffebb267c564\",\"lessThan\":\"79900d978158b2d80eef952fc41b9e4dc58d7b83\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"66a0e2d579dbec5c676cfe446234ffebb267c564\",\"lessThan\":\"3cde4a8302301679937474a5f7a851394cc1bd11\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/ceph/osdmap.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.11\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.11\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.270\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.221\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.188\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.157\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.109\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.50\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2.4\",\"lessThanOrEqual\":\"7.2.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.3-rc1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/00562ccd4e88d092b9b851df50fad20442bfeb24\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/3516a4131c4e45d62ee4e42e82c36930e8c1fbbd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/3cde4a8302301679937474a5f7a851394cc1bd11\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/4aeb93daadf388e72073abc204312dd364eeb30a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/6e5c6ce252b1eccfd41670a5cf95ab44f7ba7022\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/79900d978158b2d80eef952fc41b9e4dc58d7b83\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/baad5875fdd2f5e248250fc3519bb045d64f1716\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ee59040d6ed1a5f8d10d27174b8f32c90ca8e89a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-09-13T06:51:14+00:00",
      "cve": "CVE-2026-89656",
      "id": "CVE-2026-89656",
      "initial_release_date": "2026-09-11T19:45:45.483000+00:00",
      "product_status:known_affected": "2",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Linux kernel: libceph memory corruption via malformed CRUSH map",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89656.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "critical",
      "current_release_date": "2026-09-13T16:57:29Z",
      "cve": "CVE-2026-89656",
      "id": "CVE-2026-89656",
      "initial_release_date": "2026-09-12T16:24:08Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-89656",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-89656.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.