CVE-2026-93170 (GCVE-0-2026-93170)

Vulnerability from cvelistv5 – Published: 2026-09-17 16:12 – Updated: 2026-09-18 17:56
VLAI
Title
dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers
Summary
In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers Fix a race condition in AXIDMA and MCDMA irq handlers where the channel could be incorrectly marked as idle and attempt spurious transfers when descriptors are still being processed. The issue occurs when: 1. Multiple descriptors are queued and active. 2. An interrupt fires after completing some descriptors. 3. xilinx_dma_complete_descriptor() moves completed descriptors to done_list. 4. Channel is marked idle and start_transfer() is called even though active_list still contains unprocessed descriptors. 5. This leads to premature transfer attempts and potential descriptor corruption or missed completions. Only mark the channel as idle and start new transfers when the active list is actually empty, ensuring proper channel state management and avoiding spurious transfer attempts.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: c0bba3a99f0709c24c2c7ada7cb098966b1d791f , < 7f4b989d7d87381927b98d64492f8dcf979f57ab (git)
Affected: c0bba3a99f0709c24c2c7ada7cb098966b1d791f , < 5459e02707b27a964ae72e028d3ff72a3b687c4a (git)
Affected: c0bba3a99f0709c24c2c7ada7cb098966b1d791f , < 425630e9eea1f9f8912b8c6abf01e0dab1e27917 (git)
Affected: c0bba3a99f0709c24c2c7ada7cb098966b1d791f , < fdaf297ab275c6efecac5e87669c31bc89b74297 (git)
Affected: c0bba3a99f0709c24c2c7ada7cb098966b1d791f , < c27d16fd2358b2fc3e1ffaca03afd11dc28630ea (git)
Affected: c0bba3a99f0709c24c2c7ada7cb098966b1d791f , < ec927657524be4438447944a58173c7baf7f2384 (git)
Affected: c0bba3a99f0709c24c2c7ada7cb098966b1d791f , < c3e943490ced0b9ad475844eda7661f6a9bcfb4a (git)
Affected: c0bba3a99f0709c24c2c7ada7cb098966b1d791f , < 0b6d055edb55ecadadf54e930c2b4fab76fa9a5a (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.7
Unaffected: 0 , < 4.7 (semver)
Unaffected: 5.10.270 , ≤ 5.10.* (semver)
Unaffected: 5.15.221 , ≤ 5.15.* (semver)
Unaffected: 6.1.188 , ≤ 6.1.* (semver)
Unaffected: 6.6.157 , ≤ 6.6.* (semver)
Unaffected: 6.12.110 , ≤ 6.12.* (semver)
Unaffected: 6.18.52 , ≤ 6.18.* (semver)
Unaffected: 7.2.6 , ≤ 7.2.* (semver)
Unaffected: 7.3-rc1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/dma/xilinx/xilinx_dma.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "7f4b989d7d87381927b98d64492f8dcf979f57ab",
              "status": "affected",
              "version": "c0bba3a99f0709c24c2c7ada7cb098966b1d791f",
              "versionType": "git"
            },
            {
              "lessThan": "5459e02707b27a964ae72e028d3ff72a3b687c4a",
              "status": "affected",
              "version": "c0bba3a99f0709c24c2c7ada7cb098966b1d791f",
              "versionType": "git"
            },
            {
              "lessThan": "425630e9eea1f9f8912b8c6abf01e0dab1e27917",
              "status": "affected",
              "version": "c0bba3a99f0709c24c2c7ada7cb098966b1d791f",
              "versionType": "git"
            },
            {
              "lessThan": "fdaf297ab275c6efecac5e87669c31bc89b74297",
              "status": "affected",
              "version": "c0bba3a99f0709c24c2c7ada7cb098966b1d791f",
              "versionType": "git"
            },
            {
              "lessThan": "c27d16fd2358b2fc3e1ffaca03afd11dc28630ea",
              "status": "affected",
              "version": "c0bba3a99f0709c24c2c7ada7cb098966b1d791f",
              "versionType": "git"
            },
            {
              "lessThan": "ec927657524be4438447944a58173c7baf7f2384",
              "status": "affected",
              "version": "c0bba3a99f0709c24c2c7ada7cb098966b1d791f",
              "versionType": "git"
            },
            {
              "lessThan": "c3e943490ced0b9ad475844eda7661f6a9bcfb4a",
              "status": "affected",
              "version": "c0bba3a99f0709c24c2c7ada7cb098966b1d791f",
              "versionType": "git"
            },
            {
              "lessThan": "0b6d055edb55ecadadf54e930c2b4fab76fa9a5a",
              "status": "affected",
              "version": "c0bba3a99f0709c24c2c7ada7cb098966b1d791f",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/dma/xilinx/xilinx_dma.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.7"
            },
            {
              "lessThan": "4.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.270",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.221",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.188",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.157",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.110",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.52",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.6",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3-rc1",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers\n\nFix a race condition in AXIDMA and MCDMA irq handlers where the channel\ncould be incorrectly marked as idle and attempt spurious transfers when\ndescriptors are still being processed.\n\nThe issue occurs when:\n1. Multiple descriptors are queued and active.\n2. An interrupt fires after completing some descriptors.\n3. xilinx_dma_complete_descriptor() moves completed descriptors to\ndone_list.\n4. Channel is marked idle and start_transfer() is called even though\n   active_list still contains unprocessed descriptors.\n5. This leads to premature transfer attempts and potential descriptor\n   corruption or missed completions.\n\nOnly mark the channel as idle and start new transfers when the active list\nis actually empty, ensuring proper channel state management and avoiding\nspurious transfer attempts."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is in xilinx_dma_irq_handler() and xilinx_mcdma_irq_handler(), installed via request_irq() and invoked on AXI DMA IOC/delay status in DMASR (or MCDMA CHAN_SR). Those handlers operate on locally built BD lists after dmaengine_submit() from clients such as axienet_start_xmit_dmaengine()/axienet_rx_submit_desc(); they do not parse a remote protocol field.\nAC:L - xilinx_dma_complete_descriptor() breaks at the first AXIDMA SG BD lacking XILINX_DMA_BD_COMP_MASK, so a FRM_CNT_IRQ/DLY_CNT_IRQ mid-batch leaves active_list non-empty and the old code always sets chan-\u003eidle and calls start_transfer(). An attacker who floods submits (axienet TX, or desc_pendingcount \u003e XILINX_DMA_COALESCE_MAX leaving stale coalesce) creates that mid-batch IRQ deterministically.\nPR:L - An unprivileged local user reaches the AXIDMA submit path without CAP_SYS_ADMIN: sending frames on an axienet interface (axienet_start_xmit_dmaengine \u2192 dmaengine_submit/issue_pending) or using an IIO dmaengine buffer. The kernel driver, not the user, calls dma_request_chan().\nUI:N - The attacker generates the multi-descriptor load and the completion IRQs themselves (their own packets or buffer I/O). No second user must mount media, open a victim file, or change configuration.\nS:U - chan-\u003eidle, active_list, and the pre-linked seg_v BD pool are kernel dmaengine state. A spurious CURDESC/TAILDESC update corrupts those kernel buffers and client SKBs/pages under the same kernel authority; it is not a VM, IOMMU, or sandbox escape.\nC:H - xilinx_dma_start_transfer() writes TAILDESC while remaining active_list BDs are still in flight. alloc_chan_resources() pre-links seg_v into a 512-entry circular next_desc ring, so the engine can walk into BDs already moved to done_list and recycled by xilinx_dma_chan_desc_cleanup(), DMA-reading leftover SKB/kernel pages.\nI:H - The same premature start_transfer() plus circular next_desc walk lets MM2S/S2MM continue through BDs that xilinx_dma_clean_hw_desc() zeroed or that the tasklet reused for a new transfer, so the engine DMA-writes into freed or wrong buffers \u2014 kernel memory corruption and a control-flow hijack primitive.\nA:H - Setting chan-\u003eidle and calling start_transfer() while active_list still holds uncompleted AXIDMA BDs causes missed completions, SG decode/halt errors (chan-\u003eerr in xilinx_dma_start()), and DMA into recycled descriptors that oops or permanently stall the channel."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-18T17:56:19.469Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/7f4b989d7d87381927b98d64492f8dcf979f57ab"
        },
        {
          "url": "https://git.kernel.org/stable/c/5459e02707b27a964ae72e028d3ff72a3b687c4a"
        },
        {
          "url": "https://git.kernel.org/stable/c/425630e9eea1f9f8912b8c6abf01e0dab1e27917"
        },
        {
          "url": "https://git.kernel.org/stable/c/fdaf297ab275c6efecac5e87669c31bc89b74297"
        },
        {
          "url": "https://git.kernel.org/stable/c/c27d16fd2358b2fc3e1ffaca03afd11dc28630ea"
        },
        {
          "url": "https://git.kernel.org/stable/c/ec927657524be4438447944a58173c7baf7f2384"
        },
        {
          "url": "https://git.kernel.org/stable/c/c3e943490ced0b9ad475844eda7661f6a9bcfb4a"
        },
        {
          "url": "https://git.kernel.org/stable/c/0b6d055edb55ecadadf54e930c2b4fab76fa9a5a"
        }
      ],
      "title": "dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-93170",
    "datePublished": "2026-09-17T16:12:01.249Z",
    "dateReserved": "2026-09-17T16:02:15.090Z",
    "dateUpdated": "2026-09-18T17:56:19.469Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-93170",
      "date": "2026-09-29",
      "epss": "0.00176",
      "percentile": "0.06372"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/dma/xilinx/xilinx_dma.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "7f4b989d7d87381927b98d64492f8dcf979f57ab",
                    "status": "affected",
                    "version": "c0bba3a99f0709c24c2c7ada7cb098966b1d791f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "5459e02707b27a964ae72e028d3ff72a3b687c4a",
                    "status": "affected",
                    "version": "c0bba3a99f0709c24c2c7ada7cb098966b1d791f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "425630e9eea1f9f8912b8c6abf01e0dab1e27917",
                    "status": "affected",
                    "version": "c0bba3a99f0709c24c2c7ada7cb098966b1d791f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "fdaf297ab275c6efecac5e87669c31bc89b74297",
                    "status": "affected",
                    "version": "c0bba3a99f0709c24c2c7ada7cb098966b1d791f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "c27d16fd2358b2fc3e1ffaca03afd11dc28630ea",
                    "status": "affected",
                    "version": "c0bba3a99f0709c24c2c7ada7cb098966b1d791f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "ec927657524be4438447944a58173c7baf7f2384",
                    "status": "affected",
                    "version": "c0bba3a99f0709c24c2c7ada7cb098966b1d791f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "c3e943490ced0b9ad475844eda7661f6a9bcfb4a",
                    "status": "affected",
                    "version": "c0bba3a99f0709c24c2c7ada7cb098966b1d791f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "0b6d055edb55ecadadf54e930c2b4fab76fa9a5a",
                    "status": "affected",
                    "version": "c0bba3a99f0709c24c2c7ada7cb098966b1d791f",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/dma/xilinx/xilinx_dma.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "4.7"
                  },
                  {
                    "lessThan": "4.7",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.270",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.221",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.188",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.157",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.110",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.52",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.2.*",
                    "status": "unaffected",
                    "version": "7.2.6",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.3-rc1",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers\n\nFix a race condition in AXIDMA and MCDMA irq handlers where the channel\ncould be incorrectly marked as idle and attempt spurious transfers when\ndescriptors are still being processed.\n\nThe issue occurs when:\n1. Multiple descriptors are queued and active.\n2. An interrupt fires after completing some descriptors.\n3. xilinx_dma_complete_descriptor() moves completed descriptors to\ndone_list.\n4. Channel is marked idle and start_transfer() is called even though\n   active_list still contains unprocessed descriptors.\n5. This leads to premature transfer attempts and potential descriptor\n   corruption or missed completions.\n\nOnly mark the channel as idle and start new transfers when the active list\nis actually empty, ensuring proper channel state management and avoiding\nspurious transfer attempts."
          }
        ],
        "id": "CVE-2026-93170",
        "lastModified": "2026-09-18T18:18:23.360",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-09-17T17:18:12.700",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/0b6d055edb55ecadadf54e930c2b4fab76fa9a5a"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/425630e9eea1f9f8912b8c6abf01e0dab1e27917"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/5459e02707b27a964ae72e028d3ff72a3b687c4a"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/7f4b989d7d87381927b98d64492f8dcf979f57ab"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/c27d16fd2358b2fc3e1ffaca03afd11dc28630ea"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/c3e943490ced0b9ad475844eda7661f6a9bcfb4a"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/ec927657524be4438447944a58173c7baf7f2384"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/fdaf297ab275c6efecac5e87669c31bc89b74297"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-22T16:23:30Z",
      "cve": "CVE-2026-93170",
      "id": "CVE-2026-93170",
      "initial_release_date": "2026-09-22T16:23:30Z",
      "product_status:known_affected": "263",
      "product_status:known_not_affected": "84",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-93170",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-93170.json",
      "version": "2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.