CVE-2026-90286 (GCVE-0-2026-90286)

Vulnerability from cvelistv5 – Published: 2026-09-17 16:08 – Updated: 2026-09-18 17:54
VLAI
Title
drm/amdgpu/gfx6: Use PFP on the compute queues too
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: Use PFP on the compute queues too On GFX6, the compute rings use the same CP path as the graphics ring. The only difference is that they don't support draw commands. (As opposed to GFX7 and newer which have a separate command parser that is called MEC for compute queues.) This means that we have to take into consideration that the PFP also exists on compute queues on GFX6: Use PFP for register writes on both graphics and compute queues. In the pipeline sync, use the PFP to wait for the previous fence (and not the ME) to prevent the PFP from starting to execute the next submission while the ME is still in the previous submission. After a VM flush, emit PFP_SYNC_ME on compute queues as well.
Severity
8.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 2cd46ad22383ab8372b86cdb5257589496099412 , < f37211b9c01433f0bbb4709d25df7a0257cf915b (git)
Affected: 2cd46ad22383ab8372b86cdb5257589496099412 , < 2aa869c6b23e0b1b7f39f762618852811d75deb9 (git)
Affected: 2cd46ad22383ab8372b86cdb5257589496099412 , < fbabc39b4f0fc771b00525ffd448be6a84355048 (git)
Affected: 2cd46ad22383ab8372b86cdb5257589496099412 , < b5d1d3e4519dc8f1b55d6b236848bed67b11a2e8 (git)
Affected: 2cd46ad22383ab8372b86cdb5257589496099412 , < e1d3018e3621c90cec070b6915836ae129656663 (git)
Affected: 2cd46ad22383ab8372b86cdb5257589496099412 , < 8d752f1bb73fabe5a425acbf5c767c0fe68bf3c5 (git)
Affected: 2cd46ad22383ab8372b86cdb5257589496099412 , < e399e9d7e291ccbeba6560fb8278c8d2aa744521 (git)
Affected: 2cd46ad22383ab8372b86cdb5257589496099412 , < 60f20946cd318518ddc2c0da12103c666b2b9564 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.9
Unaffected: 0 , < 4.9 (semver)
Unaffected: 5.10.270 , ≤ 5.10.* (semver)
Unaffected: 5.15.221 , ≤ 5.15.* (semver)
Unaffected: 6.1.188 , ≤ 6.1.* (semver)
Unaffected: 6.6.157 , ≤ 6.6.* (semver)
Unaffected: 6.12.110 , ≤ 6.12.* (semver)
Unaffected: 6.18.52 , ≤ 6.18.* (semver)
Unaffected: 7.2.6 , ≤ 7.2.* (semver)
Unaffected: 7.3-rc1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f37211b9c01433f0bbb4709d25df7a0257cf915b",
              "status": "affected",
              "version": "2cd46ad22383ab8372b86cdb5257589496099412",
              "versionType": "git"
            },
            {
              "lessThan": "2aa869c6b23e0b1b7f39f762618852811d75deb9",
              "status": "affected",
              "version": "2cd46ad22383ab8372b86cdb5257589496099412",
              "versionType": "git"
            },
            {
              "lessThan": "fbabc39b4f0fc771b00525ffd448be6a84355048",
              "status": "affected",
              "version": "2cd46ad22383ab8372b86cdb5257589496099412",
              "versionType": "git"
            },
            {
              "lessThan": "b5d1d3e4519dc8f1b55d6b236848bed67b11a2e8",
              "status": "affected",
              "version": "2cd46ad22383ab8372b86cdb5257589496099412",
              "versionType": "git"
            },
            {
              "lessThan": "e1d3018e3621c90cec070b6915836ae129656663",
              "status": "affected",
              "version": "2cd46ad22383ab8372b86cdb5257589496099412",
              "versionType": "git"
            },
            {
              "lessThan": "8d752f1bb73fabe5a425acbf5c767c0fe68bf3c5",
              "status": "affected",
              "version": "2cd46ad22383ab8372b86cdb5257589496099412",
              "versionType": "git"
            },
            {
              "lessThan": "e399e9d7e291ccbeba6560fb8278c8d2aa744521",
              "status": "affected",
              "version": "2cd46ad22383ab8372b86cdb5257589496099412",
              "versionType": "git"
            },
            {
              "lessThan": "60f20946cd318518ddc2c0da12103c666b2b9564",
              "status": "affected",
              "version": "2cd46ad22383ab8372b86cdb5257589496099412",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.9"
            },
            {
              "lessThan": "4.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.270",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.221",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.188",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.157",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.110",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.52",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.6",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3-rc1",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/gfx6: Use PFP on the compute queues too\n\nOn GFX6, the compute rings use the same CP path as\nthe graphics ring. The only difference is that they\ndon\u0027t support draw commands. (As opposed to GFX7 and\nnewer which have a separate command parser that is\ncalled MEC for compute queues.)\n\nThis means that we have to take into consideration\nthat the PFP also exists on compute queues on GFX6:\n\nUse PFP for register writes on both graphics and\ncompute queues.\n\nIn the pipeline sync, use the PFP to wait for the\nprevious fence (and not the ME) to prevent the PFP\nfrom starting to execute the next submission while\nthe ME is still in the previous submission.\n\nAfter a VM flush, emit PFP_SYNC_ME on compute\nqueues as well."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - gfx_v6_0_ring_emit_pipeline_sync/emit_vm_flush/emit_wreg run from local DRM_IOCTL_AMDGPU_CS (amdgpu_cs_ioctl \u2192 amdgpu_cs_submit \u2192 amdgpu_job_run \u2192 amdgpu_ib_schedule \u2192 amdgpu_vm_flush) on GFX6 CP_RB1/RB2 compute rings; the trigger is the caller\u2019s own CS IB on /dev/dri/renderD*, not a remote protocol message.\nAC:L - On GFX6, amdgpu_vm_check_compute_bug sets has_compute_vm_bug so every compute job with a VMID emits WAIT_REG_MEM via gfx_v6_0_ring_emit_pipeline_sync, and gmc_v6_0_emit_flush_gpu_tlb uses emit_wreg; usepfp was 0 so PFP never waits. The attacker submits sequential AMDGPU_HW_IP_COMPUTE IBs and PFP prefetching ahead of ME is normal hardware behavior, not a victim-timed race.\nPR:L - AMDGPU_CS is registered DRM_AUTH|DRM_RENDER_ALLOW in amdgpu_ioctls_kms; drm_ioctl_permit() does no capable() check for that path, so any unprivileged local user who can open the render node (typical render/video group) can create a ctx and submit compute IBs without init-namespace root.\nUI:N - The attacker opens their own /dev/dri/renderD* fd, issues DRM_IOCTL_AMDGPU_CTX/GEM_VA and DRM_IOCTL_AMDGPU_CS with ip_type=AMDGPU_HW_IP_COMPUTE, and trips gfx_v6_0_ring_emit_vm_flush themselves; no other user must mount, open, or interact with a GPU context.\nS:C - Without PFP_SYNC_ME after gfx_v6_0_ring_emit_vm_flush, and with WRITE_DATA of mmVM_CONTEXT*_PAGE_TABLE_BASE_ADDR/mmVM_INVALIDATE_REQUEST issued on ME, the PFP/CUs can DMA using stale GPUVM TLB entries after a VMID switch or unmap, crossing the GPUVM DMA isolation boundary that is supposed to confine each VMID to its current page tables.\nC:H - PACKET3_INDIRECT_BUFFER in gfx_v6_0_ring_emit_ib is fetched by PFP through GPUVM; if that fetch and the subsequent dispatch run before ME finishes gmc_v6_0_emit_flush_gpu_tlb, loads hit leftover translations to pages already reused by another process or the kernel, which is an arbitrary physical-memory read via GPU DMA.\nI:H - The same stale VM_CONTEXT PTEs let compute shaders and CP packets store through GPU VAs whose physical pages were remapped after GEM_VA unmap or VMID reuse, giving a GPU DMA write into recycled host pages and control-flow hijack via hostile packet bytes the PFP fetched from the wrong address.\nA:H - Invalid PFP reads of IB contents through a not-yet-invalidated TLB feed garbage into the SI CP (the commit\u2019s stated failure mode), causing VM faults, compute-ring hangs on CP_RB1/RB2, and amdgpu GPU reset that takes down the shared GFX6 device."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-18T17:54:16.537Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f37211b9c01433f0bbb4709d25df7a0257cf915b"
        },
        {
          "url": "https://git.kernel.org/stable/c/2aa869c6b23e0b1b7f39f762618852811d75deb9"
        },
        {
          "url": "https://git.kernel.org/stable/c/fbabc39b4f0fc771b00525ffd448be6a84355048"
        },
        {
          "url": "https://git.kernel.org/stable/c/b5d1d3e4519dc8f1b55d6b236848bed67b11a2e8"
        },
        {
          "url": "https://git.kernel.org/stable/c/e1d3018e3621c90cec070b6915836ae129656663"
        },
        {
          "url": "https://git.kernel.org/stable/c/8d752f1bb73fabe5a425acbf5c767c0fe68bf3c5"
        },
        {
          "url": "https://git.kernel.org/stable/c/e399e9d7e291ccbeba6560fb8278c8d2aa744521"
        },
        {
          "url": "https://git.kernel.org/stable/c/60f20946cd318518ddc2c0da12103c666b2b9564"
        }
      ],
      "title": "drm/amdgpu/gfx6: Use PFP on the compute queues too",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-90286",
    "datePublished": "2026-09-17T16:08:15.335Z",
    "dateReserved": "2026-09-11T19:38:34.797Z",
    "dateUpdated": "2026-09-18T17:54:16.537Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-90286",
      "date": "2026-09-25",
      "epss": "0.00176",
      "percentile": "0.0633"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "f37211b9c01433f0bbb4709d25df7a0257cf915b",
                    "status": "affected",
                    "version": "2cd46ad22383ab8372b86cdb5257589496099412",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "2aa869c6b23e0b1b7f39f762618852811d75deb9",
                    "status": "affected",
                    "version": "2cd46ad22383ab8372b86cdb5257589496099412",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "fbabc39b4f0fc771b00525ffd448be6a84355048",
                    "status": "affected",
                    "version": "2cd46ad22383ab8372b86cdb5257589496099412",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "b5d1d3e4519dc8f1b55d6b236848bed67b11a2e8",
                    "status": "affected",
                    "version": "2cd46ad22383ab8372b86cdb5257589496099412",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e1d3018e3621c90cec070b6915836ae129656663",
                    "status": "affected",
                    "version": "2cd46ad22383ab8372b86cdb5257589496099412",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "8d752f1bb73fabe5a425acbf5c767c0fe68bf3c5",
                    "status": "affected",
                    "version": "2cd46ad22383ab8372b86cdb5257589496099412",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e399e9d7e291ccbeba6560fb8278c8d2aa744521",
                    "status": "affected",
                    "version": "2cd46ad22383ab8372b86cdb5257589496099412",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "60f20946cd318518ddc2c0da12103c666b2b9564",
                    "status": "affected",
                    "version": "2cd46ad22383ab8372b86cdb5257589496099412",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "4.9"
                  },
                  {
                    "lessThan": "4.9",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.270",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.221",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.188",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.157",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.110",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.52",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.2.*",
                    "status": "unaffected",
                    "version": "7.2.6",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.3-rc1",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/gfx6: Use PFP on the compute queues too\n\nOn GFX6, the compute rings use the same CP path as\nthe graphics ring. The only difference is that they\ndon\u0027t support draw commands. (As opposed to GFX7 and\nnewer which have a separate command parser that is\ncalled MEC for compute queues.)\n\nThis means that we have to take into consideration\nthat the PFP also exists on compute queues on GFX6:\n\nUse PFP for register writes on both graphics and\ncompute queues.\n\nIn the pipeline sync, use the PFP to wait for the\nprevious fence (and not the ME) to prevent the PFP\nfrom starting to execute the next submission while\nthe ME is still in the previous submission.\n\nAfter a VM flush, emit PFP_SYNC_ME on compute\nqueues as well."
          }
        ],
        "id": "CVE-2026-90286",
        "lastModified": "2026-09-18T18:17:51.573",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.0,
              "impactScore": 6.0,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-09-17T17:17:25.500",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/2aa869c6b23e0b1b7f39f762618852811d75deb9"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/60f20946cd318518ddc2c0da12103c666b2b9564"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/8d752f1bb73fabe5a425acbf5c767c0fe68bf3c5"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/b5d1d3e4519dc8f1b55d6b236848bed67b11a2e8"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/e1d3018e3621c90cec070b6915836ae129656663"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/e399e9d7e291ccbeba6560fb8278c8d2aa744521"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/f37211b9c01433f0bbb4709d25df7a0257cf915b"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/fbabc39b4f0fc771b00525ffd448be6a84355048"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-21T16:29:08Z",
      "cve": "CVE-2026-90286",
      "id": "CVE-2026-90286",
      "initial_release_date": "2026-09-21T16:29:08Z",
      "product_status:known_affected": "231",
      "product_status:known_not_affected": "116",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-90286",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-90286.json",
      "version": "2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.