GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2025-38044 (GCVE-0-2025-38044)

Vulnerability from cvelistv5 – Published: 2025-06-18 09:33 – Updated: 2026-05-11 21:20
VLAI
Title
media: cx231xx: set device_caps for 417
Summary
In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: set device_caps for 417 The video_device for the MPEG encoder did not set device_caps. Add this, otherwise the video device can't be registered (you get a WARN_ON instead). Not seen before since currently 417 support is disabled, but I found this while experimenting with it.
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd , < 2ad41beb7df3bd63b209842d16765ec59dafe6e4 (git)
Affected: 8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd , < 0884dd3abbe80307a2d4cbdbe5e312be164f8adb (git)
Affected: 8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd , < c91447e35b9bea60bda4408c48e7891d14351021 (git)
Affected: 8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd , < 9d1a5be86dbe074bd8dd6bdd63a99d6bb66d5930 (git)
Affected: 8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd , < 5c9eca180a4235abd56cc7f7308ca72128d93dce (git)
Affected: 8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd , < 4731d5328f507ae8fd8a57abbca9119ec7a8d665 (git)
Affected: 8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd , < e43fd82bb2110bf9d13d800cdc49cceddfd0ede5 (git)
Affected: 8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd , < a79efc44b51432490538a55b9753a721f7d3ea42 (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.3
Unaffected: 0 , < 5.3 (semver)
Unaffected: 5.4.294 , ≤ 5.4.* (semver)
Unaffected: 5.10.238 , ≤ 5.10.* (semver)
Unaffected: 5.15.185 , ≤ 5.15.* (semver)
Unaffected: 6.1.141 , ≤ 6.1.* (semver)
Unaffected: 6.6.93 , ≤ 6.6.* (semver)
Unaffected: 6.12.31 , ≤ 6.12.* (semver)
Unaffected: 6.14.9 , ≤ 6.14.* (semver)
Unaffected: 6.15 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T17:33:20.343Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/usb/cx231xx/cx231xx-417.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "2ad41beb7df3bd63b209842d16765ec59dafe6e4",
              "status": "affected",
              "version": "8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd",
              "versionType": "git"
            },
            {
              "lessThan": "0884dd3abbe80307a2d4cbdbe5e312be164f8adb",
              "status": "affected",
              "version": "8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd",
              "versionType": "git"
            },
            {
              "lessThan": "c91447e35b9bea60bda4408c48e7891d14351021",
              "status": "affected",
              "version": "8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd",
              "versionType": "git"
            },
            {
              "lessThan": "9d1a5be86dbe074bd8dd6bdd63a99d6bb66d5930",
              "status": "affected",
              "version": "8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd",
              "versionType": "git"
            },
            {
              "lessThan": "5c9eca180a4235abd56cc7f7308ca72128d93dce",
              "status": "affected",
              "version": "8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd",
              "versionType": "git"
            },
            {
              "lessThan": "4731d5328f507ae8fd8a57abbca9119ec7a8d665",
              "status": "affected",
              "version": "8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd",
              "versionType": "git"
            },
            {
              "lessThan": "e43fd82bb2110bf9d13d800cdc49cceddfd0ede5",
              "status": "affected",
              "version": "8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd",
              "versionType": "git"
            },
            {
              "lessThan": "a79efc44b51432490538a55b9753a721f7d3ea42",
              "status": "affected",
              "version": "8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/usb/cx231xx/cx231xx-417.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.3"
            },
            {
              "lessThan": "5.3",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.294",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.238",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.185",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.141",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.93",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.31",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.14.*",
              "status": "unaffected",
              "version": "6.14.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.15",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.294",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.238",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.185",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.141",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.93",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.31",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.14.9",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: cx231xx: set device_caps for 417\n\nThe video_device for the MPEG encoder did not set device_caps.\n\nAdd this, otherwise the video device can\u0027t be registered (you get a\nWARN_ON instead).\n\nNot seen before since currently 417 support is disabled, but I found\nthis while experimenting with it."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T21:20:12.294Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/2ad41beb7df3bd63b209842d16765ec59dafe6e4"
        },
        {
          "url": "https://git.kernel.org/stable/c/0884dd3abbe80307a2d4cbdbe5e312be164f8adb"
        },
        {
          "url": "https://git.kernel.org/stable/c/c91447e35b9bea60bda4408c48e7891d14351021"
        },
        {
          "url": "https://git.kernel.org/stable/c/9d1a5be86dbe074bd8dd6bdd63a99d6bb66d5930"
        },
        {
          "url": "https://git.kernel.org/stable/c/5c9eca180a4235abd56cc7f7308ca72128d93dce"
        },
        {
          "url": "https://git.kernel.org/stable/c/4731d5328f507ae8fd8a57abbca9119ec7a8d665"
        },
        {
          "url": "https://git.kernel.org/stable/c/e43fd82bb2110bf9d13d800cdc49cceddfd0ede5"
        },
        {
          "url": "https://git.kernel.org/stable/c/a79efc44b51432490538a55b9753a721f7d3ea42"
        }
      ],
      "title": "media: cx231xx: set device_caps for 417",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-38044",
    "datePublished": "2025-06-18T09:33:28.669Z",
    "dateReserved": "2025-04-16T04:51:23.979Z",
    "dateUpdated": "2026-05-11T21:20:12.294Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-38044",
      "date": "2026-09-17",
      "epss": "0.00193",
      "percentile": "0.09178"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-38044\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-06-18T10:15:36.913\",\"lastModified\":\"2026-06-17T09:15:56.580\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmedia: cx231xx: set device_caps for 417\\n\\nThe video_device for the MPEG encoder did not set device_caps.\\n\\nAdd this, otherwise the video device can\u0027t be registered (you get a\\nWARN_ON instead).\\n\\nNot seen before since currently 417 support is disabled, but I found\\nthis while experimenting with it.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: cx231xx: se estableci\u00f3 device_caps para 417. El dispositivo de video del codificador MPEG no estableci\u00f3 device_caps. A\u00f1ada esto; de lo contrario, el dispositivo de video no se podr\u00e1 registrar (en su lugar, se obtendr\u00e1 un WARN_ON). No se hab\u00eda observado antes, ya que la compatibilidad con 417 est\u00e1 deshabilitada, pero lo encontr\u00e9 al experimentar con \u00e9l.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/media/usb/cx231xx/cx231xx-417.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd\",\"lessThan\":\"2ad41beb7df3bd63b209842d16765ec59dafe6e4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd\",\"lessThan\":\"0884dd3abbe80307a2d4cbdbe5e312be164f8adb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd\",\"lessThan\":\"c91447e35b9bea60bda4408c48e7891d14351021\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd\",\"lessThan\":\"9d1a5be86dbe074bd8dd6bdd63a99d6bb66d5930\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd\",\"lessThan\":\"5c9eca180a4235abd56cc7f7308ca72128d93dce\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd\",\"lessThan\":\"4731d5328f507ae8fd8a57abbca9119ec7a8d665\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd\",\"lessThan\":\"e43fd82bb2110bf9d13d800cdc49cceddfd0ede5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8c3854d03bd7b86e8f36e6d9b07b4a6bc20deccd\",\"lessThan\":\"a79efc44b51432490538a55b9753a721f7d3ea42\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/media/usb/cx231xx/cx231xx-417.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.3\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.3\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.294\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.238\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.185\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.141\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.93\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.31\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.14.9\",\"lessThanOrEqual\":\"6.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.15\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.4.294\",\"matchCriteriaId\":\"093AFCC1-07FE-4A32-A1F0-9B1F9197071E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.238\",\"matchCriteriaId\":\"0DAAEF7F-D560-47FC-8B65-20404DB82432\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.185\",\"matchCriteriaId\":\"E11820B2-24BD-40A8-9E6B-5BC447252321\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.141\",\"matchCriteriaId\":\"7CEA8241-A858-4009-B4EE-31C62772811A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.93\",\"matchCriteriaId\":\"50A4A9DE-24AB-4FB4-AACD-85D8EABB0571\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.31\",\"matchCriteriaId\":\"1AE98841-5774-4B45-A81C-2D188DB7E5C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.14.9\",\"matchCriteriaId\":\"A9B72DD1-715C-4101-A720-1C8D70044C06\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0884dd3abbe80307a2d4cbdbe5e312be164f8adb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2ad41beb7df3bd63b209842d16765ec59dafe6e4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4731d5328f507ae8fd8a57abbca9119ec7a8d665\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5c9eca180a4235abd56cc7f7308ca72128d93dce\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9d1a5be86dbe074bd8dd6bdd63a99d6bb66d5930\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a79efc44b51432490538a55b9753a721f7d3ea42\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c91447e35b9bea60bda4408c48e7891d14351021\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e43fd82bb2110bf9d13d800cdc49cceddfd0ede5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-30T00:22:49+00:00",
      "cve": "CVE-2025-38044",
      "id": "CVE-2025-38044",
      "initial_release_date": "2025-06-18T00:00:00+00:00",
      "product_status:known_affected": "260",
      "product_status:known_not_affected": "14",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: media: cx231xx: set device_caps for 417",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-38044.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.