GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2025-68369 (GCVE-0-2025-68369)

Vulnerability from cvelistv5 – Published: 2025-12-24 10:32 – Updated: 2026-08-05 12:11
VLAI
Title
ntfs3: init run lock for extend inode
Summary
In the Linux kernel, the following vulnerability has been resolved: ntfs3: init run lock for extend inode After setting the inode mode of $Extend to a regular file, executing the truncate system call will enter the do_truncate() routine, causing the run_lock uninitialized error reported by syzbot. Prior to patch 4e8011ffec79, if the inode mode of $Extend was not set to a regular file, the do_truncate() routine would not be entered. Add the run_lock initialization when loading $Extend. syzbot reported: INFO: trying to register non-static key. Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 assign_lock_key+0x133/0x150 kernel/locking/lockdep.c:984 register_lock_class+0x105/0x320 kernel/locking/lockdep.c:1299 __lock_acquire+0x99/0xd20 kernel/locking/lockdep.c:5112 lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 down_write+0x96/0x1f0 kernel/locking/rwsem.c:1590 ntfs_set_size+0x140/0x200 fs/ntfs3/inode.c:860 ntfs_extend+0x1d9/0x970 fs/ntfs3/file.c:387 ntfs_setattr+0x2e8/0xbe0 fs/ntfs3/file.c:808
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 63eb6730ce0604d3eacf036c2f68ea70b068317c , < 79c8a77b1782e2ace96d063be3c41ba540d1e20a (git)
Affected: 78d46f5276ed3589aaaa435580068c5b62efc921 , < 433d1f7c628c3cbdd7efce064d6c7acd072cf6c4 (git)
Affected: 17249b2a65274f73ed68bcd1604e08a60fd8a278 , < 907bf69c6b6ce5d038eec7a599d67b45b62624bc (git)
Affected: 37f65e68ba9852dc51c78dbb54a9881c3f0fe4f7 , < 6e17555728bc469d484c59db4a0abc65c19bc315 (git)
Affected: 57534db1bbc4ca772393bb7d92e69d5e7b9051cf , < 19164d8228317f3f1fe2662a9ba587cfe3b2d29e (git)
Affected: 4e8011ffec79717e5fdac43a7e79faf811a384b7 , < ab5e8ebeee1caa4fcf8be7d8d62c0a7165469076 (git)
Affected: 4e8011ffec79717e5fdac43a7e79faf811a384b7 , < be99c62ac7e7af514e4b13f83c891a3cccefaa48 (git)
Affected: 5.15.197 , < 5.15.198 (semver)
Affected: 6.1.159 , < 6.1.160 (semver)
Affected: 6.6.117 , < 6.6.120 (semver)
Affected: 6.12.58 , < 6.12.63 (semver)
Affected: 6.17.8 , < 6.17.13 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.18
Unaffected: 0 , < 6.18 (semver)
Unaffected: 5.15.198 , ≤ 5.15.* (semver)
Unaffected: 6.1.160 , ≤ 6.1.* (semver)
Unaffected: 6.6.120 , ≤ 6.6.* (semver)
Unaffected: 6.12.63 , ≤ 6.12.* (semver)
Unaffected: 6.17.13 , ≤ 6.17.* (semver)
Unaffected: 6.18.2 , ≤ 6.18.* (semver)
Unaffected: 6.19 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/ntfs3/inode.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "79c8a77b1782e2ace96d063be3c41ba540d1e20a",
              "status": "affected",
              "version": "63eb6730ce0604d3eacf036c2f68ea70b068317c",
              "versionType": "git"
            },
            {
              "lessThan": "433d1f7c628c3cbdd7efce064d6c7acd072cf6c4",
              "status": "affected",
              "version": "78d46f5276ed3589aaaa435580068c5b62efc921",
              "versionType": "git"
            },
            {
              "lessThan": "907bf69c6b6ce5d038eec7a599d67b45b62624bc",
              "status": "affected",
              "version": "17249b2a65274f73ed68bcd1604e08a60fd8a278",
              "versionType": "git"
            },
            {
              "lessThan": "6e17555728bc469d484c59db4a0abc65c19bc315",
              "status": "affected",
              "version": "37f65e68ba9852dc51c78dbb54a9881c3f0fe4f7",
              "versionType": "git"
            },
            {
              "lessThan": "19164d8228317f3f1fe2662a9ba587cfe3b2d29e",
              "status": "affected",
              "version": "57534db1bbc4ca772393bb7d92e69d5e7b9051cf",
              "versionType": "git"
            },
            {
              "lessThan": "ab5e8ebeee1caa4fcf8be7d8d62c0a7165469076",
              "status": "affected",
              "version": "4e8011ffec79717e5fdac43a7e79faf811a384b7",
              "versionType": "git"
            },
            {
              "lessThan": "be99c62ac7e7af514e4b13f83c891a3cccefaa48",
              "status": "affected",
              "version": "4e8011ffec79717e5fdac43a7e79faf811a384b7",
              "versionType": "git"
            },
            {
              "lessThan": "5.15.198",
              "status": "affected",
              "version": "5.15.197",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.160",
              "status": "affected",
              "version": "6.1.159",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.120",
              "status": "affected",
              "version": "6.6.117",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.63",
              "status": "affected",
              "version": "6.12.58",
              "versionType": "semver"
            },
            {
              "lessThan": "6.17.13",
              "status": "affected",
              "version": "6.17.8",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/ntfs3/inode.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.18"
            },
            {
              "lessThan": "6.18",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.198",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.160",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.120",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.63",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.17.*",
              "status": "unaffected",
              "version": "6.17.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.198",
                  "versionStartIncluding": "5.15.197",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.160",
                  "versionStartIncluding": "6.1.159",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.120",
                  "versionStartIncluding": "6.6.117",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.63",
                  "versionStartIncluding": "6.12.58",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17.13",
                  "versionStartIncluding": "6.17.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.2",
                  "versionStartIncluding": "6.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19",
                  "versionStartIncluding": "6.18",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nntfs3: init run lock for extend inode\n\nAfter setting the inode mode of $Extend to a regular file, executing the\ntruncate system call will enter the do_truncate() routine, causing the\nrun_lock uninitialized error reported by syzbot.\n\nPrior to patch 4e8011ffec79, if the inode mode of $Extend was not set to\na regular file, the do_truncate() routine would not be entered.\n\nAdd the run_lock initialization when loading $Extend.\n\nsyzbot reported:\nINFO: trying to register non-static key.\nCall Trace:\n dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120\n assign_lock_key+0x133/0x150 kernel/locking/lockdep.c:984\n register_lock_class+0x105/0x320 kernel/locking/lockdep.c:1299\n __lock_acquire+0x99/0xd20 kernel/locking/lockdep.c:5112\n lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868\n down_write+0x96/0x1f0 kernel/locking/rwsem.c:1590\n ntfs_set_size+0x140/0x200 fs/ntfs3/inode.c:860\n ntfs_extend+0x1d9/0x970 fs/ntfs3/file.c:387\n ntfs_setattr+0x2e8/0xbe0 fs/ntfs3/file.c:808"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - ntfs3 supports NFS export, allowing an RW-exported volume to be reached through NFS LOOKUP and SETATTR. The RPC path reaches nfsd_setattr(), notify_change(), ntfs_setattr(), and ntfs_set_size() without opening the metadata file.\nAC:L - Standard NTFS volumes contain affected $Extend children, and a size-increasing SETATTR directly reaches the bad lock. On PREEMPT_RT the zeroed rwsem deterministically blocks; no race or malformed filesystem is required.\nPR:N - A writable anonymous NFS export can map RPC_AUTH_NULL to the NTFS mount UID, after which nfsd\u0027s owner override permits ATTR_SIZE despite mode 000. The remote caller needs no target account or capability.\nUI:N - Once the NTFS volume is mounted and exported, the attacker triggers the flaw directly with network requests; no victim action is required.\nS:U - The flaw compromises availability within the kernel and its NFS service without crossing a VM, IOMMU, or separate security-authority boundary.\nC:N - ntfs_alloc_inode() zeroes the relevant union, so no uninitialized contents are disclosed. The missing initialization creates an invalid synchronization object but no memory-read primitive.\nI:N - There is no use-after-free, out-of-bounds access, type confusion, or attacker-controlled write. The RT path blocks before attr_set_size(), while affected metadata records lack the unnamed data attribute needed for a successful size change.\nA:H - On PREEMPT_RT, a valid rwsem requires READER_BIAS, but the zeroed lock causes down_write() to wait indefinitely after subtracting that bias. Repeated SETATTR requests can occupy the remaining nfsd threads behind the held inode lock, causing complete NFS-service loss."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:11:05.018Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/79c8a77b1782e2ace96d063be3c41ba540d1e20a"
        },
        {
          "url": "https://git.kernel.org/stable/c/433d1f7c628c3cbdd7efce064d6c7acd072cf6c4"
        },
        {
          "url": "https://git.kernel.org/stable/c/907bf69c6b6ce5d038eec7a599d67b45b62624bc"
        },
        {
          "url": "https://git.kernel.org/stable/c/6e17555728bc469d484c59db4a0abc65c19bc315"
        },
        {
          "url": "https://git.kernel.org/stable/c/19164d8228317f3f1fe2662a9ba587cfe3b2d29e"
        },
        {
          "url": "https://git.kernel.org/stable/c/ab5e8ebeee1caa4fcf8be7d8d62c0a7165469076"
        },
        {
          "url": "https://git.kernel.org/stable/c/be99c62ac7e7af514e4b13f83c891a3cccefaa48"
        }
      ],
      "title": "ntfs3: init run lock for extend inode",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-68369",
    "datePublished": "2025-12-24T10:32:55.440Z",
    "dateReserved": "2025-12-16T14:48:05.309Z",
    "dateUpdated": "2026-08-05T12:11:05.018Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-68369",
      "date": "2026-09-16",
      "epss": "0.00445",
      "percentile": "0.37835"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-68369\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-12-24T11:16:00.470\",\"lastModified\":\"2026-07-30T06:24:40.530\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nntfs3: init run lock for extend inode\\n\\nAfter setting the inode mode of $Extend to a regular file, executing the\\ntruncate system call will enter the do_truncate() routine, causing the\\nrun_lock uninitialized error reported by syzbot.\\n\\nPrior to patch 4e8011ffec79, if the inode mode of $Extend was not set to\\na regular file, the do_truncate() routine would not be entered.\\n\\nAdd the run_lock initialization when loading $Extend.\\n\\nsyzbot reported:\\nINFO: trying to register non-static key.\\nCall Trace:\\n dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120\\n assign_lock_key+0x133/0x150 kernel/locking/lockdep.c:984\\n register_lock_class+0x105/0x320 kernel/locking/lockdep.c:1299\\n __lock_acquire+0x99/0xd20 kernel/locking/lockdep.c:5112\\n lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868\\n down_write+0x96/0x1f0 kernel/locking/rwsem.c:1590\\n ntfs_set_size+0x140/0x200 fs/ntfs3/inode.c:860\\n ntfs_extend+0x1d9/0x970 fs/ntfs3/file.c:387\\n ntfs_setattr+0x2e8/0xbe0 fs/ntfs3/file.c:808\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/ntfs3/inode.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"63eb6730ce0604d3eacf036c2f68ea70b068317c\",\"lessThan\":\"79c8a77b1782e2ace96d063be3c41ba540d1e20a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"78d46f5276ed3589aaaa435580068c5b62efc921\",\"lessThan\":\"433d1f7c628c3cbdd7efce064d6c7acd072cf6c4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"17249b2a65274f73ed68bcd1604e08a60fd8a278\",\"lessThan\":\"907bf69c6b6ce5d038eec7a599d67b45b62624bc\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"37f65e68ba9852dc51c78dbb54a9881c3f0fe4f7\",\"lessThan\":\"6e17555728bc469d484c59db4a0abc65c19bc315\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"57534db1bbc4ca772393bb7d92e69d5e7b9051cf\",\"lessThan\":\"19164d8228317f3f1fe2662a9ba587cfe3b2d29e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4e8011ffec79717e5fdac43a7e79faf811a384b7\",\"lessThan\":\"ab5e8ebeee1caa4fcf8be7d8d62c0a7165469076\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4e8011ffec79717e5fdac43a7e79faf811a384b7\",\"lessThan\":\"be99c62ac7e7af514e4b13f83c891a3cccefaa48\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5.15.197\",\"lessThan\":\"5.15.198\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.1.159\",\"lessThan\":\"6.1.160\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.6.117\",\"lessThan\":\"6.6.120\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.12.58\",\"lessThan\":\"6.12.63\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.17.8\",\"lessThan\":\"6.17.13\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/ntfs3/inode.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.18\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.18\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.198\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.160\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.120\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.63\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.17.13\",\"lessThanOrEqual\":\"6.17.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.2\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/19164d8228317f3f1fe2662a9ba587cfe3b2d29e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/433d1f7c628c3cbdd7efce064d6c7acd072cf6c4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/6e17555728bc469d484c59db4a0abc65c19bc315\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/79c8a77b1782e2ace96d063be3c41ba540d1e20a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/907bf69c6b6ce5d038eec7a599d67b45b62624bc\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ab5e8ebeee1caa4fcf8be7d8d62c0a7165469076\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/be99c62ac7e7af514e4b13f83c891a3cccefaa48\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-13T17:54:52+00:00",
      "cve": "CVE-2025-68369",
      "id": "CVE-2025-68369",
      "initial_release_date": "2025-12-24T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Linux kernel ntfs3: Local Denial of Service due to uninitialized run lock",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68369.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.