Vulnerability-Lookup

FKIE_CVE-2026-90379

Vulnerability from fkie_nvd - Published: 2026-09-17 17:17 - Updated: 2026-09-18 18:17

Severity

8.8 (High) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash When an AER error occurs and the bus is hung, the register reads return 0xFFFFFFFF, causing the DMA queue state to be corrupted and resulting in an invalid memory access when accessing q->desc[] or q->entry[]. Unable to handle kernel paging request at virtual address ffffffc01099eac0 pc : mt76_dma_add_buf+0x124/0x188 [mt76] lr : mt76_dma_rx_fill+0x11c/0x1d8 [mt76] sp : ffffffc016d9bbf0 x29: ffffffc016d9bc10 x28: 0000000000000000 x27: 0000000000000000 x26: ffffffb7855e50b8 x25: ffffffb80d04f000 x24: 0000000000000000 x23: 0000000000000ec0 x22: ffffffb796803648 x21: ffffffb796801f80 x20: ffffffb7968035f8 x19: 0000000000000ec0 x18: 0000000000000000 x17: 000000004ec00000 x16: 000000000ec00000 x15: ffffffc01099eac0 x14: 000000004ec00000 x13: 00000000ffc5a000 x12: ffffffc016d9bc32 x11: 00000000ffffffff x10: 0000000000000002 x9 : 0000000000000000 x8 : 000000000000b4ac x7 : 0000000000000a20 x6 : ffffffb6c1806400 x5 : 0000000000000000 x4 : ffffffb80d04f000 x3 : 0000000000000000 x2 : 0000000000000001 x1 : 000000000ec04000 x0 : ffffffb7968035f8 Call trace: mt76_dma_add_buf+0x124/0x188 [mt76 (HASH:1029 4)] mt76_dma_rx_reset+0xe8/0xfc [mt76 (HASH:1029 4)] mt7921_wpdma_reset+0x188/0x1b0 [mt7921e (HASH:ee48 5)] mt7921e_mac_reset+0x128/0x418 [mt7921e (HASH:ee48 5)] mt7921_mac_reset_work+0xac/0x1a8 [mt7921_common (HASH:f721 6)] process_one_work+0x188/0x514 worker_thread+0x12c/0x300 kthread+0x140/0x1fc ret_from_fork+0x10/0x30 Fix the invalid memory access by validating the DMA index read from the hardware before it is used as a queue index. An out-of-range value, such as the 0xFFFFFFFF returned while the bus is hung, is now clamped so it can no longer corrupt q->head or q->tail. In addition, check the bus_hung flag in mt7921_mac_reset_work() before attempting the reset sequence, reject MCU messages while the bus is hung, and install no-op bus operations when an unrecoverable AER error is detected, preventing further invalid hardware accesses. Due to hardware limitations - such as the lack of a connected hardware reset pin or the absence of host re-probe functionality - affected Wi-Fi devices may not fully recover to a normal operational state after certain errors, even with AER enabled.

References

	URL	Tags
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/670b3dc4e3713542a9f002d38fb9d1740b9e342b
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/915672c5ae32deeb72f4572856d123f314791136
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/f544bcba4721e1074e9bc6666f0ef4f8b96ddba8

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/mediatek/mt76/dma.c",
            "drivers/net/wireless/mediatek/mt76/mcu.c",
            "drivers/net/wireless/mediatek/mt76/mt76_connac.h",
            "drivers/net/wireless/mediatek/mt76/mt7921/mac.c",
            "drivers/net/wireless/mediatek/mt76/mt7921/pci.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "670b3dc4e3713542a9f002d38fb9d1740b9e342b",
              "status": "affected",
              "version": "17f1de56df051229988aab37e01971c9713c4a31",
              "versionType": "git"
            },
            {
              "lessThan": "f544bcba4721e1074e9bc6666f0ef4f8b96ddba8",
              "status": "affected",
              "version": "17f1de56df051229988aab37e01971c9713c4a31",
              "versionType": "git"
            },
            {
              "lessThan": "915672c5ae32deeb72f4572856d123f314791136",
              "status": "affected",
              "version": "17f1de56df051229988aab37e01971c9713c4a31",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/mediatek/mt76/dma.c",
            "drivers/net/wireless/mediatek/mt76/mcu.c",
            "drivers/net/wireless/mediatek/mt76/mt76_connac.h",
            "drivers/net/wireless/mediatek/mt76/mt7921/mac.c",
            "drivers/net/wireless/mediatek/mt76/mt7921/pci.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.16"
            },
            {
              "lessThan": "4.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash\n\nWhen an AER error occurs and the bus is hung, the register reads return\n0xFFFFFFFF, causing the DMA queue state to be corrupted and resulting in\nan invalid memory access when accessing q-\u003edesc[] or q-\u003eentry[].\n\nUnable to handle kernel paging request at virtual address\nffffffc01099eac0\npc : mt76_dma_add_buf+0x124/0x188 [mt76]\nlr : mt76_dma_rx_fill+0x11c/0x1d8 [mt76]\nsp : ffffffc016d9bbf0\nx29: ffffffc016d9bc10 x28: 0000000000000000\nx27: 0000000000000000 x26: ffffffb7855e50b8\nx25: ffffffb80d04f000 x24: 0000000000000000\nx23: 0000000000000ec0 x22: ffffffb796803648\nx21: ffffffb796801f80 x20: ffffffb7968035f8\nx19: 0000000000000ec0 x18: 0000000000000000\nx17: 000000004ec00000 x16: 000000000ec00000\nx15: ffffffc01099eac0 x14: 000000004ec00000\nx13: 00000000ffc5a000 x12: ffffffc016d9bc32\nx11: 00000000ffffffff x10: 0000000000000002\nx9 : 0000000000000000 x8 : 000000000000b4ac\nx7 : 0000000000000a20 x6 : ffffffb6c1806400\nx5 : 0000000000000000 x4 : ffffffb80d04f000\nx3 : 0000000000000000 x2 : 0000000000000001\nx1 : 000000000ec04000 x0 : ffffffb7968035f8\nCall trace:\n mt76_dma_add_buf+0x124/0x188 [mt76 (HASH:1029 4)]\n mt76_dma_rx_reset+0xe8/0xfc [mt76 (HASH:1029 4)]\n mt7921_wpdma_reset+0x188/0x1b0 [mt7921e (HASH:ee48 5)]\n mt7921e_mac_reset+0x128/0x418 [mt7921e (HASH:ee48 5)]\n mt7921_mac_reset_work+0xac/0x1a8 [mt7921_common (HASH:f721 6)]\n process_one_work+0x188/0x514\n worker_thread+0x12c/0x300\n kthread+0x140/0x1fc\n ret_from_fork+0x10/0x30\n\nFix the invalid memory access by validating the DMA index read from the\nhardware before it is used as a queue index. An out-of-range value, such\nas the 0xFFFFFFFF returned while the bus is hung, is now clamped so it can\nno longer corrupt q-\u003ehead or q-\u003etail. In addition, check the bus_hung flag\nin mt7921_mac_reset_work() before attempting the reset sequence, reject MCU\nmessages while the bus is hung, and install no-op bus operations when an\nunrecoverable AER error is detected, preventing further invalid hardware\naccesses.\n\nDue to hardware limitations - such as the lack of a connected hardware\nreset pin or the absence of host re-probe functionality - affected Wi-Fi\ndevices may not fully recover to a normal operational state after\ncertain errors, even with AER enabled."
    }
  ],
  "id": "CVE-2026-90379",
  "lastModified": "2026-09-18T18:17:55.917",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "ADJACENT_NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "type": "Secondary"
      }
    ]
  },
  "published": "2026-09-17T17:17:37.170",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/670b3dc4e3713542a9f002d38fb9d1740b9e342b"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/915672c5ae32deeb72f4572856d123f314791136"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/f544bcba4721e1074e9bc6666f0ef4f8b96ddba8"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Received"
}

CVE-2026-90379 (GCVE-0-2026-90379)

Vulnerability from cvelistv5 – Published: 2026-09-17 16:09 – Updated: 2026-09-18 17:54

Title

wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash

Summary

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Assigner

Linux mitre root

References

3 references

URL	Tags
https://git.kernel.org/stable/c/670b3dc4e3713542a…
https://git.kernel.org/stable/c/f544bcba4721e1074…
https://git.kernel.org/stable/c/915672c5ae32deeb7…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 17f1de56df051229988aab37e01971c9713c4a31 , < 670b3dc4e3713542a9f002d38fb9d1740b9e342b (git) Affected: 17f1de56df051229988aab37e01971c9713c4a31 , < f544bcba4721e1074e9bc6666f0ef4f8b96ddba8 (git) Affected: 17f1de56df051229988aab37e01971c9713c4a31 , < 915672c5ae32deeb72f4572856d123f314791136 (git)
Linux	Linux	Affected: 4.16 Unaffected: 0 , < 4.16 (semver) Unaffected: 6.18.52 , ≤ 6.18.* (semver) Unaffected: 7.2.6 , ≤ 7.2.* (semver) Unaffected: 7.3-rc1 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/mediatek/mt76/dma.c",
            "drivers/net/wireless/mediatek/mt76/mcu.c",
            "drivers/net/wireless/mediatek/mt76/mt76_connac.h",
            "drivers/net/wireless/mediatek/mt76/mt7921/mac.c",
            "drivers/net/wireless/mediatek/mt76/mt7921/pci.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "670b3dc4e3713542a9f002d38fb9d1740b9e342b",
              "status": "affected",
              "version": "17f1de56df051229988aab37e01971c9713c4a31",
              "versionType": "git"
            },
            {
              "lessThan": "f544bcba4721e1074e9bc6666f0ef4f8b96ddba8",
              "status": "affected",
              "version": "17f1de56df051229988aab37e01971c9713c4a31",
              "versionType": "git"
            },
            {
              "lessThan": "915672c5ae32deeb72f4572856d123f314791136",
              "status": "affected",
              "version": "17f1de56df051229988aab37e01971c9713c4a31",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/mediatek/mt76/dma.c",
            "drivers/net/wireless/mediatek/mt76/mcu.c",
            "drivers/net/wireless/mediatek/mt76/mt76_connac.h",
            "drivers/net/wireless/mediatek/mt76/mt7921/mac.c",
            "drivers/net/wireless/mediatek/mt76/mt7921/pci.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.16"
            },
            {
              "lessThan": "4.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.52",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.6",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3-rc1",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash\n\nWhen an AER error occurs and the bus is hung, the register reads return\n0xFFFFFFFF, causing the DMA queue state to be corrupted and resulting in\nan invalid memory access when accessing q-\u003edesc[] or q-\u003eentry[].\n\nUnable to handle kernel paging request at virtual address\nffffffc01099eac0\npc : mt76_dma_add_buf+0x124/0x188 [mt76]\nlr : mt76_dma_rx_fill+0x11c/0x1d8 [mt76]\nsp : ffffffc016d9bbf0\nx29: ffffffc016d9bc10 x28: 0000000000000000\nx27: 0000000000000000 x26: ffffffb7855e50b8\nx25: ffffffb80d04f000 x24: 0000000000000000\nx23: 0000000000000ec0 x22: ffffffb796803648\nx21: ffffffb796801f80 x20: ffffffb7968035f8\nx19: 0000000000000ec0 x18: 0000000000000000\nx17: 000000004ec00000 x16: 000000000ec00000\nx15: ffffffc01099eac0 x14: 000000004ec00000\nx13: 00000000ffc5a000 x12: ffffffc016d9bc32\nx11: 00000000ffffffff x10: 0000000000000002\nx9 : 0000000000000000 x8 : 000000000000b4ac\nx7 : 0000000000000a20 x6 : ffffffb6c1806400\nx5 : 0000000000000000 x4 : ffffffb80d04f000\nx3 : 0000000000000000 x2 : 0000000000000001\nx1 : 000000000ec04000 x0 : ffffffb7968035f8\nCall trace:\n mt76_dma_add_buf+0x124/0x188 [mt76 (HASH:1029 4)]\n mt76_dma_rx_reset+0xe8/0xfc [mt76 (HASH:1029 4)]\n mt7921_wpdma_reset+0x188/0x1b0 [mt7921e (HASH:ee48 5)]\n mt7921e_mac_reset+0x128/0x418 [mt7921e (HASH:ee48 5)]\n mt7921_mac_reset_work+0xac/0x1a8 [mt7921_common (HASH:f721 6)]\n process_one_work+0x188/0x514\n worker_thread+0x12c/0x300\n kthread+0x140/0x1fc\n ret_from_fork+0x10/0x30\n\nFix the invalid memory access by validating the DMA index read from the\nhardware before it is used as a queue index. An out-of-range value, such\nas the 0xFFFFFFFF returned while the bus is hung, is now clamped so it can\nno longer corrupt q-\u003ehead or q-\u003etail. In addition, check the bus_hung flag\nin mt7921_mac_reset_work() before attempting the reset sequence, reject MCU\nmessages while the bus is hung, and install no-op bus operations when an\nunrecoverable AER error is detected, preventing further invalid hardware\naccesses.\n\nDue to hardware limitations - such as the lack of a connected hardware\nreset pin or the absence of host re-probe functionality - affected Wi-Fi\ndevices may not fully recover to a normal operational state after\ncertain errors, even with AER enabled."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:A - mt76_dma_sync_idx() sets q-\u003ehead from Q_READ(q, dma_idx) (readl of the mt7921 PCIe DMA ring). A hung endpoint returns 0xFFFFFFFF, truncated to u16 0xFFFF. That register is the wireless DMA engine index; PCIe AER/completion-timeout on this WiFi adapter is an adjacent-radio event, not a parsed routable packet, so the vector is Adjacent.\nAC:L - Once dma_idx reads 0xFFFFFFFF, mt76_dma_sync_idx() stores 0xFFFF in q-\u003ehead with no bounds check, and mt76_dma_rx_reset() then calls mt76_dma_rx_fill() which indexes q-\u003edesc[]/q-\u003eentry[] at that value. MCU timeout in mt7921_mcu_parse_response() queues mt792x_reset() automatically when the hung device stops completing commands; no race is required.\nPR:N - mt7921_mcu_parse_response() queues reset on MCU timeout and mt7921_mac_reset_work() runs mt7921e_mac_reset() with no capability, credential, or association check. An adjacent attacker who hangs the mt7921 endpoint needs no host account; the 0600 chip_reset debugfs file is not on this path.\nUI:N - mt7921_mac_reset_work() is scheduled onto the mt76 workqueue by mt792x_reset() after an MCU timeout; the OOB then occurs in kernel context during mt76_dma_rx_reset(). No victim mount, file open, or other interactive action is required beyond the interface being up.\nS:U - The out-of-bounds stores in mt76_dma_add_buf()/mt76_dma_add_rx_buf() target host kernel q-\u003edesc[] and q-\u003eentry[] allocated by dmam_alloc_coherent/devm_kzalloc. This stays inside the kernel\u0027s own authority and does not bypass a VM, IOMMU, or sandbox boundary.\nC:H - q-\u003ehead is a u16 loaded from the hung-bus dma_idx (0xFFFF) while MT7921_RX_RING_SIZE is 1536, so mt76_dma_add_rx_buf() reads q-\u003eentry[0xFFFF] and q-\u003edesc[0xFFFF] far past the allocated arrays. That out-of-bounds access of kernel DMA-descriptor and queue-entry memory is High confidentiality per OOB guidance.\nI:H - mt76_dma_add_buf() WRITE_ONCE-stores buf0/buf1/ctrl/info into q-\u003edesc[0xFFFF] and writes dma_addr/len into q-\u003eentry[0xFFFF], then leaves q-\u003etail at 0xFFFF so later dequeue continues the same out-of-bounds writes. An out-of-bounds write of kernel DMA state is High integrity.\nA:H - The in-tree crash is a kernel paging request at mt76_dma_add_buf() called from mt76_dma_rx_fill() during mt76_dma_rx_reset() on the mt7921e_mac_reset \u003c- mt7921_mac_reset_work path, which oopses/panics the host (High availability)."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-18T17:54:55.903Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/670b3dc4e3713542a9f002d38fb9d1740b9e342b"
        },
        {
          "url": "https://git.kernel.org/stable/c/f544bcba4721e1074e9bc6666f0ef4f8b96ddba8"
        },
        {
          "url": "https://git.kernel.org/stable/c/915672c5ae32deeb72f4572856d123f314791136"
        }
      ],
      "title": "wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-90379",
    "datePublished": "2026-09-17T16:09:17.297Z",
    "dateReserved": "2026-09-11T19:38:34.809Z",
    "dateUpdated": "2026-09-18T17:54:55.903Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

FKIE_CVE-2026-90379

CVE-2026-90379 (GCVE-0-2026-90379)

Tags

Sightings

Nomenclature

Related by attack behaviour