CVE-2024-50096 (GCVE-0-2024-50096)
Vulnerability from cvelistv5
Published
2024-11-05 17:04
Modified
2026-08-05 11:41
Summary
In the Linux kernel, the following vulnerability has been resolved: nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error The `nouveau_dmem_copy_one` function ensures that the copy push command is sent to the device firmware but does not track whether it was executed successfully. In the case of a copy error (e.g., firmware or hardware failure), the copy push command will be sent via the firmware channel, and `nouveau_dmem_copy_one` will likely report success, leading to the `migrate_to_ram` function returning a dirty HIGH_USER page to the user. This can result in a security vulnerability, as a HIGH_USER page that may contain sensitive or corrupted data could be returned to the user. To prevent this vulnerability, we allocate a zero page. Thus, in case of an error, a non-dirty (zero) page will be returned to the user.
Impacted products
Vendor Product Version
Linux Linux Version: 5be73b690875f7eb2d2defb54ccd7f2f12074984
Version: 5be73b690875f7eb2d2defb54ccd7f2f12074984
Version: 5be73b690875f7eb2d2defb54ccd7f2f12074984
Version: 5be73b690875f7eb2d2defb54ccd7f2f12074984
Version: 5be73b690875f7eb2d2defb54ccd7f2f12074984
Version: 5be73b690875f7eb2d2defb54ccd7f2f12074984
Version: 5be73b690875f7eb2d2defb54ccd7f2f12074984
Create a notification for this product.
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-50096",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-01T20:22:49.170573Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-01T20:27:19.250Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:25:26.216Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/nouveau/nouveau_dmem.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "fd9bb7e996bab9b9049fffe3f3d3b50dee191d27",
              "status": "affected",
              "version": "5be73b690875f7eb2d2defb54ccd7f2f12074984",
              "versionType": "git"
            },
            {
              "lessThan": "73f75d2b5aee5a735cf64b8ab4543d5c20dbbdd9",
              "status": "affected",
              "version": "5be73b690875f7eb2d2defb54ccd7f2f12074984",
              "versionType": "git"
            },
            {
              "lessThan": "8c3de9282dde21ce3c1bf1bde3166a4510547aa9",
              "status": "affected",
              "version": "5be73b690875f7eb2d2defb54ccd7f2f12074984",
              "versionType": "git"
            },
            {
              "lessThan": "614bfb2050982d23d53d0d51c4079dba0437c883",
              "status": "affected",
              "version": "5be73b690875f7eb2d2defb54ccd7f2f12074984",
              "versionType": "git"
            },
            {
              "lessThan": "697e3ddcf1f8b68bd531fc34eead27c000bdf3e1",
              "status": "affected",
              "version": "5be73b690875f7eb2d2defb54ccd7f2f12074984",
              "versionType": "git"
            },
            {
              "lessThan": "ab4d113b6718b076046018292f821d5aa4b844f8",
              "status": "affected",
              "version": "5be73b690875f7eb2d2defb54ccd7f2f12074984",
              "versionType": "git"
            },
            {
              "lessThan": "835745a377a4519decd1a36d6b926e369b3033e2",
              "status": "affected",
              "version": "5be73b690875f7eb2d2defb54ccd7f2f12074984",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/nouveau/nouveau_dmem.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.1"
            },
            {
              "lessThan": "5.1",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.285",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.227",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.168",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.113",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.57",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.11.*",
              "status": "unaffected",
              "version": "6.11.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.12",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.285",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.227",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.168",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.113",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.57",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.4",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error\n\nThe `nouveau_dmem_copy_one` function ensures that the copy push command is\nsent to the device firmware but does not track whether it was executed\nsuccessfully.\n\nIn the case of a copy error (e.g., firmware or hardware failure), the\ncopy push command will be sent via the firmware channel, and\n`nouveau_dmem_copy_one` will likely report success, leading to the\n`migrate_to_ram` function returning a dirty HIGH_USER page to the user.\n\nThis can result in a security vulnerability, as a HIGH_USER page that may\ncontain sensitive or corrupted data could be returned to the user.\n\nTo prevent this vulnerability, we allocate a zero page. Thus, in case of\nan error, a non-dirty (zero) page will be returned to the user."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - Exploitation requires local access to the nouveau render node (/dev/dri/renderD*) to issue DRM_IOCTL_NOUVEAU_SVM_INIT/SVM_BIND and then fault on the migrated range from the attacker\u0027s own address space. There is no network-facing path to nouveau_dmem_migrate_to_ram().\nAC:L - The attacker fully controls both the migration (SVM_BIND MIGRATE) and the CPU fault that triggers migrate_to_ram, and can repeat it arbitrarily; the copy-error precondition was not a rare fault but the routine state of the driver, since the copy engine channel was non-privileged and every push hit HCE_PRIV errors (fixed separately in 04e0481526e3). Within a vulnerable configuration the leak is deterministic and reproducible on demand.\nPR:L - Both SVM ioctls are marked DRM_RENDER_ALLOW, requiring neither DRM_AUTH/DRM_MASTER nor any capability \u2014 only ordinary render-node access, which desktop session users hold by default and which is commonly exposed inside GPU-enabled containers. No root or CAP_SYS_ADMIN is needed.\nUI:N - The attacker performs every step in its own process \u2014 init SVM, migrate its own pages to VRAM, then touch them \u2014 with no action by any other user. No victim participation is required.\nS:U - The leaked page is installed into the attacking process\u0027s own address space by the kernel that owns the vulnerable code; no VM, IOMMU, or sandbox authority boundary is crossed. Impact stays within the kernel/userspace security authority.\nC:H - The user is handed a full page of uninitialized buddy-allocator memory whose contents are whatever was last freed system-wide \u2014 page cache (arbitrary file data), other processes\u0027 freed anonymous memory, freed kernel pages containing keys, credentials, and pointers usable to defeat KASLR. The attacker can loop the migrate/fault cycle over a large VA range to harvest recycled physical pages continuously, amounting to a broad arbitrary-memory-read primitive rather than a bounded leak.\nI:H - A full page of a process\u0027s SVM-backed data is silently replaced with allocator-recycled content while the fault reports success (ret == 0, no SIGBUS), so the corruption is undetectable to the application. An attacker who grooms the page allocator can influence which freed content is recycled, injecting chosen bytes into the address space of a victim \u2014 potentially privileged \u2014 process using nouveau SVM.\nA:L - The kernel itself does not panic, but the application silently consumes garbage in place of its real data, which can crash or wedge the consuming process. The impact is degradation of the affected workload rather than a system-wide denial of service."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:41:39.174Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/fd9bb7e996bab9b9049fffe3f3d3b50dee191d27"
        },
        {
          "url": "https://git.kernel.org/stable/c/73f75d2b5aee5a735cf64b8ab4543d5c20dbbdd9"
        },
        {
          "url": "https://git.kernel.org/stable/c/8c3de9282dde21ce3c1bf1bde3166a4510547aa9"
        },
        {
          "url": "https://git.kernel.org/stable/c/614bfb2050982d23d53d0d51c4079dba0437c883"
        },
        {
          "url": "https://git.kernel.org/stable/c/697e3ddcf1f8b68bd531fc34eead27c000bdf3e1"
        },
        {
          "url": "https://git.kernel.org/stable/c/ab4d113b6718b076046018292f821d5aa4b844f8"
        },
        {
          "url": "https://git.kernel.org/stable/c/835745a377a4519decd1a36d6b926e369b3033e2"
        }
      ],
      "title": "nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-50096",
    "datePublished": "2024-11-05T17:04:58.689Z",
    "dateReserved": "2024-10-21T19:36:19.944Z",
    "dateUpdated": "2026-08-05T11:41:39.174Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T22:25:26.216Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.5, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-50096\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-10-01T20:22:49.170573Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"description\": \"CWE-noinfo Not enough information\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-10-01T15:14:27.194Z\"}}], \"cna\": {\"title\": \"nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5be73b690875f7eb2d2defb54ccd7f2f12074984\", \"lessThan\": \"fd9bb7e996bab9b9049fffe3f3d3b50dee191d27\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5be73b690875f7eb2d2defb54ccd7f2f12074984\", \"lessThan\": \"73f75d2b5aee5a735cf64b8ab4543d5c20dbbdd9\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5be73b690875f7eb2d2defb54ccd7f2f12074984\", \"lessThan\": \"8c3de9282dde21ce3c1bf1bde3166a4510547aa9\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5be73b690875f7eb2d2defb54ccd7f2f12074984\", \"lessThan\": \"614bfb2050982d23d53d0d51c4079dba0437c883\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5be73b690875f7eb2d2defb54ccd7f2f12074984\", \"lessThan\": \"697e3ddcf1f8b68bd531fc34eead27c000bdf3e1\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5be73b690875f7eb2d2defb54ccd7f2f12074984\", \"lessThan\": \"ab4d113b6718b076046018292f821d5aa4b844f8\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5be73b690875f7eb2d2defb54ccd7f2f12074984\", \"lessThan\": \"835745a377a4519decd1a36d6b926e369b3033e2\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/gpu/drm/nouveau/nouveau_dmem.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.1\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.1\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.4.285\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.227\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.168\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.113\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.57\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11.4\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.11.*\"}, {\"status\": \"unaffected\", \"version\": \"6.12\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/gpu/drm/nouveau/nouveau_dmem.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/fd9bb7e996bab9b9049fffe3f3d3b50dee191d27\"}, {\"url\": \"https://git.kernel.org/stable/c/73f75d2b5aee5a735cf64b8ab4543d5c20dbbdd9\"}, {\"url\": \"https://git.kernel.org/stable/c/8c3de9282dde21ce3c1bf1bde3166a4510547aa9\"}, {\"url\": \"https://git.kernel.org/stable/c/614bfb2050982d23d53d0d51c4079dba0437c883\"}, {\"url\": \"https://git.kernel.org/stable/c/697e3ddcf1f8b68bd531fc34eead27c000bdf3e1\"}, {\"url\": \"https://git.kernel.org/stable/c/ab4d113b6718b076046018292f821d5aa4b844f8\"}, {\"url\": \"https://git.kernel.org/stable/c/835745a377a4519decd1a36d6b926e369b3033e2\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error\\n\\nThe `nouveau_dmem_copy_one` function ensures that the copy push command is\\nsent to the device firmware but does not track whether it was executed\\nsuccessfully.\\n\\nIn the case of a copy error (e.g., firmware or hardware failure), the\\ncopy push command will be sent via the firmware channel, and\\n`nouveau_dmem_copy_one` will likely report success, leading to the\\n`migrate_to_ram` function returning a dirty HIGH_USER page to the user.\\n\\nThis can result in a security vulnerability, as a HIGH_USER page that may\\ncontain sensitive or corrupted data could be returned to the user.\\n\\nTo prevent this vulnerability, we allocate a zero page. Thus, in case of\\nan error, a non-dirty (zero) page will be returned to the user.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.285\", \"versionStartIncluding\": \"5.1\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.227\", \"versionStartIncluding\": \"5.1\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.168\", \"versionStartIncluding\": \"5.1\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.113\", \"versionStartIncluding\": \"5.1\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.57\", \"versionStartIncluding\": \"5.1\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11.4\", \"versionStartIncluding\": \"5.1\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.12\", \"versionStartIncluding\": \"5.1\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-05-04T09:45:53.158Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-50096\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-11-03T22:25:26.216Z\", \"dateReserved\": \"2024-10-21T19:36:19.944Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-11-05T17:04:58.689Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…