CASCACascade Atlas

Evidence dossier

CVE-2021-22555

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

Exploited in the wild (CISA KEV since Oct 6, 2025). NVD reports CVSS 3.1 7.8. EPSS estimates 78.7% exploit likelihood as of Oct 22, 2026.

77.2–90.8Priority evidence range
Evidence through Oct 22, 2026, 6:07 PM UTC

As of Oct 22, 2026

Normalized restatement

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

State
PUBLISHED
Published
Jul 7, 2021
Updated
Dec 30, 2025
Evidence coverage
85%

Evidence chronology

What was known when

Download this view's receipt →
  1. Source dateSource date omittedFirst observed by CASCA
    CISA-ADP

    Record text: CISA ADP Vulnrichment

    Inspect raw assertion
    Field
    container
    Value
    CISA ADP Vulnrichment
    Original evidence ↗
  2. Source dateSource date omittedFirst observed by CASCA
    CVE Program

    Record text: CVE Program Container

    Inspect raw assertion
    Field
    container
    Value
    CVE Program Container
    Original evidence ↗
  3. Source dateSource date omittedFirst observed by CASCA
    Google

    Record text: Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

    Inspect raw assertion
    Field
    container
    Value
    Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
    Original evidence ↗
  4. Source dateFirst observed by CASCA
    CISA KEV

    Exploitation cataloged: Linux Kernel Heap Out-of-Bounds Write Vulnerability

    Inspect raw assertion
    Field
    observed_exploitation
    Value
    Linux Kernel Heap Out-of-Bounds Write Vulnerability
    Original evidence ↗
  5. Source dateFirst observed by CASCA
    FIRST EPSS

    EPSS score: 78.68% probability · 99.59th percentile

    Inspect raw assertion
    Field
    model_probability
    Value
    Probability 0.786840000000; percentile 0.995900000000
    Original evidence ↗
ExploitationCatalog member

CISA KEV · catalog date Oct 6, 2025 · first observed Sep 1, 2026

Exploit likelihood78.68%

FIRST EPSS · score date Oct 22, 2026 · 99.6th percentile · first observed Oct 22, 2026

SeverityCVSS 7.8

NVD · CVSS 3.1 · first observed Oct 14, 2026 · same-version scores align in this snapshot

Evidence detail

Source limits and decisions

Why each evidence state has this value

casca-unknown-reasons-v1
Exploitation statusLast verified source snapshot retained

The last verified source boundary remains in force for this claim.

Revision
evidence-policy-v1.1.0
Cutoff
Oct 22, 2026
Resolution
Review source contract
Exploit likelihoodEvidence supported

Eligible evidence is present for this bounded claim.

Revision
evidence-policy-v1.1.0
Cutoff
Oct 22, 2026
Resolution
None
Severity assessmentEvidence supported

Eligible evidence is present for this bounded claim.

Revision
casca-direct-cvss-eligibility-v1
Cutoff
Oct 22, 2026
Resolution
None
Affected productsSource-reported scope

The cited source assertion is retained while canonical product linkage remains open.

Revision
casca-factor-d-obligations-v1
Cutoff
Oct 22, 2026
Resolution
Resolve identity

Source comparison

Who said what

CISA-ADPIndependent enrichment
Record text

CISA ADP Vulnrichment

Inspect raw assertion
Field
container
Value
CISA ADP Vulnrichment
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
CVE ProgramDerivative copy
Record text

CVE Program Container

Inspect raw assertion
Field
container
Value
CVE Program Container
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
GoogleOriginal assertion
Record text

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

Inspect raw assertion
Field
container
Value
Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
CISA KEVOriginal assertion
Exploitation cataloged

Linux Kernel Heap Out-of-Bounds Write Vulnerability

Inspect raw assertion
Field
observed_exploitation
Value
Linux Kernel Heap Out-of-Bounds Write Vulnerability
Source dateFirst observed by CASCAOriginal evidence ↗
FIRST EPSSOriginal assertion
EPSS score

78.68% probability · 99.59th percentile

Inspect raw assertion
Field
model_probability
Value
Probability 0.786840000000; percentile 0.995900000000
Source dateFirst observed by CASCAOriginal evidence ↗

Applicability

Cited product scope

Trace impact →
42Underlying assertions
36Canonical products
27Target assertions
15Constraint assertions

Grouped from 33 configuration nodes in this exact snapshot. Visual grouping is navigational; asset exposure and root cause require cited evidence.

Identity source boundaries
  • Cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z27d65b0f-b718-4b4f-bb79-c47c68d09dfa
  • Cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z955dae73-7302-438b-aee1-058d7cc5d48e

37 scope groups

Google · source assertedn/aLinux KernelDirect source scope
Affected: 2.6.19-rc1 to before unspecified (custom comparison)
Source-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Inspect raw assertion[{"status": "affected", "version": "2.6.19-rc1", "lessThan": "unspecified", "versionType": "custom"}]
NVD CPE · OPERATING SYSTEMbrocadefabric_operating_systemVulnerable target · 1 assertions
Version not applicableCanonical identity product-23aeada3235973f117e1ef01828de0481d4fb220e18831034dafbba652224021Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:brocade:fabric_operating_system:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    8 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    41cd1160-b681-41ef-9eb4-06ce0f53c501
NVD CPE · OPERATING SYSTEMlinuxlinux_kernelVulnerable target · 7 assertions
Any version (unconstrained) (>= 2.6.19, < 4.4.267); Any version (unconstrained) (>= 4.10, < 4.14.231); Any version (unconstrained) (>= 4.15, < 4.19.188); Any version (unconstrained) (>= 4.20, < 5.4.113); Any version (unconstrained) (>= 4.5, < 4.9.267); Any version (unconstrained) (>= 5.11, < 5.12); Any version (unconstrained) (>= 5.5, < 5.10.31)Canonical identity product-0eda7a801761be4590f267cf319481c8c0aaa30546d99cc064edf77989ce05c9Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    7 · node/0 · match 0
    Logic
    OR
    Version bounds
    from including 2.6.19; through excluding 4.4.267
    Match ID
    3e869a37-b25a-4cfd-afa1-964c540b7283
  2. cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    7 · node/0 · match 4
    Logic
    OR
    Version bounds
    from including 4.20; through excluding 5.4.113
    Match ID
    bb3ce52d-3245-4b6c-9c92-897bcb496882
  3. cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    7 · node/0 · match 2
    Logic
    OR
    Version bounds
    from including 4.10; through excluding 4.14.231
    Match ID
    c1285cf4-6285-4288-9981-03a04f93519e
  4. cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    7 · node/0 · match 1
    Logic
    OR
    Version bounds
    from including 4.5; through excluding 4.9.267
    Match ID
    8f1c60cb-5594-496c-8df0-68d909707254
  5. cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    7 · node/0 · match 6
    Logic
    OR
    Version bounds
    from including 5.11; through excluding 5.12
    Match ID
    66c052db-c48a-43d4-a1a8-af1e331199d4
  6. cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    7 · node/0 · match 3
    Logic
    OR
    Version bounds
    from including 4.15; through excluding 4.19.188
    Match ID
    46073f63-74d1-4675-999a-574c1c13b627
  7. cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    7 · node/0 · match 5
    Logic
    OR
    Version bounds
    from including 5.5; through excluding 5.10.31
    Match ID
    eb0a42d4-2dac-4de0-a20b-a2700aa5e63a
NVD CPE · HARDWAREnetappaff_500fEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-7b8986ee9ae08eaac96e9eb48b6af27d9329dbce8a241be69a60b319b86425d9Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:aff_500f:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    13 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2ab58180-e5e0-4056-abf9-a99e9f6a9e86
NVD CPE · OPERATING SYSTEMnetappaff_500f_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-87e29177776562b7c2d17b31130f7555479ee7d9f9d26ac073f3d02703d989c5Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    13 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    578bb9a7-bf28-4068-a9a6-1de19ceec293
NVD CPE · HARDWAREnetappaff_a250Environmental constraint · 1 assertions
Version not applicableCanonical identity product-8d1fa26a7a1d4306ab4fa944a9f4a407d4687dd3e0f86398181f30261fe4a1beLinked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:aff_a250:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    12 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d4b1f59c-6ada-4930-834f-2a8a8444f6ae
NVD CPE · OPERATING SYSTEMnetappaff_a250_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-da44f088dbdab4a52924e45f9b8bf875a9e35587b0993d452c2d4685a847b898Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:aff_a250_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    12 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    0d5de972-f8b8-4964-943a-da0bd18289d1
NVD CPE · HARDWAREnetappaff_a400Environmental constraint · 1 assertions
Version not applicableCanonical identity product-29e1491c2ff949ad3e52a8717a8863b71759e1b18bdc29add51d73f5de69ae64Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:aff_a400:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    11 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f3e70a56-dba8-45c7-8c49-1a036501156f
NVD CPE · OPERATING SYSTEMnetappaff_a400_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-28e630a4349a538364f2a71f6ca71b146ac10e1516d3b82221c432b2f0935df0Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:aff_a400_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    11 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    56fd9b9a-bbe5-4ca5-b9f9-b16e1fe738c8
NVD CPE · HARDWAREnetappc250Environmental constraint · 1 assertions
Version not applicableCanonical identity product-81eb33109c31a4237933ba812ce110b56b71ff0f4d92452756a4ce64c4b6284dLinked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:c250:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    1 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    58de2b52-4e49-4cd0-9310-00291b0352c7
NVD CPE · OPERATING SYSTEMnetappc250_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-22c964a2123b48ccc0f33f04f9ff63daf5adc2214000936708b0cc671be0d39bLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:c250_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    1 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f1ab1ec2-2560-494a-a51b-6f20ce318feb
NVD CPE · HARDWAREnetappc400Environmental constraint · 1 assertions
Version not applicableCanonical identity product-550139cc27fcef7ba1a8092ed8e0597a7939e52ff1fc96f65d51bb311e46faa7Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:c400:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    ad443748-b0d1-4c1a-a62e-bd5fb5967370
NVD CPE · OPERATING SYSTEMnetappc400_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-656b98475b5116ffca73cfa0270f61023660a70cceba0dd9443fafdfb26af12bLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:c400_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9ac7ad92-8b33-4137-a4ec-08641e4af857
NVD CPE · APPLICATIONnetappcloud_backupVulnerable target · 1 assertions
Version not applicableCanonical identity product-82c0ed89ab714a80f8d7ca4b0a7a5e6e1968a59a16c17a9f6a2a0a6a4757f6bfLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    17 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    5c2089ee-5d7f-47ec-8ea5-0f69790564c4
NVD CPE · HARDWAREnetappfas_8300Environmental constraint · 1 assertions
Version not applicableCanonical identity product-8dc934c45d773690945fee4a05dba654cf2eb85dce617667b1bdab296ef9520aLinked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:fas_8300:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    9 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    e64576de-90f0-4f5e-9c82-ab745cfedbb7
NVD CPE · OPERATING SYSTEMnetappfas_8300_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-745feafd01ad96841f96a2ec5122ae5ec11a145e44503c478c0ab91ab265ea1fLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:fas_8300_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    9 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d5cdadab-72a5-4526-8432-e6c9ac56b29f
NVD CPE · HARDWAREnetappfas_8700Environmental constraint · 1 assertions
Version not applicableCanonical identity product-d4783839c9685743860d9377774dbbe5d8bf77e4d5a70126659962a5f6703345Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:fas_8700:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    10 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    6415e28a-4eac-4f7f-bd81-1a55ce8b6f40
NVD CPE · OPERATING SYSTEMnetappfas_8700_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-43d5fc17316bbeaacfaa65ff87c6876fab7aebbec10f80ac2ae86db40adafddcLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:fas_8700_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    10 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    ef5afe69-7990-4f80-9e63-d8ad58aa3a2d
NVD CPE · HARDWAREnetapph300sEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-5b787f6fb0dbffca7d5383cfa87cd93654a14ed60ccdd59abc2ba697fe7ead69Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    3 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9f9c8c20-42eb-4ab5-bd97-212deb070c43
NVD CPE · OPERATING SYSTEMnetapph300s_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-b9e7a301eef0306dd174904e39d76a7c24000b372471d8c7805d9a00b6a6e419Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    3 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    6770b6c3-732e-4e22-bf1c-2d2fd610061c
NVD CPE · HARDWAREnetapph410cEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-19a4460172d592ee30b338581dced13baf393eedf54989f7303c0971a7aa6832Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    2 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    cddf61b7-ec5c-467c-b710-b89f502cd04f
NVD CPE · OPERATING SYSTEMnetapph410c_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-3d0915e39b5cbd4a35c4f9144f57e38484db6d2fffb6f1d595f5fd6eb6a7045aLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    2 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    234defe0-5ce5-4b0a-96b8-5d227cb8ed31
NVD CPE · HARDWAREnetapph410sEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-ae7668c0a5adbc5d6599144484fb84400193fe6c73d0e6bb570cd2a233e63b35Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    6 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    8497a4c9-8474-4a62-8331-3fe862ed4098
NVD CPE · OPERATING SYSTEMnetapph410s_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-c29ed97377ecd5a1bb977b857e33722917ef8494748bf83825ca6748f85481aeLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    6 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d0b4ad8a-f172-4558-aec6-ff424ba2d912
NVD CPE · HARDWAREnetapph500sEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-4c7f1f62606e18f71887f5954346c3f8c8376e418a089dca8282922aa180aff3Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    4 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    e63d8b0f-006e-4801-bf9d-1c001bbfb4f9

Affected-product evidence

Accepted scope and product mapping

0 canonical links · 2 source-reported links

Source-reported scopeSource-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Vendor specified only by source · Product specified only by source

Source class
Direct cve affected
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Oct 22, 2026
Retained assertion IDs
a5df0844-4b46-4158-92f4-221a090dc275
Source-reported scopeSource-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Vendor specified only by source · Product specified only by source

Source class
Nvd cpe vulnerable target
Assertions
27
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Oct 22, 2026
Retained assertion IDs
040d5e1c-7d94-4183-b376-4c75052612030476b79b-b715-43ba-a9a9-83a087c7086e18634186-0743-4612-abf6-7909adf0957621f3addb-1fa6-49fc-8998-2857890a96e42f9c4374-90ec-43f9-b084-0e521e1502f8318cb0b3-e1b9-4ddf-bbbc-1b040f27ac4b36a5dc3f-dbae-4a19-a617-1ea9c4ee3f053e6921e1-0558-47b4-83b9-0317b141120c42ed3eeb-003e-458f-a92e-4c03fa7cd6264edc8498-29a7-46dd-a147-bd679f22ddd659d358b3-c9cb-4c69-9009-c656542cbe1c683a7cd5-32c9-431c-a02a-9dec0d7085456894ad2e-a715-472e-874c-d749a3f7e7d76e6b41f1-b0c1-4d64-8e8f-fe50ceaefcb87e352e85-d6f6-451b-94fc-f1ed192f511d80dd7ac5-3501-4461-ad0a-5bb4eac7c73a897af6d6-c8db-4869-9302-0812174102e08f263465-e100-46fa-bcd3-c19d09c9925794df431e-b087-4192-ab0e-ba44147db93fa6b455ce-06ba-423f-a75b-39163b6b552db5f40c84-e154-40c8-9c24-b45d196f0306b83027e8-6c28-4f01-92b5-3cfc4f60e55cc147eeda-d859-4442-b846-03d85d379539c326053b-04de-4bf0-b08e-c5806dc98c3ed69731cd-a541-49f7-90b9-af083d48af1fe22951dc-6293-4a8a-9a11-6f23622e2bdcfb4bd3c9-14c8-466b-b3d2-532d53d30b35

Assessments

CVSS by origin

7.8
NVDCVSS 3.1 · role Primary · priority eligiblevalid_matchCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.6
NVDCVSS 2.0 · role Primary · priority eligiblevalid_matchAV:L/AC:L/Au:N/C:P/I:P/A:P
8.3
cve-coordination@google.comCVSS 3.1 · role Secondary · priority eligiblevalid_matchCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
8.3
GoogleCVSS 3.1 · role unknown · display onlyDirect record assessment retained outside normalized eligibilityCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Direct CVE/CNA normalized decisions

8.3Priority eligible

Google

CVSS 3.1 · Primary · Original assertion · rank 1

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Validation
Valid match
Recomputed
8.3
Decision reason
Evidence supported
Policy
casca-direct-cvss-eligibility-v1

Assessments are retained side by side under closed precedence. Cascade never averages CVSS.

Evidence boundaries

  • KEV membership is authoritative for the catalog, not proof of exposure in any environment.
  • EPSS is a dated model probability and not an individual-environment prediction.
  • Affected or fixed status applies only to the exact cited product and version scope; remaining scope stays source-scoped.
  • NVD-carried upstream facts remain derivative; independent corroboration requires a separately authored source.
  • Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
  • NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
  • Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.
  • OSV aggregation and OSV-converted NVD material are not independent corroboration.
  • Red Hat facts are vendor assertions for the exact supplied products.
  • Nonmembership and not-yet-observed states are not proof of safety.