Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1312389

Re: 2015 kernel CVEs

Show all headers | View raw

On Tue, Jan 19, 2016 at 11:57 AM, Peter Hurley <peter@hurleysoftware.com> wrote:
> On 01/19/2016 03:28 AM, Dan Carpenter wrote:
>> I like to look back over old CVEs to see how we could do better.  Here
>> is the list from 2015.  I got most of this information from the Ubuntu
>> CVE tracker.  Thanks Ubuntu!.  If it doesn't have a hash that means it
>> might not be fixed yet.
>
> [...]
>
>> CVE-2015-4170 cf872776fc84: tty: hang in tty
>
> Makes no sense that this was assigned a CVE.
> I fixed this _2 yrs before_ it was reported and the patch was CC'd stable.

I'm guessing the CVE was assigned because there are distributions that
ship based on kernels earlier than 3.13.  Those distributors need to
verify if they have the fix, etc.

josh

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

2015 kernel CVEs Dan Carpenter <dan.carpenter@oracle.com> - 2016-01-19 14:40 +0100
  Re: 2015 kernel CVEs One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk> - 2016-01-19 16:00 +0100
  Re: [kernel-hardening] 2015 kernel CVEs Ben Hutchings <ben@decadent.org.uk> - 2016-01-19 17:40 +0100
    Re: [kernel-hardening] 2015 kernel CVEs Greg KH <greg@kroah.com> - 2016-01-19 19:00 +0100
      Re: [kernel-hardening] 2015 kernel CVEs Ben Hutchings <ben@decadent.org.uk> - 2016-01-20 18:10 +0100
        Re: [kernel-hardening] 2015 kernel CVEs Greg KH <greg@kroah.com> - 2016-01-20 19:10 +0100
          Re: [kernel-hardening] 2015 kernel CVEs Jiri Kosina <jikos@kernel.org> - 2016-01-21 17:10 +0100
          Re: [kernel-hardening] 2015 kernel CVEs Ben Hutchings <ben@decadent.org.uk> - 2016-01-21 19:50 +0100
  Re: 2015 kernel CVEs Peter Hurley <peter@hurleysoftware.com> - 2016-01-19 18:00 +0100
    Re: 2015 kernel CVEs Josh Boyer <jwboyer@fedoraproject.org> - 2016-01-19 18:10 +0100
      Re: 2015 kernel CVEs Greg KH <gregkh@linuxfoundation.org> - 2016-01-19 19:00 +0100
        Re: [kernel-hardening] Re: 2015 kernel CVEs Marcus Meissner <meissner@suse.de> - 2016-01-20 08:20 +0100
  Re: 2015 kernel CVEs Al Viro <viro@ZenIV.linux.org.uk> - 2016-01-19 19:10 +0100
    Re: [kernel-hardening] Re: 2015 kernel CVEs ebiederm@xmission.com (Eric W. Biederman) - 2016-01-20 00:00 +0100
  Re: [kernel-hardening] 2015 kernel CVEs ebiederm@xmission.com (Eric W. Biederman) - 2016-01-20 00:00 +0100
    Re: [kernel-hardening] 2015 kernel CVEs Jann Horn <jann@thejh.net> - 2016-01-20 21:20 +0100
      Re: [kernel-hardening] 2015 kernel CVEs One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk> - 2016-01-20 22:30 +0100
  Re: [kernel-hardening] 2015 kernel CVEs Kees Cook <keescook@chromium.org> - 2016-01-20 00:40 +0100
  Re: 2015 kernel CVEs Miroslav Benes <mbenes@suse.cz> - 2016-01-20 11:00 +0100

csiph-web