Re: Linux kernel: multiple issues

[Salvatore Bonaccorso <carnil () debian org>]

Hi Jann,

On Mon, Apr 29, 2019 at 02:56:06PM -0400, Jann Horn wrote:
> == missing locking between ELF coredump code and userfaultfd VMA modification ==
> https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04f5866e41fb70690e28397487d8bd8eea7d712a
> https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.114
> https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37
> https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10
> https://bugs.chromium.org/p/project-zero/issues/detail?id=1790
> CVE-2019-11599

If I'm not mistaken, this was assigned already CVE-2019-3892,
information from https://bugzilla.redhat.com/show_bug.cgi?id=1696015

Regards,
Salvatore