oss-sec mailing list archives
Re: Details on this supposed Linux Kernel ksmbd RCE
From: Greg KH <greg () kroah com>
Date: Fri, 23 Dec 2022 08:06:28 +0100
On Thu, Dec 22, 2022 at 04:49:04PM -0500, Jan Schaumann wrote:
Lastly, given that this is a coordinated disclosure, I don't know why there are no CVE IDs reserved for these.
The kernel developers do not work with CVEs at all as they are not all that relevant for the most part for kernel issues. MITRE agrees with us will not even give them to us if we ask for them :) Some Linux companies still insist on assigning CVEs, but that's primarily to help enable their internal engineering processes more than anything else. As an alternative, please look at the GSD (Global Security Database, https://globalsecuritydatabase.org/) for which the kernel does get ids assigned for issues like this, and many many others. sorry, greg k-h
Current thread:
- Details on this supposed Linux Kernel ksmbd RCE Josh Bressers (Dec 22)
- Re: Details on this supposed Linux Kernel ksmbd RCE Jan Schaumann (Dec 22)
- Re: Details on this supposed Linux Kernel ksmbd RCE Greg KH (Dec 22)
- Re: Details on this supposed Linux Kernel ksmbd RCE Marcus Meissner (Dec 23)
- Re: Details on this supposed Linux Kernel ksmbd RCE Eric Biggers (Dec 23)
- Re: Details on this supposed Linux Kernel ksmbd RCE Jeffrey Walton (Dec 23)
- Re: Details on this supposed Linux Kernel ksmbd RCE Sasha Levin (Dec 23)
- Re: Details on this supposed Linux Kernel ksmbd RCE Greg KH (Dec 23)
- Re: Details on this supposed Linux Kernel ksmbd RCE Marcus Meissner (Dec 23)
- Re: Details on this supposed Linux Kernel ksmbd RCE John Helmert III (Dec 23)
- Re: Details on this supposed Linux Kernel ksmbd RCE Marcus Meissner (Dec 27)
- Re: Details on this supposed Linux Kernel ksmbd RCE Greg KH (Dec 22)
- Re: Details on this supposed Linux Kernel ksmbd RCE Marcus Meissner (Dec 27)
- Re: Details on this supposed Linux Kernel ksmbd RCE Jan Schaumann (Dec 22)
- Re: Details on this supposed Linux Kernel ksmbd RCE John Helmert III (Dec 23)