oss-sec mailing list archives

Re: CVE request: kernel: btrfs heap overflow

From: Moritz Muehlenhoff <jmm () debian org>
Date: Wed, 9 Feb 2011 18:25:06 +0100

On Wed, Feb 09, 2011 at 10:49:35AM -0500, Dan Rosenberg wrote:

I'm not aware of any distributions that support 2.6.37 kernels, but as
far as I know this doesn't affect CVE eligibility (please correct me
if I'm wrong).


The usual criteria for Linux kernel CVE assignments was/is if the
issue affects a released kernel, not if it's supported by someone,
i.e. if it had been introduced in 2.6.38-rc1 it would not receive
a CVE ID.

Cheers,
        Moritz

Current thread:

CVE request: kernel: btrfs heap overflow Dan Rosenberg (Feb 09)
- Re: CVE request: kernel: btrfs heap overflow Eugene Teo (Feb 09)
  - Re: CVE request: kernel: btrfs heap overflow Dan Rosenberg (Feb 09)
    - Re: CVE request: kernel: btrfs heap overflow Eugene Teo (Feb 09)
    - Re: CVE request: kernel: btrfs heap overflow Eugene Teo (Feb 09)
    - Re: CVE request: kernel: btrfs heap overflow Steven M. Christey (Feb 10)
    - Re: CVE request: kernel: btrfs heap overflow Stéphane Gaudreault (Feb 09)
    - Re: CVE request: kernel: btrfs heap overflow Moritz Muehlenhoff (Feb 09)
    - Re: CVE request: kernel: btrfs heap overflow Greg KH (Feb 09)
- Re: CVE request: kernel: btrfs heap overflow Eugene Teo (Feb 21)