Re: CVE Request: linux kernel perf out-of-bounds access

[Michael Gilbert <mgilbert () debian org>]

On Tue, May 14, 2013 at 9:26 PM, Eugene Teo wrote:
> On Tue, May 14, 2013 at 8:25 PM, Marc Deslauriers <
> marc.deslauriers () canonical com> wrote:
>
> > Hello,
> >
> > Is there a CVE for this? If not, could one be assigned, please?
> >
> > https://patchwork.kernel.org/patch/2441281/
> >
> > 8176cced706b5e5d15887584150764894e94e02f
> >
> > (BTW, there is currently an exploit for this going around...)
>
> Nowhere did it say it is a security fix. Fix available since April 13.
> s@kois not aware too. Awesome.
>
> Seriously, surely by now we should all know that silent fixes are not the
> wisest thing to do.

An iceberg of evidence is clearly not enough to change this ship's course.

Best wishes,
Mike