Re: Linux kernel CVEs not mentioned on oss-security

[Moritz Muehlenhoff <jmm () inutil org>]

On Tue, Oct 03, 2017 at 01:27:09PM +0200, Greg KH wrote:
> I don't know how you can "reject" a CVE, is there a proceedure
> somewhere?  There's lots of CVEs out there that people create against
> the kernel that just aren't issues at all, but I've been ignoring them
> as it makes people happy to assign and track them for no reason.
>
> Is there some way a project can get them rejected?

You can suggest rejection via https://cveform.mitre.org/ and selecting
"Request an update to an existing CVE Entry" as the request type.

Cheers,
        Moritz