From: Dan Carpenter <dan.carpenter@oracle.com>
To: Saar Amar <Saar.Amar@microsoft.com>
Cc: Tony Luck <tony.luck@intel.com>, Borislav Petkov <bp@alien8.de>,
Thomas Gleixner <tglx@linutronix.de>,
Ingo Molnar <mingo@redhat.com>, "H. Peter Anvin" <hpa@zytor.com>,
"x86@kernel.org" <x86@kernel.org>,
"linux-edac@vger.kernel.org" <linux-edac@vger.kernel.org>,
"security@kernel.org" <security@kernel.org>
Subject: Re: [EXTERNAL] [PATCH] x86/MCE/AMD: Fix use after free in error handling
Date: Tue, 28 Jan 2020 19:15:56 +0300 [thread overview]
Message-ID: <20200128161556.GB1754@kadam> (raw)
In-Reply-To: <AM5PR83MB01951D715568E2BFD67C51AAF10A0@AM5PR83MB0195.EURPRD83.prod.outlook.com>
On Tue, Jan 28, 2020 at 03:59:08PM +0000, Saar Amar wrote:
> Actually, if we are at it - Dan, given the fact there is an actual use
> (a dereference) for that pointer after the free, shouldn't we assign a
> CVE for it?
>
We don't give CVEs, you'd have to contact someone else.
I don't think this has a security impact because you already have to
be root to trigger it.
regards,
dan carpenter
next prev parent reply other threads:[~2020-01-28 16:16 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <20190813100752.GM1935@kadam>
2020-01-28 14:09 ` [PATCH] x86/MCE/AMD: Fix use after free in error handling Dan Carpenter
2020-01-28 14:12 ` [EXTERNAL] " Saar Amar
2020-01-28 15:59 ` Saar Amar
2020-01-28 16:15 ` Dan Carpenter [this message]
2020-02-04 13:36 ` Borislav Petkov
2020-02-14 8:37 ` [PATCH] x86/mce/amd: Publish the bank pointer only after setup has succeeded Borislav Petkov
2020-02-15 13:35 ` [tip: ras/urgent] " tip-bot2 for Borislav Petkov
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20200128161556.GB1754@kadam \
--to=dan.carpenter@oracle.com \
--cc=Saar.Amar@microsoft.com \
--cc=bp@alien8.de \
--cc=hpa@zytor.com \
--cc=linux-edac@vger.kernel.org \
--cc=mingo@redhat.com \
--cc=security@kernel.org \
--cc=tglx@linutronix.de \
--cc=tony.luck@intel.com \
--cc=x86@kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.