CIP-dev Archive on
 help / color / Atom feed
* [cip-dev] Cip-kernel-sec Updates for Week of 2021-04-15
@ 2021-04-14 11:43 Chen-Yu Tsai (Moxa)
  0 siblings, 0 replies; only message in thread
From: Chen-Yu Tsai (Moxa) @ 2021-04-14 11:43 UTC (permalink / raw)
  To: cip-dev; +Cc: Pavel Machek, Nobuhiro Iwamatsu, masashi.kudo

[-- Attachment #1: Type: text/plain, Size: 689 bytes --]

Hi everyone,

Two new issues this week:

- CVE-2020-36322 [fuse: bad inode] - fixed
  Needs backport to kernels earlier than 5.4.

- CVE-2021-29154 [x86: bpf: jit: incorrect computation of branch
displacement] - fixed
  Fixed in latest stable 4.4.y, though not yet in CIP 4.4.y.

In other news, the following old CVEs have been fixed:

- CVE-2020-25670 [net/nfc/llcp res. leak]
- CVE-2020-25671 [net/nfc/llcp res. leak]
- CVE-2020-25672 [net/nfc/llcp res. leak]

In addition, a possible fix for this one was merged:

- CVE-2020-25673 [net/nfc/llcp res. leak]

Fixes for these still need to be backported to kernels earlier than 4.19.
All four are ignored for CIP kernels.


[-- Attachment #2: Type: text/plain, Size: 428 bytes --]

Links: You receive all messages sent to this group.
View/Reply Online (#6376):
Mute This Topic:
Group Owner:
Unsubscribe: []

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, back to index

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-04-14 11:43 [cip-dev] Cip-kernel-sec Updates for Week of 2021-04-15 Chen-Yu Tsai (Moxa)

CIP-dev Archive on

Archives are clonable:
	git clone --mirror cip-dev/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 cip-dev cip-dev/ \
	public-inbox-index cip-dev

Example config snippet for mirrors

Newsgroup available over NNTP:

AGPL code for this site: git clone