Re: [cip-dev] New CVE entries this week

[Masami Ichikawa <masami.ichikawa@miraclelinux.com>]

On Thu, Jul 27, 2023 at 6:26 PM Pavel Machek <pavel@denx.de> wrote:
>
> Hi!
>
> > It's this week's CVE report.
> >
> > This week reported 8 new CVEs and 5 updated CVEs.
> >
> > CVE-2023-20593 is the Zenbleed vulnerability which is not a kernel
> > vulnerability.  However, the Linux kernel added mitigation code.
> > CVE-2023-2640 and CVE-2023-32629 are Ubuntu kernel specific
> > vulnerabilities, so mainline/stable/cip kernels aren't affected.
>
> Thank you for the report.
>
> > * New CVEs
> >
> > CVE-2023-3611: net/sched: sch_qfq: account for stab overhead in qfq_enqueue
> >
> > CVSS v3 score is not provided(NVD).
> > CVSS v3 score is not 7.8 HIGH(CNA).
>
> I'm a bit confused. Is this trying to say that score _is_ 7.8?
>
oops. Sorry for that.
"CVSS v3 score is 7.8 HIGH(CNA)." is correct.

> Best regards,
>                                                                 Pavel
> --
> DENX Software Engineering GmbH,        Managing Director: Erika Unter
> HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#12507): https://lists.cip-project.org/g/cip-dev/message/12507
> Mute This Topic: https://lists.cip-project.org/mt/100381501/4520416
> Group Owner: cip-dev+owner@lists.cip-project.org
> Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129101/4520416/1465703922/xyzzy [masami.ichikawa@miraclelinux.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>

Regards,
-- 
Masami Ichikawa
Cybertrust Japan Co., Ltd.

Email :masami.ichikawa@cybertrust.co.jp
          :masami.ichikawa@miraclelinux.com