Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Greg KH
Re: Re: Reporter attribution is absent from GitHub's machine-readable vulnerability records, and from the NVD entirely
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Thu, 27 Aug 2026 07:24:46 +0200 On Thu, Aug 27, 2026 at 01:03:47AM -0400, Syed wrote: Yes, https://www.google.com/url?q=http://cve.org&source=gmail&ust=1787893426670000&sa=E json records are known to have this issue, because almost all fields are not required. Ah, I'm talking to a bot {sigh} Fair. Optional means a CNA leaving credits empty is behaving correctly, not incorrectly, and the post should have said that plainly.
Re: Reporter attribution is absent from GitHub's machine-readable vulnerability records, and from the NVD entirely
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Thu, 27 Aug 2026 06:42:09 +0200 On Wed, Aug 26, 2026 at 06:19:44PM -0700, Syed wrote: This is a measurement, not a vulnerability report. The CVE v5 format defines a `credits` container naming who found or reported an issue, with typed roles. The OSV schema defines an equivalent field.
Re: Linux kernel: Guest-to-Host DoS via TAP
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Mon, 24 Aug 2026 10:57:45 +0200 On Wed, Aug 12, 2026 at 10:01:50AM -0700, Dongli Zhang wrote: Hi, This report describes a Denial of Service (DoS) vulnerability where a guest VM using the virtio-net driver can intentionally trigger a host panic when the host uses a tap device, such as macvtap, as the vhost-net backend. VM (virtio-net) -- Host (vhost-net) -- Host (macvtap) This is only one example scenario.
Re: Some Changes to GNOME Security Tracking
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Tue, 4 Aug 2026 07:15:57 +0200 On Mon, Aug 03, 2026 at 09:01:54PM +0200, Sebastian Pipping wrote: On 8/3/26 18:33, David A. Wheeler wrote: On Jul 31, 2026, at 12:42 PM, Eli Schwartz <eschwartz () gentoo org> wrote: I heard that the Linux Foundation has declared the danger of "AI vulnerabilities" is so great that they are founding a group called Akrites, devoted to coordinating security incident response. ...
Re: Backports available - cBPF JIT spray hardening
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Thu, 30 Jul 2026 16:00:52 +0200 On Wed, Jul 29, 2026 at 06:31:11PM -0700, Pawan Gupta wrote: On Wed, Jul 29, 2026 at 05:15:46PM -0700, Jose R Rodriguez wrote: On 2026-07-29 13:04, Pawan Gupta wrote: Hi All, This is an inform distro maintainers about recently upstreamed hardening against speculative execution attacks using BPF JIT spraying.
Re: Linux kernel: KVM: Merge branch 'kvm-chainsaw' into HEAD
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Tue, 28 Jul 2026 09:47:16 +0200 On Tue, Jul 28, 2026 at 02:57:25AM -0400, Reid Sutherland wrote: On 2026-07-27 3:47 p.m., Sam James wrote: Reid Sutherland <reid () thirddimension net> writes: On 2026-07-27 12:25 p.m., Solar Designer wrote: On Mon, Jul 27, 2026 at 09:46:12AM -0400, Reid Sutherland wrote: For your information.
Re: 432 Linux kernel CVEs
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Wed, 22 Jul 2026 10:30:58 +0200 On Tue, Jul 21, 2026 at 08:44:41PM -0400, Jan Schaumann wrote: Steffen Nurpmeso <steffen () sdaoden eu> wrote: I wonder a bit what your desire is. I'm looking to take the temperature on how people are responding to a significant influx of reported CVE fixes. I believe it ought to change how organizations handle linux kernel security updates.
Re: Coordinated Disclosure in the LLM Age
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Sat, 16 May 2026 09:55:00 +0200 On Fri, May 15, 2026 at 03:35:14PM -0300, Santiago Ruano Rincón wrote: El 15/05/26 a las 11:27, Greg KH escribió: On Fri, May 15, 2026 at 10:49:34AM +0200, Yves-Alexis Perez wrote: On Wed, 2026-04-29 at 19:22 +0200, Willy Tarreau wrote: I'm increasingly doing that myself already, and predicted the death of embargoes a serveral months ago.
Re: Coordinated Disclosure in the LLM Age
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Fri, 15 May 2026 11:27:00 +0200 On Fri, May 15, 2026 at 10:49:34AM +0200, Yves-Alexis Perez wrote: On Wed, 2026-04-29 at 19:22 +0200, Willy Tarreau wrote: I'm increasingly doing that myself already, and predicted the death of embargoes a serveral months ago. Now I just remove unneeded details from commit messages, merging and issue releases to keep users protected.
Re: Linux kernel LPE ("fragnesia", copyfail 3.0)
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Wed, 13 May 2026 17:41:27 +0200 On Wed, May 13, 2026 at 11:59:37AM +0100, Sam James wrote: v12-security have disclosed "Fragnesia" [0]. Quoting their disclosure: Fragnesia is a universal Linux local privilege escalation exploit, discovered by William Bowling with the V12 team. Fragnesia is a member of the Dirty Frag vulnerability class. This is a separate bug in the ESP/XFRM from dirtyfrag which has received its own patch.
Re: Dirty Frag: Universal Linux LPE
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Fri, 8 May 2026 09:24:01 +0200 On Fri, May 08, 2026 at 12:43:59AM +0530, Sandipan Roy wrote: Hi, This stated that “no patches or CVEs exist” because the embargo was broken. Could you please provide an update on the CVE assignment status for this issue? CVE-2026-43284 is now assigned.
Re: Precise disclosure contents for copyfail (Re: [oss-security] CVE-2026-31431: CopyFail: linux local privilege scalation)
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Thu, 7 May 2026 06:32:33 +0200 On Mon, May 04, 2026 at 08:51:27PM +0100, Emily Shepherd wrote: On Mon May 4, 2026 at 6:38 PM BST, Greg KH wrote: Once it lands in Linus's tree, our role is over. I would - respectfully - disagree. To clarify, I am aware that that is the process as defined currently, but I am not sure that is the best that process could be.
Re: Precise disclosure contents for copyfail (Re: [oss-security] CVE-2026-31431: CopyFail: linux local privilege scalation)
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Mon, 4 May 2026 19:38:22 +0200 On Mon, May 04, 2026 at 05:44:52PM +0100, Emily Shepherd wrote: Why this specific one is somehow more "special" than others was not obvious except after the fact because the submitter decided to provide their exploit code to the world to show off their tool Was the PoC of the exploit / some description of its severity not made available by the reporter to the security team / maintainer when...
Re: CVE request: io_uring zcrx freelist OOB write
oss-sec mailing list archives From: Greg KH <gregkh () linuxfoundation org> Date: Sun, 3 May 2026 13:32:21 +0200 On Sun, May 03, 2026 at 07:00:06AM -0400, Mohamed salem Eddah wrote: This issue appears to have been addressed in commit 770594e (“io_uring/zcrx: warn on freelist violations”, April 21, 2026), however it was not assigned a CVE and does not appear to have been included in a formal security advisory. As a result, multiple stable and downstream distribution kernels are still affected.
Re: CVE-2026-31431: CopyFail: linux local privilege scalation
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Fri, 1 May 2026 08:11:24 +0200 On Fri, May 01, 2026 at 05:21:46AM +0200, Solar Designer wrote: Hi Greg, Thank you for commenting on this. On Thu, Apr 30, 2026 at 06:52:15PM +0200, Greg KH wrote: On Thu, Apr 30, 2026 at 03:17:45AM -0400, cyber security wrote: That is very terrifying, is it is 10.0 score? There is a score in the CVE entry, does that not show up properly for people somehow? It does.
Re: CVE-2026-31431: CopyFail: linux local privilege scalation
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Thu, 30 Apr 2026 18:52:15 +0200 On Thu, Apr 30, 2026 at 03:17:45AM -0400, cyber security wrote: That is very terrifying, is it is 10.0 score? There is a score in the CVE entry, does that not show up properly for people somehow? This was one of the few CVE ids that we have provided a score for, why people ignored that is confusing.
Re: Coordinated Disclosure in the LLM Age
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Thu, 30 Apr 2026 15:48:17 +0200 On Wed, Apr 29, 2026 at 08:52:14PM +0200, Clemens Lang wrote: Hi, On 29.
Re: CVE-2026-31431: CopyFail: linux local privilege scalation
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Thu, 30 Apr 2026 09:14:58 +0200 On Thu, Apr 30, 2026 at 09:01:22AM +0200, Salvatore Bonaccorso wrote: Hi, On Thu, Apr 30, 2026 at 05:52:37AM +0100, Sam James wrote: Eddie Chapman <eddie () ehuk net> writes: On 29/04/2026 21:23, Jan Schaumann wrote: Affected and fixed versions =========================== Issue introduced in 4.14 with commit 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 and fixed in 6.18.22 with commit...
Re: Multiple vulnerabilities in AppArmor
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Wed, 1 Apr 2026 10:36:13 +0200 On Thu, Mar 26, 2026 at 06:36:17PM +0000, Qualys Security Advisory wrote: Hi Linux kernel CVE assignment team, all, We saw that last week you assigned two CVEs to two of the nine AppArmor vulnerabilities that were fixed and released on March 12, thank you very much for these: ------------------------------------------------------------------------...
Re: Multiple vulnerabilities in AppArmor
oss-sec mailing list archives From: Greg KH <gregkh () linuxfoundation org> Date: Tue, 31 Mar 2026 14:02:56 +0200 On Tue, Mar 31, 2026 at 12:43:48AM -0700, John Johansen wrote: On 3/28/26 23:18, Greg KH wrote: On Sat, Mar 28, 2026 at 02:41:23PM -0700, John Johansen wrote: On 3/27/26 22:55, Greg KH wrote: On Fri, Mar 27, 2026 at 02:50:42PM +0000, Qualys Security Advisory wrote: Hi Greg, John, all, On Fri, Mar 27, 2026 at 07:23:24AM +0100, Greg KH wrote: On Thu, Mar 26, 2026 at 06:36:17PM...
Re: Multiple vulnerabilities in AppArmor
oss-sec mailing list archives From: Greg KH <gregkh () linuxfoundation org> Date: Sun, 29 Mar 2026 08:18:17 +0200 On Sat, Mar 28, 2026 at 02:41:23PM -0700, John Johansen wrote: On 3/27/26 22:55, Greg KH wrote: On Fri, Mar 27, 2026 at 02:50:42PM +0000, Qualys Security Advisory wrote: Hi Greg, John, all, On Fri, Mar 27, 2026 at 07:23:24AM +0100, Greg KH wrote: On Thu, Mar 26, 2026 at 06:36:17PM +0000, Qualys Security Advisory wrote: Since two weeks have passed now (since the fixes were...
Re: Multiple vulnerabilities in AppArmor
oss-sec mailing list archives From: Greg KH <gregkh () linuxfoundation org> Date: Sat, 28 Mar 2026 06:55:08 +0100 On Fri, Mar 27, 2026 at 02:50:42PM +0000, Qualys Security Advisory wrote: Hi Greg, John, all, On Fri, Mar 27, 2026 at 07:23:24AM +0100, Greg KH wrote: On Thu, Mar 26, 2026 at 06:36:17PM +0000, Qualys Security Advisory wrote: Since two weeks have passed now (since the fixes were released), would it be possible to please assign CVEs to the remaining seven AppArmor vulnerabilities:...
Re: Multiple vulnerabilities in AppArmor
oss-sec mailing list archives From: Greg KH <gregkh () linuxfoundation org> Date: Fri, 27 Mar 2026 07:23:24 +0100 On Thu, Mar 26, 2026 at 06:36:17PM +0000, Qualys Security Advisory wrote: Since two weeks have passed now (since the fixes were released), would it be possible to please assign CVEs to the remaining seven AppArmor vulnerabilities: ------------------------------------------------------------------------ https://git.kernel.org/stable/c/e38c55d9f834e5b848bfed0f5c586aaf45acb825 -...
Re: Xen Security Advisory 482 v2 - Linux privcmd driver can circumvent kernel lockdown
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Tue, 24 Mar 2026 13:16:08 +0100 On Tue, Mar 24, 2026 at 12:05:44PM +0000, Xen.org security team wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory XSA-482 version 2 Linux privcmd driver can circumvent kernel lockdown UPDATES IN VERSION 2 ==================== Public release.
Re: Null Pointer Dereference in HarfBuzz
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Mon, 12 Jan 2026 14:43:38 +0100 On Mon, Jan 12, 2026 at 10:42:33AM +0100, Jan Engelhardt wrote: On Monday 2026-01-12 04:09, Jacob Bachmeyer wrote: In short, this is a crash bug, but not a security issue. This is different from (for example) a parser bug that results in NULL being dereferenced if crafted input is processed. Are we now using CVE IDs as some kind of global bug tracker?
Re: A couple of security issues?
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Sat, 20 Dec 2025 10:54:07 +0100 On Sat, Dec 20, 2025 at 09:18:16AM +0000, Artem S. Tashkinov wrote: Hi, Could anyone please check them?
Re: Becoming a CVE Naming Authority for your project
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Wed, 5 Nov 2025 08:23:09 +0900 On Tue, Nov 04, 2025 at 08:47:35AM -0300, Rodrigo Freire wrote: Open Source Project Maintainers, Managing security vulnerabilities is currently a significant pain, especially with the recent increase in dubious CVE reports due to AI assistants. The discussion around questionable CVEs reported against projects like dnsmasq, curl highlights a growing concern within the open source community.
Re: Re: Linux kernel: HFS+ filesystem implementation, issues, exposure in distros
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Sun, 5 Oct 2025 08:23:21 +0200 On Sat, Oct 04, 2025 at 09:23:57PM -0700, nightmare.yeah27 () aceecat org wrote: On Sat, Oct 04, 2025 at 07:45:08AM +0200, Greg KH wrote: The idea is that if triaging 13 bugs a day is unsustainable, What do you mean by this? I never stated it was unsustainable, in fact it's just fine from our side. What is the problem you are wanting others to help in solving with here exactly?
Re: Re: Re: Linux kernel: HFS+ filesystem implementation, issues, exposure in distros
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Sat, 4 Oct 2025 07:45:08 +0200 On Sat, Oct 04, 2025 at 04:35:40AM +0200, Attila Szasz wrote: I know the workload is immense, but from my perspective as a security researcher, here’s what I propose: * I can reach out to academic contacts at universities I’ve collaborated with. * Bring some of these researchers and students on board to engage with the project.
Re: Re: Re: Linux kernel: HFS+ filesystem implementation, issues, exposure in distros
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Fri, 3 Oct 2025 10:16:50 +0200 On Thu, Oct 02, 2025 at 09:32:49PM +0200, Attila Szasz wrote: *Hi Greg,* I am writing to formally invite you to a public debate at next year’s FOSDEM. Our past discussions surrounding the HFS+ vulnerability—and the subsequent "lamest vendor response" award the Linux CNA received at DEFCON—highlighted a significant disconnect in how we approach security, disclosure, and community roles.
Re: Re: Re: Linux kernel: HFS+ filesystem implementation, issues, exposure in distros
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Thu, 2 Oct 2025 16:34:26 +0200 On Thu, Oct 02, 2025 at 03:11:17PM +0200, Attila Szasz wrote: For the sake of product security folks who rely on consistency: the Linux CNA recently registered a batch of HFS/HFS+ CVEs that require manipulating malformed filesystems as a first step. This seems inconsistent with how similar cases were previously handled.
Re: Re: Re: Linux kernel: HFS+ filesystem implementation, issues, exposure in distros
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Sat, 7 Jun 2025 10:17:08 +0200 On Fri, Jun 06, 2025 at 06:00:09PM +0200, Attila Szasz wrote: I don't see how Canonical Product Security is a bad actor here for caring about the actual security of downstream users and acting in a timely manner about an issue that they considered to impact Ubuntu Linux, correctly.
Re: Re: Linux kernel: HFS+ filesystem implementation issues, exposure in distros
oss-sec mailing list archives From: Greg KH <gregkh () linuxfoundation org> Date: Wed, 4 Jun 2025 12:23:16 +0200 On Tue, Jun 03, 2025 at 12:38:11PM +0200, Attila Szasz wrote: Hi, I believe I’ve already shared my main thoughts on this topic on LKML. The discussion between Vyukov and Ts’o is particularly insightful.
Re: CVE-2024-50217: Linux kernel: btrfs: Use-after-free of block device file in __btrfs_free_extra_devids()
oss-sec mailing list archives From: Greg KH <gregkh () linuxfoundation org> Date: Thu, 10 Apr 2025 15:31:03 +0200 On Thu, Apr 10, 2025 at 12:22:46PM +0000, akendo () akendo eu wrote: Hey everyone, Not too sure how or whom to ask about: But I saw that there is CVE-2024-50217 that affects every kernel since 4.8. However, it is only fixed on more recent version of the linux kernel like 6.11 or 6.12. Any reason this wasn’t backported to older kernel versions?
Re: Rust kernel policy
rust-for-linux.vger.kernel.org archive mirror help / color / mirror / Atom feed From: Linus Torvalds <torvalds@linux-foundation.org> To: Christoph Hellwig <hch@infradead.org> Cc: Miguel Ojeda <miguel.ojeda.sandonis@gmail.com>, rust-for-linux <rust-for-linux@vger.kernel.org>, Greg KH <gregkh@linuxfoundation.org>, David Airlie <airlied@gmail.com>, linux-kernel@vger.kernel.org, ksummit@lists.linux.dev Subject: Re: Rust kernel policy Date: Thu, 20 Feb 2025 16:39:58 -0800 [thread overview]...
Re: Rust kernel policy
rust-for-linux.vger.kernel.org archive mirror help / color / mirror / Atom feed From: Christoph Hellwig <hch@infradead.org> To: Miguel Ojeda <miguel.ojeda.sandonis@gmail.com> Cc: rust-for-linux <rust-for-linux@vger.kernel.org>, Linus Torvalds <torvalds@linux-foundation.org>, Greg KH <gregkh@linuxfoundation.org>, David Airlie <airlied@gmail.com>, linux-kernel@vger.kernel.org, ksummit@lists.linux.dev Subject: Re: Rust kernel policy Date: Tue, 18 Feb 2025 08:08:18 -0800 [thread overview]...
Re: On community influencing (was Re: [PATCH v8 2/2] rust: add dma coherent allocator abstraction.)
linux-kernel.vger.kernel.org archive mirror help / color / mirror / Atom feed From: "Theodore Ts'o" <tytso@mit.edu> To: "Dr. Greg" <greg@enjellic.com> Cc: Linus Torvalds <torvalds@linux-foundation.org>, Hector Martin <marcan@marcan.st>, Dave Airlie <airlied@gmail.com>, Jason Gunthorpe <jgg@nvidia.com>, Greg KH <gregkh@linuxfoundation.org>, phasta@kernel.org, Christoph Hellwig <hch@lst.de>, Danilo Krummrich <dakr@kernel.org>, Miguel Ojeda <miguel.ojeda.sandonis@gmail.com>, Abdiel Janulgue...
Re: Node.js EOL CVEs: CVE-2025-23087, CVE-2025-23088, CVE-2025-23089
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Sat, 25 Jan 2025 08:00:04 +0100 On Fri, Jan 24, 2025 at 10:55:39AM -0800, Alan Coopersmith wrote: Their reasons for this are detailed on the blog post at: https://nodejs.org/en/blog/vulnerability/upcoming-cve-for-eol-versions including getting CVE scanners to report EOL versions as vulnerable even if no existing CVE specifically says that they are.
Re: issue with stuck Mitre CVE requests
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Wed, 22 Jan 2025 12:50:21 +0100 On Wed, Jan 22, 2025 at 11:17:54AM +0100, Matthias Gerstner wrote: Hello list, I am currently experiencing for the second time that a CVE request submitted via the Mitre web form [1] is not receiving a response. A similar topic was already shortly discussed in the past [2]. I requested two CVEs on Jan 13. One got assigned within 24 hours, for the other one I still didn't receive a reply.
Re: Re: CVEs issued by the Linux kernel CNA
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Thu, 2 May 2024 11:13:56 +0200 On Wed, May 01, 2024 at 01:27:06PM -0700, Alan Coopersmith wrote: On 2/20/24 15:30, Alan Coopersmith wrote: As recently announced [1], kernel.org is now a CNA for the Linux kernel, and today issued its first 8 CVEs, as seen in the archives of their mailing list at https://lore.kernel.org/linux-cve-announce/ .
Re: New Linux LPE via GSMIOC_SETCONF_DLCI?
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Wed, 17 Apr 2024 08:19:15 +0200 On Tue, Apr 16, 2024 at 10:16:02PM +0200, Solar Designer wrote: On Wed, Apr 10, 2024 at 11:14:57PM +0200, Solar Designer wrote: On Wed, Apr 10, 2024 at 09:56:33PM +0200, Dr. Christopher Kunz wrote: 1. YuriiCrimson's version (April 6-ish) It seems to use GSMIOC_SETCONF_DLCI, PoC supposedly works on current Ubuntu and Debians, but is stopped by LKRG.
Re: CVEs issued by the Linux kernel CNA
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Fri, 23 Feb 2024 06:40:18 +0100 On Thu, Feb 22, 2024 at 09:05:42PM +0100, Solar Designer wrote: Speaking of which, we allow for CVEs to be requested via linux-distros, to be assigned by one of the CNAs in there.
Re: FWD: Kernel vulnerabilities CVE-2021-33630 & CVE-2021-33631
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Tue, 30 Jan 2024 15:01:24 -0800 On Tue, Jan 30, 2024 at 10:45:00PM +0100, Solar Designer wrote: Thank you Greg for looking into these issues. It's great that most longterm kernel trees appear already fixed. I've taken the one remaining missing fix into the next round of kernel releases, so all should be good now.
Re: FWD: Kernel vulnerabilities CVE-2021-33630 & CVE-2021-33631
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Tue, 30 Jan 2024 08:34:03 -0800 On Tue, Jan 30, 2024 at 03:25:24PM +0100, Solar Designer wrote: On Tue, Jan 30, 2024 at 08:46:56AM -0500, Armin Kuster wrote: I noticed these two openEuler CVEs were assigned two weeks ago affecting some K.O stable branches. https://nvd.nist.gov/vuln/detail/CVE-2021-33630 This says: "NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation.
Re: linux-distros membership application of openEuler
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Thu, 28 Dec 2023 10:31:42 +0000 On Tue, Dec 26, 2023 at 01:35:55AM +0100, Solar Designer wrote: On Tue, Dec 26, 2023 at 12:38:36AM +0100, Steffen Nurpmeso wrote: and i really today stumbled over his funny opinion . All "early notice" lists are leaks and should be considered public. . Unless your project is not used by anyone. . Otherwise, why would your government allow it to exist?
Re: linux-distros membership application of openEuler
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Mon, 16 Oct 2023 10:23:50 +0200 On Mon, Oct 16, 2023 at 10:08:50AM +0200, Marcus Meissner wrote: Hi, Regardless of your viability of subscription status I think we also (sadly) have to consider current geopolitical issues here. As far as I understand, US companies and US citizens are not permitted to work with Chinese organizations and/or Chinese nationals.
Re: "Linux Kernel security demistified"
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Mon, 2 Oct 2023 13:08:45 +0200 On Mon, Oct 02, 2023 at 11:48:15AM +0400, Loganaden Velvindron wrote: On Mon, 2 Oct 2023 at 11:10, Greg KH <greg () kroah com> wrote: On Sun, Oct 01, 2023 at 09:13:03PM +0200, Solar Designer wrote: There's also an upcoming Webinar: https://www.linuxfoundation.org/webinars/demystifying-the-linux-kernel-security-process Demystifying the Linux Kernel Security Process October 3, 2023 | 07:00 AM...
Re: "Linux Kernel security demistified"
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Mon, 2 Oct 2023 09:08:50 +0200 On Sun, Oct 01, 2023 at 09:13:03PM +0200, Solar Designer wrote: There's also an upcoming Webinar: https://www.linuxfoundation.org/webinars/demystifying-the-linux-kernel-security-process Demystifying the Linux Kernel Security Process October 3, 2023 | 07:00 AM PDT (UTC-7) Join an interactive, complimentary Mentorship Session exploring Demystifying the Linux Kernel Security Process with Greg...
Re: [CVE-2023-42755] Linux kernel wild pointer access <= v6.2
oss-sec mailing list archives From: Greg KH <gregkh () linuxfoundation org> Date: Tue, 26 Sep 2023 06:58:45 +0200 On Mon, Sep 25, 2023 at 01:13:19PM -0700, Kyle Zeng wrote: [Patch] The patch is to follow the upstream and retire the rsvp classifier in all the stable trees. And it is queued in all the stable trees, but not merged yet.
Re: linux kernel 6.3.0: slab-use-after-free Write in txEnd due to race condition
oss-sec mailing list archives From: Greg KH <greg () kroah com> Date: Mon, 15 May 2023 14:05:18 +0200 On Mon, May 15, 2023 at 09:34:36AM +0800, 蓝色的小羊 wrote: In the JFS filesystem, right?
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Greg
Contact Greg, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack