linux-kernel - Re: [PATCH v3] nbd_genl_status: null check for nla_nest

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Wed, 14 Apr 2021 11:05:32 +0800
From:   Mark-PK Tsai <mark-pk.tsai@...iatek.com>
To:     <mkubecek@...e.cz>, <linux-kernel@...r.kernel.org>
CC:     <axboe@...nel.dk>, <emamd001@....edu>, <josef@...icpanda.com>,
        <kjlu@....edu>, <linux-block@...r.kernel.org>,
        <navid.emamdoost@...il.com>, <nbd@...er.debian.org>,
        <smccaman@....edu>, <mark-pk.tsai@...iatek.com>,
        <jy.ho@...iatek.com>, <yj.chiang@...iatek.com>
Subject: Re: [PATCH v3] nbd_genl_status: null check for nla_nest_start

From: Michal Kubecek <mkubecek@...e.cz>

Hi,

I found that CVE-2019-16089 still exist in upstream kernel.
Does anyone know why this patch was not merged?