lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Thu, 18 Apr 2024 11:52:43 +0200
From: Greg KH <gregkh@...uxfoundation.org>
To: wangzhu <wangzhu9@...wei.com>
Cc: "harry.wentland@....com" <harry.wentland@....com>,
	"sunpeng.li@....com" <sunpeng.li@....com>,
	"alexander.deucher@....com" <alexander.deucher@....com>,
	"christian.koenig@....com" <christian.koenig@....com>,
	"airlied@...ux.ie" <airlied@...ux.ie>,
	"daniel@...ll.ch" <daniel@...ll.ch>,
	"sanglipeng1@...com" <sanglipeng1@...com>,
	"sashal@...nel.org" <sashal@...nel.org>,
	"wayne.lin@....com" <wayne.lin@....com>,
	"joshua@...ggi.es" <joshua@...ggi.es>,
	"hongao@...ontech.com" <hongao@...ontech.com>,
	"cssk@...-c.es" <cssk@...-c.es>,
	"nicholas.kazlauskas@....com" <nicholas.kazlauskas@....com>,
	"chiahsuan.chung@....com" <chiahsuan.chung@....com>,
	"mwen@...lia.com" <mwen@...lia.com>,
	"roman.li@....com" <roman.li@....com>,
	"aurabindo.pillai@....com" <aurabindo.pillai@....com>,
	"hansen.dsouza@....com" <hansen.dsouza@....com>,
	"Rodrigo.Siqueira@....com" <Rodrigo.Siqueira@....com>,
	"Konstantin Meskhidze (A)" <konstantin.meskhidze@...wei.com>,
	"aric.cyr@....com" <aric.cyr@....com>,
	"jaehyun.chung@....com" <jaehyun.chung@....com>,
	"mario.limonciello@....com" <mario.limonciello@....com>,
	"amd-gfx@...ts.freedesktop.org" <amd-gfx@...ts.freedesktop.org>,
	"dri-devel@...ts.freedesktop.org" <dri-devel@...ts.freedesktop.org>,
	"linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
Subject: Re: 答复: [PATCH v5.10]
 drm/amd/display: Wake DMCUB before executing GPINT commands

On Thu, Apr 18, 2024 at 03:19:46AM +0000, wangzhu wrote:
> Hi Greg, thanks for your reply. Since there is no patch to fix CVE-2023-52624 in linux-5.10, there is a patch in the linux-6.7 branch to fix it, its commit is 2ef98c6d753a744e333b7e34b9cf687040fba57d ("drm/amd/display: Wake DMCUB before executing GPINT commands"). When we apply this patch to linux-5.10, there are lots of conflicts, and we found there are lots of dependent patches, we do not apply all these patches since some are not meant to fix the cve, so we just get part of them, and for each patch we just get the part which is helpful to fix.

Why do you think that specific CVE is relevent to the 5.10.y kernel?
And if so, what about the ones newer than that, as you know I can not
take patches only for older kernels, that would leave newer branches
vulnerable to the same bug.

So please submit fixes for all branches that you wish to see resolved at
the same time.

thanks,

greg k-h

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ