You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I'm cloning this repo to make some modifications to customize. However, I've noticed that some CVEs which were confirmed and fixed by Linux do not get patched in this repo. To enhance the availability of my project as far as possible, I will appreciate it if any of the CVE below do exist in this repo as well, so that I can fix these security issue myself by applying the corresponding patch.
Here are the CVEs I found in this repo unpatched, but get fixed in Linux:
CVE-2022-1353 in trunk/linux-3.4.x/net/key/af_key.c's function static int pfkey_register(struct sock *sk, struct sk_buff *skb, const struct sadb_msg *hdr, void * const *ext_hdrs), with patch here for your reference.
CVE-2022-3028 in trunk/linux-3.4.x/net/key/af_key.c's function static int pfkey_register(struct sock *sk, struct sk_buff *skb, const struct sadb_msg *hdr, void * const *ext_hdrs), with patch here for your reference.
I'm cloning this repo to make some modifications to customize. However, I've noticed that some CVEs which were confirmed and fixed by Linux do not get patched in this repo. To enhance the availability of my project as far as possible, I will appreciate it if any of the CVE below do exist in this repo as well, so that I can fix these security issue myself by applying the corresponding patch.
Here are the CVEs I found in this repo unpatched, but get fixed in Linux:
CVE-2022-1353 in trunk/linux-3.4.x/net/key/af_key.c's function
static int pfkey_register(struct sock *sk, struct sk_buff *skb, const struct sadb_msg *hdr, void * const *ext_hdrs)
, with patch here for your reference.CVE-2022-3028 in trunk/linux-3.4.x/net/key/af_key.c's function
static int pfkey_register(struct sock *sk, struct sk_buff *skb, const struct sadb_msg *hdr, void * const *ext_hdrs)
, with patch here for your reference.CVE-2019-3846 in trunk/linux-3.4.x/drivers/net/wireless/mwifiex/scan.c's function
int mwifiex_update_bss_desc_with_ie(struct mwifiex_adapter *adapter, struct mwifiex_bssdescriptor *bss_entry, u8 *ie_buf, u32 ie_len)
, with patch here for your reference.CVE-2020-9383 in trunk/linux-3.4.x/drivers/block/floppy.c's function
static void set_fdc(int drive)
, with patch here for your reference.CVE-2020-12653 in trunk/linux-3.4.x/drivers/net/wireless/mwifiex/scan.c's function
int mwifiex_cmd_append_vsie_tlv(struct mwifiex_private *priv, u16 vsie_mask, u8 **buffer)
, with patch here for your reference.CVE-2022-28390 in trunk/linux-3.4.x/drivers/net/can/usb/ems_usb.c's function
static netdev_tx_t ems_usb_start_xmit(struct sk_buff *skb, struct net_device *netdev)
, with patch here for your reference.The text was updated successfully, but these errors were encountered: