diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2024-02-22 22:46:54 +0100 |
|---|---|---|
| committer | Salvatore Bonaccorso <carnil@debian.org> | 2024-02-22 22:46:54 +0100 |
| commit | 743da03b5fe32dc37127a72d96464fa740c5bba6 (patch) | |
| tree | 7c67cd5ee797c09bf560bccc524d4e033f9596fb /retired | |
| parent | 4fe152c5e2f9c10ba757936a8ba2b28cba76c64d (diff) | |
Retire some CVEs
Diffstat (limited to 'retired')
| -rw-r--r-- | retired/CVE-2023-52446 | 13 | ||||
| -rw-r--r-- | retired/CVE-2024-26592 | 12 |
2 files changed, 25 insertions, 0 deletions
diff --git a/retired/CVE-2023-52446 b/retired/CVE-2023-52446 new file mode 100644 index 00000000..63062aed --- /dev/null +++ b/retired/CVE-2023-52446 @@ -0,0 +1,13 @@ +Description: bpf: Fix a race condition between btf_put() and map_free() +References: +Notes: + carnil> Commit fixes 958cf2e273f0 ("bpf: Introduce bpf_obj_new") in 6.2-rc1. +Bugs: +upstream: released (6.8-rc1) [59e5791f59dd83e8aa72a4e74217eabb6e8cfd90] +6.1-upstream-stable: N/A "Vulnerable code not present" +5.10-upstream-stable: N/A "Vulnerable code not present" +4.19-upstream-stable: N/A "Vulnerable code not present" +sid: released (6.6.15-1) +6.1-bookworm-security: N/A "Vulnerable code not present" +5.10-bullseye-security: N/A "Vulnerable code not present" +4.19-buster-security: N/A "Vulnerable code not present" diff --git a/retired/CVE-2024-26592 b/retired/CVE-2024-26592 new file mode 100644 index 00000000..9711fc25 --- /dev/null +++ b/retired/CVE-2024-26592 @@ -0,0 +1,12 @@ +Description: ksmbd: fix UAF issue in ksmbd_tcp_new_connection() +References: +Notes: +Bugs: +upstream: released (6.8-rc1) [38d20c62903d669693a1869aa68c4dd5674e2544] +6.1-upstream-stable: released (6.1.75) [380965e48e9c32ee4263c023e1d830ea7e462ed1] +5.10-upstream-stable: N/A "Vulnerable code not present" +4.19-upstream-stable: N/A "Vulnerable code not present" +sid: released (6.6.15-1) +6.1-bookworm-security: released (6.1.76-1) +5.10-bullseye-security: N/A "Vulnerable code not present" +4.19-buster-security: N/A "Vulnerable code not present" |