summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorBen Hutchings <ben@decadent.org.uk>2022-06-21 00:05:27 +0200
committerBen Hutchings <ben@decadent.org.uk>2022-06-21 00:12:31 +0200
commit62e8c058e38f5ff4d5d5165af4d91f22b8f2dbbe (patch)
tree5f0c57e9b10c66fc94587ed60deddbae3a798d04
parent9dcddf5086b8bb55413993c94a2f5ca148e9eaa3 (diff)
Correct break/fix commits for CVE-2022-20148
-rw-r--r--active/CVE-2022-2014819
1 files changed, 11 insertions, 8 deletions
diff --git a/active/CVE-2022-20148 b/active/CVE-2022-20148
index 25bd7ec7..437ccdb2 100644
--- a/active/CVE-2022-20148
+++ b/active/CVE-2022-20148
@@ -1,13 +1,16 @@
-Description:
+Description: f2fs: fix UAF in f2fs_available_free_memory
References:
https://source.android.com/security/bulletin/pixel/2022-06-01
Notes:
+ bwh> Actually introduced in 5.13, not fixed, by the first
+ bwh> referenced commit d6d2b491a82e "f2fs: allow to change discard
+ bwh> policy based on cached discard cmds".
Bugs:
-upstream: released (5.13-rc1) [d6d2b491a82e1e411a6766fbfb87c697d8701554], released (5.16-rc1) [5429c9dbc9025f9a166f64e22e3a69c94fd5b29b]
-5.10-upstream-stable:
-4.19-upstream-stable:
-4.9-upstream-stable:
+upstream: released (5.16-rc1) [5429c9dbc9025f9a166f64e22e3a69c94fd5b29b]
+5.10-upstream-stable: N/A "Vulnerability introduced later"
+4.19-upstream-stable: N/A "Vulnerability introduced later"
+4.9-upstream-stable: N/A "Vulnerability introduced later"
sid: released (5.15.3-1)
-5.10-bullseye-security:
-4.19-buster-security:
-4.9-stretch-security:
+5.10-bullseye-security: N/A "Vulnerability introduced later"
+4.19-buster-security: N/A "Vulnerability introduced later"
+4.9-stretch-security: N/A "Vulnerability introduced later"

© 2014-2024 Faster IT GmbH | imprint | privacy policy