diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2022-06-11 20:48:14 +0200 |
|---|---|---|
| committer | Salvatore Bonaccorso <carnil@debian.org> | 2022-06-11 20:48:14 +0200 |
| commit | 1726c9a593f36e8213260a45e933e91c02f78d82 (patch) | |
| tree | 1c56b814321bc93ca114e16ded26236c7b113d3a /retired/CVE-2022-1998 | |
| parent | 5b9111e29fff82db95d286a2806a95f4ded110e6 (diff) | |
Retire several CVEs
Diffstat (limited to 'retired/CVE-2022-1998')
| -rw-r--r-- | retired/CVE-2022-1998 | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/retired/CVE-2022-1998 b/retired/CVE-2022-1998 new file mode 100644 index 00000000..413c8d51 --- /dev/null +++ b/retired/CVE-2022-1998 @@ -0,0 +1,17 @@ +Description: fanotify: Fix stale file descriptor in copy_event_to_user() +References: + https://bugzilla.redhat.com/show_bug.cgi?id=2052312 +Notes: + carnil> CAP_SYS_ADMIN capability is required to exploit the issue. + carnil> Issue introduced with f644bc449b37 ("fanotify: fix + carnil> copy_event_to_user() fid error clean up") in 5.13-rc7 and was + carnil> backported to 5.10.46 and 5.12.13. +Bugs: +upstream: released (5.17-rc3) [ee12595147ac1fbfb5bcb23837e26dd58d94b15d] +5.10-upstream-stable: released (5.10.97) [7b4741644cf718c422187e74fb07661ef1d68e85] +4.19-upstream-stable: N/A "Vulnerable code not present" +4.9-upstream-stable: N/A "Vulnerable code not present" +sid: released (5.16.7-1) +5.10-bullseye-security: released (5.10.103-1) +4.19-buster-security: N/A "Vulnerable code not present" +4.9-stretch-security: N/A "Vulnerable code not present" |