Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 11 Jun 2020 01:14:03 +1000
From: Wade Mealing <>
Subject: Re: kernel: Multiple SSBD related flaws CVE-2020-10766
 , CVE-2020-10767, CVE-2020-10768

> Did you ask the authors of the patches?  I think they might have already
> assigned CVEs from Google's pool, based on previous interactions with
> those developers...

I am in discussions with Anthony Steinhauser from Google, Anthony
stated there were no CVE's assigned.  This message was mainly for the
other CNA's  ( ) who may be
able to assign CVE's.

If the kernel was a CVE Numbering Authority, they could assign their
own ( ) and this whole
problem would not exist.  I'm not on the mailing
list (even after asking), so I can't really say what goes on behind
those closed doors, I would think it falls under their interests.

> thanks,

No problem.

Wade Mealing

Product Security - Kernel, RHCE

Red Hat


Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.