[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <Y6XdsmNOXvfti9kq@gentoo.org>
Date: Fri, 23 Dec 2022 10:56:18 -0600
From: John Helmert III <ajak@...too.org>
To: oss-security@...ts.openwall.com
Subject: Re: Details on this supposed Linux Kernel ksmbd RCE
On Fri, Dec 23, 2022 at 09:04:25AM -0500, Sasha Levin wrote:
> On Fri, Dec 23, 2022 at 09:17:28AM +0100, Marcus Meissner wrote:
> >Not sure why they do not like you, but to be very clear anyone else can
> >requests CVEs for the kernel, (except the blacklisted drivers/staging/ area).
>
> For CVEs assigned (earlier this month) to issues in drivers/staging,
> what would be the process to remove the assignment or mark them as
> invalid?
Requests for changes to CVEs (like rejections) should go to the
assigning CNA. For MITRE, they want such requests to go through
cveform.mitre.org. For others, you can find contact points on [1].
[1] https://www.cve.org/PartnerInformation/ListofPartners
> --
> Thanks,
> Sasha
Download attachment "signature.asc" of type "application/pgp-signature" (229 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
