oss-security - Re: CVE request - kernel: ima: fix null pointer dereference

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 9 Feb 2010 07:56:22 -0800
From: Greg KH <greg@...ah.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE request - kernel: ima: fix null pointer
 dereference

On Mon, Feb 08, 2010 at 09:30:48AM +0800, Eugene Teo wrote:
> Was cc'ed this in a couple of kernel mailing lists.
> 
> This was introduced in 6c21a7fb4 (v2.6.33-rc1).

Do we need CVE numbers for issues that never showed up in a released
kernel version?  I don't see how this could affect anyone, unless they
were foolish enough to ship a product on a non-released kernel :)

thanks,

greg k-h

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.