Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 8 Aug 2013 17:02:49 -0700
From: Greg KH <>
Cc: Petr Matousek <>
Subject: Re: CVE Request: Linux kernel: arm64: unhandled el0

On Thu, Aug 08, 2013 at 03:39:30PM +0530, P J P wrote:
>   Hi,
> Linux kernel built for the ARM64(CONFIG_ARM64) platform is
> vulnerable to a crash when the processor generates trap/esr, that is
> not handled gracefully, which leads to bad_mode(), wherein it'll
> die() or oops().
> A user/program could use this flaw to crash the kernel resulting in DoS.
> Upstream fixes:
> ===============
>  ->
>  ->

CVE requests for code that can only run on a processor that is not
shipping yet?  Isn't there a rule somewhere about CVEs not being allowed
for stuff like this?


greg k-h

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.