Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Tue, 24 Aug 2021 14:19:59 +0530
From: Mohammad Tausif Siddiqui <>
Cc: Wade Mealing <>
Subject: Re: Linux kernel: nfc: null ptr dereference in llcp_sock_getname

[Update] Root CNA MITRE marked rejected CVE-2021-3587 for CVE-2021-38208.

CVE-2021-38208 to be used for this issue.

On Tue, Aug 17, 2021 at 5:57 PM Salvatore Bonaccorso <>

> Hi,
> On Tue, Aug 17, 2021 at 04:17:38PM +0800, butt3rflyh4ck wrote:
> > Hi, MITRE has assigned CVE-2021-38208 to this issue,
> >
> >
> > The CVE-2021-3587 assigned by Redhat was 'RESERVED' now.
> >
> >
> > There was some confusion here, Maybe CVE-2021-3587 should be 'REJECT'.
> I wonder if it would actually be better the other way around, but
> leaving the decision to MITRE CNA and Red Hat: Several downstream
> Linux distrubutions seem to have already used CVE-2021-3587 in their
> advisories, so rejecting CVE-2021-38208 would seem to cause less
> turnarounds). But I have a biased view here, at least Debian, Ubuntu,
> Slackware, Fedora and Mageia used already accordingly CVE-2021-3587.
> Regards,
> Salvatore



0EE1 F6BF 8991 9A65 0A79 A0A7 5849 60EC 88B8 2C71 <> for
urgent response.

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.