Re: Does v5.4 need CVE-2022-3566 and CVE-2022-3567 patches

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Apr 25, 2023 at 04:08:30PM +0200, Kristof Havasi wrote:
> Hi there,
> 
> I was evaluating CVE-2022-3567 and CVE-2022-3566 which both
> revolt around load tearing and reference an ancient Kernel commit:
> > Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
> 
> I am not sure whether they are applicable to the v5.4.y branch as well.

I do not know, what specific commits are you referring to?  CVEs mean
nothing, they are not valid identifiers, sorry.

And have you tried applying them to the older kernels and testing to see
if they solve any specific issue?

Or better yet, why use the older kernels, why not stick to the most
recent one?  What is preventing you from switching?

thanks,

gre gk-h



[Index of Archives]     [Linux Kernel]     [Kernel Development Newbies]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Yosemite Hiking]     [Linux Kernel]     [Linux SCSI]

  Powered by Linux