NA

CVE-2024-35904

Published: 19/05/2024 Updated: 20/05/2024

Vulnerability Summary

In the Linux kernel, the following vulnerability has been resolved: selinux: avoid dereference of garbage after mount failure In case kern_mount() fails and returns an error pointer return in the error branch instead of continuing and dereferencing the error pointer. While on it drop the never read static variable selinuxfs_mount.

Mailing Lists

Greg Kroah-Hartman wrote on Wed, May 29, 2024 at 09:23:50PM +0200: (pedantic: `if cve=$(cve_search "$id"); then` is a bit simpler/failproof) That's roughly what I had done earlier this week (handpicking the commits that could impact our users), but this doesn't address my second point as it won't catch any new CVE introduced before that tree tha ...
On Thu, May 30, 2024 at 01:45:39PM +0900, Dominique Martinet wrote: Very true, I do not claim to be a "robust" bash programmer at all :) True Yeah, but the json files have their own issues, more below Great Only you know your use cases, which is why we do not offer up any "grading" of kernel CVEs as Linux is used in so many differe ...