References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Known Affected Software Configurations Switch to CPE 2.2

Change History

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.11 up to (excluding) 6.9.9

NIST AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

NIST CWE-669

https://git.kernel.org/stable/c/22e6824622e8a8889df0f8fc4ed5aea0e702a694 No Types Assigned

https://git.kernel.org/stable/c/22e6824622e8a8889df0f8fc4ed5aea0e702a694 Patch

https://git.kernel.org/stable/c/62151a0acde90823bdfa991d598c85cf4b1d387d No Types Assigned

https://git.kernel.org/stable/c/62151a0acde90823bdfa991d598c85cf4b1d387d Patch

In the Linux kernel, the following vulnerability has been resolved:

s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings

Replace memzero_explicit() and kfree() with kfree_sensitive() to fix
warnings reported by Coccinelle:

WARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1506)
WARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1643)
WARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1770)

kernel.org https://git.kernel.org/stable/c/22e6824622e8a8889df0f8fc4ed5aea0e702a694 [No types assigned]

kernel.org https://git.kernel.org/stable/c/62151a0acde90823bdfa991d598c85cf4b1d387d [No types assigned]