On Wed, 2026-08-19 at 05:43 -0500, Junjie Cao wrote: > I've asked on the public bug 2044575 and via [email protected] for > bug 2040604 to be opened or the affected files named, and will > follow up here when Red Hat responds.
Red Hat PSIRT responded and named the affected code: an unvalidated v2_ext_offset in the SMC CLC proposal parsing, which is the issue fixed in v6.13 and tracked upstream as CVE-2024-49568. Details are on the public bug: https://bugzilla.redhat.com/show_bug.cgi?id=2044575 v4 with the eight reviewed entries follows as agreed; CVE-2022-0400 comes as a separate fixed-version patch, since it is new analysis rather than a rework of the reviewed one.
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#244045): https://lists.openembedded.org/g/openembedded-core/message/244045 Mute This Topic: https://lists.openembedded.org/mt/120714046/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
