2024-03-08 10:09:13

by Michal Hocko

[permalink] [raw]
Subject: Re: CVE-2023-52496: mtd: maps: vmu-flash: Fix the (mtd core) switch to ref counters

On Thu 29-02-24 15:52:56, Lee Jones wrote:
> Description
> ===========
>
> In the Linux kernel, the following vulnerability has been resolved:
>
> mtd: maps: vmu-flash: Fix the (mtd core) switch to ref counters
>
> While switching to ref counters for track mtd devices use, the vmu-flash
> driver was forgotten. The reason for reading the ref counter seems
> debatable, but let's just fix the build for now.

Do we really consider build fixes as CVE?
--
Michal Hocko
SUSE Labs


2024-03-08 10:27:39

by Greg KH

[permalink] [raw]
Subject: Re: CVE-2023-52496: mtd: maps: vmu-flash: Fix the (mtd core) switch to ref counters

On Fri, Mar 08, 2024 at 11:08:51AM +0100, Michal Hocko wrote:
> On Thu 29-02-24 15:52:56, Lee Jones wrote:
> > Description
> > ===========
> >
> > In the Linux kernel, the following vulnerability has been resolved:
> >
> > mtd: maps: vmu-flash: Fix the (mtd core) switch to ref counters
> >
> > While switching to ref counters for track mtd devices use, the vmu-flash
> > driver was forgotten. The reason for reading the ref counter seems
> > debatable, but let's just fix the build for now.
>
> Do we really consider build fixes as CVE?

Nope, good catch! We reviewed this one wrong, now revoked, thanks for
the review.

greg k-h