Received-SPF: pass (google.com: domain of linux-kernel+bounces-175812-linux.lists.archive=gmail.com@vger.kernel.org designates 139.178.88.99 as permitted sender) client-ip=139.178.88.99;
From: Siddh Raman Pant <siddh.raman.pant@oracle.com>
To: "gregkh@linuxfoundation.org" <gregkh@linuxfoundation.org>
CC: "cve@kernel.org" <cve@kernel.org>,
        "linux-cve-announce@vger.kernel.org"
	<linux-cve-announce@vger.kernel.org>,
        "linux-kernel@vger.kernel.org"
	<linux-kernel@vger.kernel.org>
Subject: Re: CVE-2024-26898: aoe: fix the potential use-after-free problem in
 aoecmd_cfg_pkts
Thread-Topic: CVE-2024-26898: aoe: fix the potential use-after-free problem in
 aoecmd_cfg_pkts
Thread-Index: AQHaotvCQyckG31yD0ysWPEF4GWZ/A==
Date: Fri, 10 May 2024 13:12:50 +0000
Message-ID: <8237dfa9a5f408a76ccf0c5767104383ba55f347.camel@oracle.com>
In-Reply-To: <2024041744-CVE-2024-26898-d199@gregkh>
Accept-Language: en-US, en-IN
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 
 =?utf-8?B?SmxRMFdQdit6YVF3R1lwOGFGOE1UOVRzdlowZHA2OWx6Skx5UDhpazVQSTVM?=
 =?utf-8?B?NnFhWm93STFLRjlpbEFtMEdwM0hYZlZweWh1eW1IVmZZeUt0TDZpUXJBLzFm?=
 =?utf-8?B?V0R1Ykk4M3dFbEpWUi9yYnpmTDJ3NVFxVmZRZXlYTlY4bEZaSWZoNUdPRVhi?=
 =?utf-8?B?QWRhTC9hRTJuOUNVZGhDWmlVMi9PSHlIbW9Pem9uL3pBN29QTlZiaTZCUHZI?=
 =?utf-8?B?Q0ViNVgyWlNUM00weE1kZkJvdThJcytmeDZORkJ6M2NSaWo5QXJ0K3lIZjBN?=
 =?utf-8?B?QURIazM5aVppQXc1dThtU2g3TWsyNXUxbnNJUk5ZWFExVGwyT3dVeTlNb3F5?=
 =?utf-8?B?S0NCS2toNTcyYXplUXVybXVlWkN6Q1BkRXA2YWl1T0J6N0NPci9DRVh3RURC?=
 =?utf-8?B?cXpYYkE4V010Sy9GdTVRaFB1VFNNWXlmWE40WGZIcnh0aGVZZ0RCenhZc3dL?=
 =?utf-8?B?NTBOOGUwUHNxdndwcitsdElCUXBjd2dxNWJiVS9jR1c5ckhhRGNmWGNJc21H?=
 =?utf-8?B?T2J2SUg4V2NCMnJhZEE2K3BjeHhUSmFNc0toTWExMGNGMUREdjM0YXlBdXo4?=
 =?utf-8?B?YzBQa1JjWjRDbFlyd1d6UGZtUVQ1U0JuaENRNHZlV2xJTXNhVHRtWVdqNnZW?=
 =?utf-8?B?WUJwdVRrSFpjZ2lYUTRRVWZpVXl0amhTZ3I4WVhvdFkySDJYL2FZOXgzeTRB?=
 =?utf-8?B?WWtSNFNkQ3JmbllYNVRSdUxuL1ptVGJDUUtteTdtaTZuajAxZ3lNOWlzMXJn?=
 =?utf-8?B?RUU1R2kxcitUZkY3RUJHREpidzkwbmptLzhpTWFhK1o0eDhjMGZqSmFYOEcw?=
 =?utf-8?B?RTM0MkVYYi9va2VVWUpZUzgyaitoOHJOcGlhZlg2R01qaVlJbWlrRGFpMHlw?=
 =?utf-8?B?MmNzNEFvYUtYOTZ6WlBGMVVTSHVlNkxSMitGOEtGQjh3M1RoQzMvVFE1amdQ?=
 =?utf-8?B?bGlibmZlQVBnek1yS0lsdTU1ek9va0pHTTFxMkQwbHlScXRDTWJpZ3phWThu?=
 =?utf-8?B?bDdXUkFLQlorVFFNSS90SFd0RjFrSFVhVXMrRFJlRXd5d3MrNVA5andnOE0v?=
 =?utf-8?B?c0hleG1TQlg5THdwUjdFZ3hZVTBpOWc1TVIveFdyQUJ1WDBRZkp1dTVzUTNs?=
 =?utf-8?B?K0MrbmZHUGJZTVVjWDRRTlVpYzFtOEtHbDVKSStLdjdNd2w1NHhwMHAwRjF4?=
 =?utf-8?B?ZExoeGR5SllJdTVrVUdpOWFqSkVlSjl6YUhDYVVGOUx0TkNDd2xSd2VCQ1l5?=
 =?utf-8?B?YTFtSHdrMXF6Tldjd29VRm5qWHpqMC9rYW01ZDFqWGVvSVI4ek5tb084V25y?=
 =?utf-8?B?WFY5K0x2T2tjMWEyWHRnRE9zTVNtb2ZDUnFqajlZRlM3aGJSdEtIb0Q4eDQr?=
 =?utf-8?B?Yy9pUGk5clI0RUQvUUkvS1M1N1JJUEJUU09kengwY0NMclR1WUEvVVZCb1o4?=
 =?utf-8?B?KzhmWVhBdFp1TEMvWXVIZ1d4Z01McS9PSGhQK1VkeVBjUHB0dnNaWCthUk15?=
 =?utf-8?B?dmdtY0NncFVuVzZBQmhJZnVhUXVSeUpwbEpOSnJHd1RNTG5haDAxbkU0dnUx?=
 =?utf-8?B?QUZBUEVaUkIrYkdVUzhtL3FBejBwVGpaZ0dNTWJHUEVVUWhXN0xXalFjNkdX?=
 =?utf-8?B?M2pMaGlsekswemVPWVBiZDFEUndPT2VlaURzK3RnUDZid1h3N0xkU3ZFWTlR?=
 =?utf-8?B?bEt2R01obkFRS3BJdzlzTG9SMUl3VjM4bHdWZGVEZGJ3UWVGRkh2dW5sbGtv?=
 =?utf-8?B?a0FubDRzVDRGaWE2YVBGcVpvbWZXKzg5TnlBUkNqTDliZDBVY2VJcWdENVp2?=
 =?utf-8?B?SVBQNDRBeFJKMTRRMmpySGRJMkgvL1hkVVNMajZWYzdsOEw2R2NKRXVYNEFO?=
 =?utf-8?B?TXhjRGNlQWhSenRNL015SVl5dDlzYVREby8yUmZhYm0zMlE0Ri9NN2JPRkI4?=
 =?utf-8?B?YllFY3NCb3ZJbGhkbmFtazVLc0xzcXNVZmQ2Z1Bia2toK1lmMWNOd1JzSWFp?=
 =?utf-8?B?QTJoemV5WTAxSzMxODhyMmJjNEkybk9LWkZMbGNpOWlYQVh3Qmw3VVp6a0c5?=
 =?utf-8?B?c3o2OFgwcmwxVDBZOXNscXFJYXEvK1ZNNkgwNFdodHV6WThXTjVZbVB4VTdC?=
 =?utf-8?B?QTRPbTArQlZDb1l2MngybC9hazBBNURzSWZIZkljYzZ0NTlWMVU2Q3RPamUx?=
 =?utf-8?Q?scabeq4bN4rHgW/kNOPMi6U/BbN+Vu7RxPN95/3fKZh5?=
Content-Type: multipart/signed; micalg="pgp-sha512";
	protocol="application/pgp-signature"; boundary="=-3T+5udiHJe8nu8CiURKw"
Precedence: bulk
X-Mailing-List: linux-kernel@vger.kernel.org
List-Id: <linux-kernel.vger.kernel.org>
List-Subscribe: <mailto:linux-kernel+subscribe@vger.kernel.org>
List-Unsubscribe: <mailto:linux-kernel+unsubscribe@vger.kernel.org>
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: 
	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
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH0PR10MB5563.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 596395a8-a865-4652-aa76-08dc70f2e534
X-MS-Exchange-CrossTenant-originalarrivaltime: 10 May 2024 13:12:50.9400
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 1nm7OYih0f3lFgAnwA0q+Qrq29BpmcTIGWmIOK8ho76W9cjNwnNmcBQr2vprd+KmPcH2CJonIva1WdyRwtwF0XtFpX1/caOhtm8JM2uNPak=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY5PR10MB6214
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.293,Aquarius:18.0.1039,Hydra:6.0.650,FMLib:17.11.176.26
 definitions=2024-05-10_09,2024-05-10_02,2023-05-22_02
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 bulkscore=0 adultscore=0 malwarescore=0
 mlxlogscore=798 phishscore=0 mlxscore=0 suspectscore=0 spamscore=0
 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2405010000
 definitions=main-2405100094
X-Proofpoint-GUID: WHbrARYcSVoUgG7scaFj8sIt4cj8iU-H
X-Proofpoint-ORIG-GUID: WHbrARYcSVoUgG7scaFj8sIt4cj8iU-H

--=-3T+5udiHJe8nu8CiURKw
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

> In the Linux kernel, the following vulnerability has been resolved:
>=20
> aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
>=20
> This patch is against CVE-2023-6270. The description of cve is:
>=20
> [...]
>=20
> The Linux kernel CVE team has assigned CVE-2024-26898 to this issue.

Isn't the new CVE a duplicate?

Thanks,
Siddh

--=-3T+5udiHJe8nu8CiURKw
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
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=Ng/z
-----END PGP SIGNATURE-----

--=-3T+5udiHJe8nu8CiURKw--