On Sat, Jun 07, 2025 at 10:37:12AM -0400, Sasha Levin wrote: > The scope, which I assume was quoted from > https://www.cve.org/PartnerInformation/ListofPartners/partner/Linux also > lists c...@kernel.org as the right email to contact.
This page also links as step one to https://www.kernel.org/doc/html/latest/process/security-bugs.html, which does _not_ list c...@kernel.org anywhere. > Note that this isn't just a technicality: for example, I'm a member of > cve@k.o, but *NOT* of security@k.o. But it already reached the right organisation. Did security@k.o respond with a referal? Bastian -- There are some things worth dying for. -- Kirk, "Errand of Mercy", stardate 3201.7
