Re: [PATCH v5] Documentation: Document the Linux Kernel CVE process

On Tue, Feb 20, 2024 at 11:03:17AM +0100, Vegard Nossum wrote: > > On 17/02/2024 13:55, Greg Kroah-Hartman wrote: > > +A list of all assigned CVEs for the Linux kernel can be found in the > > +archives of the linux-cve mailing list, as seen on > > +https://lore.kernel.org/linux-cve-announce/. To

Re: [PATCH v5] Documentation: Document the Linux Kernel CVE process

On 17/02/2024 13:55, Greg Kroah-Hartman wrote: +A list of all assigned CVEs for the Linux kernel can be found in the +archives of the linux-cve mailing list, as seen on +https://lore.kernel.org/linux-cve-announce/. To get notice of the +assigned CVEs, please `subscribe +

[PATCH v5] Documentation: Document the Linux Kernel CVE process

The Linux kernel project now has the ability to assign CVEs to fixed issues, so document the process and how individual developers can get a CVE if one is not automatically assigned for their fixes. Reviewed-by: Kees Cook Reviewed-by: Konstantin Ryabitsev Reviewed-by: Krzysztof Kozlowski Review