‹ BackHN Continuity

Thread

Several vulnerabilities have been discovered in the Linux kernel

576 points · 408 comments · luispa

  1. imoverclocked · · focus · HN ↗
    Is there a way to know if a particular vanilla kernel has a particular CVE addressed? Unhelpfully, the ChangeLog-* only seems to contain sporadic references to CVEs.
    1. crtasm · · focus · HN ↗
      Clicking them here lists specific kernels, is that enough to tell you?

      <a href="https:&#x2F;&#x2F;security-tracker.debian.org&#x2F;tracker&#x2F;source-package&#x2F;linux" rel="nofollow">https:&#x2F;&#x2F;security-tracker.debian.org&#x2F;tracker&#x2F;source-package&#x2F;l...

      1. imoverclocked · · focus · HN ↗
        That&#x27;s useful if you run a Debian-packaged kernel.

        Searching around, the best I have found so far for vanilla kernels is: <a href="https:&#x2F;&#x2F;linuxcvetracker.com" rel="nofollow">https:&#x2F;&#x2F;linuxcvetracker.com

        It does require a little clicking around to get all the info I want though. Time to pull out curl+awk! :)

        1. evgpbfhnr · · focus · HN ↗
          You can script around <a href="https:&#x2F;&#x2F;git.kernel.org&#x2F;pub&#x2F;scm&#x2F;linux&#x2F;security&#x2F;vulns.git&#x2F;" rel="nofollow">https:&#x2F;&#x2F;git.kernel.org&#x2F;pub&#x2F;scm&#x2F;linux&#x2F;security&#x2F;vulns.git&#x2F; (which is likely what the page you linked use)
    2. [deleted] · · focus · HN ↗

      [deleted]

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.