Arthur Besse@lemmy.ml to linuxmemes@lemmy.worldEnglish · 17 days agoSeveral vulnerabilitieslemmy.mlimagemessage-square38fedilinkarrow-up1304arrow-down14
arrow-up1300arrow-down1imageSeveral vulnerabilitieslemmy.mlArthur Besse@lemmy.ml to linuxmemes@lemmy.worldEnglish · 17 days agomessage-square38fedilink
minus-squaretruthfultemporarily@feddit.orglinkfedilinkarrow-up81arrow-down1·17 days agoTo add, pretty much any kernel bug gets a CVE because everything wrong in the kernel could theoretically be abused.
minus-squareslazer2au@lemmy.worldlinkfedilinkEnglisharrow-up33arrow-down2·17 days agoBut there is a difference between an unauthenticated bug and a bug requiring an authenticated user getting some deserialised data.
minus-squaretruthfultemporarily@feddit.orglinkfedilinkarrow-up21arrow-down1·17 days agoYes, hence why you would have to check the CVSS of all of those.
To add, pretty much any kernel bug gets a CVE because everything wrong in the kernel could theoretically be abused.
But there is a difference between an unauthenticated bug and a bug requiring an authenticated user getting some deserialised data.
Yes, hence why you would have to check the CVSS of all of those.