From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.linuxfoundation.org ([140.211.169.12]:46334 "EHLO mail.linuxfoundation.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1730869AbeHGSyv (ORCPT ); Tue, 7 Aug 2018 14:54:51 -0400 Date: Tue, 7 Aug 2018 18:39:41 +0200 From: Greg KH To: Yuki Machida Cc: stable@vger.kernel.org, wen.xu@gatech.edu, dchinner@redhat.com, darrick.wong@oracle.com Subject: Re: Backport Security Fix for CVE-2018-13095 to v4.14 Message-ID: <20180807163941.GA2785@kroah.com> References: <20180807131753.GD1904@kroah.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20180807131753.GD1904@kroah.com> Sender: stable-owner@vger.kernel.org List-ID: On Tue, Aug 07, 2018 at 03:17:53PM +0200, Greg KH wrote: > On Mon, Aug 06, 2018 at 12:01:20PM +0900, Yuki Machida wrote: > > Hi Greg, > > > > I conformed that a patch of CVE-2018-13095 not applied at v4.14.60. > > Could you please apply a patch for 4.14-stable ? > > It does not apply cleanly at all, can you please provide a working > backport that you have tested? It also breaks the build in 4.17.y, so I've had to drop it there as well. Are you sure this fixes something that you care about? Why are people creating random CVEs for things that no one seems to actually backport? thanks, greg k-h