Re: [PATCH v3] Documentation: Document the Linux Kernel CVE process

Jiri Kosina
2024-02-14T14:38:52Z

On Wed, 14 Feb 2024, Greg Kroah-Hartman wrote:

> The people that make up the current team, Lee, Sasha, and I, have a LONG
> history of fixing and triaging and managing security bugs for the
> kernel, in the community and in corporate environments. We know how to
> do this as we have been doing it for decades already.

Thanks for clarifying. Maybe the wording could use some more verbosity
then; one of my potential readings of it was "everything that gets picked
for -stable will get a CVE assigned".

> If you or anyone else wishes to help us out with this classification, we
> can gladly use the help.

Thanks, but no, thanks, I want to stay away from the CVE tragedy as far as
possible :)

--
Jiri Kosina
SUSE Labs