[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH 0/1] uas: add stream number sanity checks (maybe 6.1)
|
From: |
Peter Maydell |
|
Subject: |
Re: [PATCH 0/1] uas: add stream number sanity checks (maybe 6.1) |
|
Date: |
Fri, 20 Aug 2021 13:12:41 +0100 |
On Wed, 18 Aug 2021 at 13:10, Gerd Hoffmann <kraxel@redhat.com> wrote:
>
> Security fix. Sorry for the last-minute patch, I had completely
> forgotten this one until the CVE number for it arrived today.
>
> Given that the classic usb storage device is way more popular than
> the uas (usb attached scsi) device the impact should be pretty low
> and we might consider to not screw up our release schedule for this.
What's the impact if the bug is exploited ?
-- PMM