oss-sec mailing list archives

Re: Dirty Frag: Universal Linux LPE


From: Greg KH <greg () kroah com>
Date: Fri, 8 May 2026 10:56:23 +0200

On Fri, May 08, 2026 at 09:24:01AM +0200, Greg KH wrote:
On Fri, May 08, 2026 at 12:43:59AM +0530, Sandipan Roy wrote:
Hi,

This stated that “no patches or CVEs exist” because the embargo was broken.
Could you please provide an update on the CVE assignment status for this
issue?

CVE-2026-43284 is now assigned.

That was for the first issue, and that is now fixed in the latest round
of stable kernel updates.  The second has CVE-2026-43500 reserved for it
if you need to track this, and is not fixed in any released kernel
version yet.

thanks,

greg k-h


Current thread: