Skip to content

fix for Spurious linux_kernel CVEs, cpe string handling #1086

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
BenediktMKuehne merged 1 commit into from
Mar 12, 2024
Merged

fix for Spurious linux_kernel CVEs, cpe string handling #1086

BenediktMKuehne merged 1 commit into from
Mar 12, 2024

Conversation

@m-1-k-3
Copy link
Member

@m-1-k-3 m-1-k-3 commented Mar 8, 2024

  • What kind of change does this PR introduce? (Bug fix, feature, docs update, ...)

Bug fix

  • What is the current behavior? (You can also link to an open issue here)

see #1080

  • What is the new behavior (if this is a feature change)? If possible add a screenshot.

closes #1080

@m-1-k-3
Copy link
Member Author

m-1-k-3 commented Mar 8, 2024

@gluesmith2021 could you give it a try

@m-1-k-3 m-1-k-3 added bug Something isn't working cve-search Some cve-search question/issue EMBA labels Mar 8, 2024
@m-1-k-3 m-1-k-3 changed the title dirty fix fix for Spurious linux_kernel CVEs, cpe string handling Mar 8, 2024
@gluesmith2021
Copy link

gluesmith2021 commented Mar 11, 2024 •
edited
Loading

@gluesmith2021 could you give it a try

Fix works perfectly. Diff between CVE results from before-fix and after-fix on my sample also reveals that other software was affected, i.e. not only linux_kernel as is the original issue. For example, "lua:5.1.2" would incorrectly match those two CVEs for the same reason:

The fix prevents such incorrect matches. Thank you.

@BenediktMKuehne BenediktMKuehne merged commit dd84dfe into e-m-b-a:master Mar 12, 2024
@m-1-k-3 m-1-k-3 deleted the Spurious_linux_kernel_CVEs_cpe_string_handling branch February 13, 2025 12:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@BenediktMKuehne BenediktMKuehne BenediktMKuehne approved these changes

Assignees

@BenediktMKuehne BenediktMKuehne

Labels

bug Something isn't working cve-search Some cve-search question/issue EMBA

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Spurious linux_kernel CVEs, cpe string handling.

3 participants

@m-1-k-3 @gluesmith2021 @BenediktMKuehne