Subject: Re: Is CVE-2024-26624 a valid issue?

From: Greg KH <[email-masked]>
Date: Wed, 27 Mar 2024 14:56:06 +0100

On Mon, Mar 11, 2024 at 02:00:43PM +0000, Lee Jones wrote:
> On Mon, 11 Mar 2024, Eric Dumazet wrote:
> 
> > Hi Ben
> > 
> > Yes, my understanding of the issue is that it is a false positive.
> > 
> > Some kernels might crash whenever LOCKDEP triggers, as for any WARNing.
> 
> Exactly.  So is it possible to trip this, false positive or otherwise?
> Being able to crash the kernel, even under false pretences, is
> definitely something we usually provide CVE allocations for.

lockdep warnings do not trigger a reboot for panic-on-warn, so I'll go
reject this cve, thanks.

greg k-h