CVE false positives

[exploide]

Fixed false positives for some CVEs:

• cve-2022-0847 showed vulnerable for kernel 4.x but the vulnerability only exists since 5.8
• cve-2021-4034 showed vulnerable for newer Fedora versions, I forgot them last time
• cve-2021-3156 was missing the executable bit (not important but for consistency)

[garatc]

Thanks for this. Especially for cve-2022-0847, which showed a false positive each time it was run against a RedHat 8-

[diego-treitos]

Thanks for the changes @exploide . I have one question about this PR. You have addes an empty file called cve-2021-3156.sh. Why is that?

[exploide]

It's not an empty file, it already exists. I just changed the mode to add the executable flag. The diff on the changes plane shows

cve/cve-2021-3156.sh     100644 → 100755

and the only change is the +x in the mode.

This is not important at all, but is consistent to all the other files within the cve/ folder. If you do an ls -l you see that at the moment, only this script is marked as non-executable.

[diego-treitos]

It's not an empty file, it already exists. I just changed the mode to add the executable flag. The diff on the changes plane shows

It's not an empty file, it already exists. I just changed the mode to add the executable flag. The diff on the changes plane shows

cve/cve-2021-3156.sh     100644 → 100755

and the only change is the +x in the mode.

This is not important at all, but is consistent to all the other files within the cve/ folder. If you do an ls -l you see that at the moment, only this script is marked as non-executable.

cve/cve-2021-3156.sh     100644 → 100755

and the only change is the +x in the mode.

This is not important at all, but is consistent to all the other files within the cve/ folder. If you do an ls -l you see that at the moment, only this script is marked as non-executable.

My apologies, you even stated that in your first comment. These days I am quite busy so I didn't pay much attention.

Alright. I am mergin this. Thanks a lot again @exploide !