nluedtke / linux_kernel_cves

Tracking CVEs for the linux Kernel
Apache License 2.0
739 stars 71 forks source link

[DATA] CVE-2020-36775 version information #399

Open DerDakon opened 6 months ago

DerDakon commented 6 months ago

Change Type Requested Update

CVE id number CVE-2020-36775

References https://github.com/gregkh/linux/commit/0478ccdc8ea016de1ebaf6fe6da0275c2b258c5b https://github.com/torvalds/linux/commit/687de7f1010cb819d04b768556960d3689abe02b https://github.com/torvalds/linux/commit/344150999b7fc88502a65bbb147a47503eca2033 https://github.com/torvalds/linux/commit/687de7f1010cb819d04b768556960d3689abe02b

Additional context The first commit is a backport to 5.4.189, which says it backports df77fbd8c5b222c680444801ffd20e8bbc90a56e. But if you look at the diffs you will find that it is not, in fact it is backporting https://github.com/torvalds/linux/commit/344150999b7fc88502a65bbb147a47503eca2033. It can't be backported to 5.4 as compression for f2fs was added in 5.6-rc1.

If one assumes that this is still the same issue (both are deadlocks), then the lower version is 4.12-rc1, which is the where Fixes: commit for the backported change first appeared (4th revision above).