KASAN Spots Another Kernel Vulnerability From Early Linux 2.6 Through 4.20

[Murple]

So Huawei are making us more secure? What crazy times we live in

[davidbepo]

well that socks

[Leprechaunius]

If it has been there since 2.6.x, why hasn't it been spotted until now? It's not like Kasan is a brand new tool.

[Space Heater]

While obviously a vulnerability isn't good, it is nice to see that kernel testing is finding these things.

[phoronix]

Phoronix: KASAN Spots Another Kernel Vulnerability From Early Linux 2.6 Through 4.20

The Kernel Address Sanitizer (KASAN) that detects dynamic memory errors within the Linux kernel code has just picked up another win with uncovering a use-after-free vulnerability that's been around since the early Linux 2.6 kernels...

http://www.phoronix.com/scan.php?page=news_item&px=KASAN-CVE-2019-8912