Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Improve sysfs vulnerability parsing #568

Merged
merged 2 commits into from
Sep 22, 2023
Merged

Improve sysfs vulnerability parsing #568

merged 2 commits into from
Sep 22, 2023

Commits on Sep 15, 2023

  1. Improve sysfs vulnerability parsing 

    The existing sysfs vulnerability parsing routines expected the data provided by the kernel to start with either "Not Affected"/"Vulnerable"/"Mitigation"; however, there are a handful of vulnerabilities that can provide data not matching this expectation:

- https://elixir.bootlin.com/linux/v6.1.53/source/arch/x86/kernel/cpu/bugs.c#L2519
- https://elixir.bootlin.com/linux/v6.1.53/source/arch/x86/kernel/cpu/bugs.c#L546
- https://elixir.bootlin.com/linux/v6.1.53/source/arch/x86/kernel/cpu/bugs.c#L2578

Modify the vulnerability parsing to make use of a 4th state ("Unknown"), which is used when the vulnerability information can't be parsed to any of the other vulnerability states, and output the information provided by the kernel, rather than erroring out.

Vulnerability parsing tests have been updated to include the aforementioned vulnerability data.

Signed-off-by: João Lima <[email protected]>
    @jopelima
    jopelima committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    5cf67f2 View commit details
    Browse the repository at this point in the history

Commits on Sep 22, 2023

  1. Merge branch 'master' into vulnerabilities-fix

    @SuperQ
    SuperQ authored Sep 22, 2023
    Configuration menu
    Copy the full SHA
    434630d View commit details
    Browse the repository at this point in the history