topic Re: CVE-2020-26541 in Tech Talk

CVE-2020-26541

Tom_Wang — Mon, 12 Oct 2020 02:18:22 GMT

Hello,

I recently passed the CISSP and became the member of ISC2.

I looked the web site vulnerability.isc2.org and found out that one of the Linux Kernel vulnerability CVE-2020-26541 said:

The Linux kernel through 5.8.13 does not properly enforce the.....

My question is, the word "through" means this vulnerability only exists in Linux kernel version 5.8.13, or several other versions are also affected?

Sorry if this question looks more like a English rather than Security question from a non-native English speaker.

Thanks in advance.

Re: CVE-2020-26541

denbesten — Mon, 12 Oct 2020 05:07:56 GMT

@Tom_Wang wrote:

The Linux kernel through 5.8.13 does not properly enforce the.....

My question is, the word "through" means this vulnerability only exists in Linux kernel version 5.8.13, or several other versions are also affected?

I would read that as "kernel versions 5.8.13 and earlier do not properly enforce..". The more common phasing would be, "fixed in 5.8.14".

Re: CVE-2020-26541

ericgeater — Mon, 12 Oct 2020 15:35:25 GMT

Congrats on the pass. How on earth was I not culturally aware of vulnerability.isc2.org?! Thanks for talking about it in the group.

Re: CVE-2020-26541

isc220 — Mon, 12 Oct 2020 23:29:16 GMT

I interpret the statement

...Linux kernel through 5.8.13... to mean "up to and including 5.8.13.

Stated another way: this CVE-2020-26541 applies to all previous Linux kernel versions and includes version 5.8.13, but not versions higher than 5.8.13.

Hope that helps 🙂