CVE-2021-4440: A Linux CNA Case Study

Wed, 26 Jun 2024 00:00:00 -0400

This blog serves as a case study into how the newly-formed Linux CNA (CVE Numbering Authority) has affected Linux kernel vulnerability management, through the mishandling of a vulnerability we reported this year in the upstream 5.10 LTS kernel.