Re: [PATCH RFC 6.6.y 00/15] Some missing CVE fixes

On 10/2/24 9:05 AM, Vegard Nossum wrote:

Christophe JAILLET (1): null_blk: Remove usage of the deprecated ida_simple_xx() API

Yu Kuai (1): null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'

I don't see how either of these are CVEs? Obviously not a problem to backport either of them to stable, but I wonder what the reasoning for that is. IOW, feels like those CVEs are bogus, which I guess is hardly surprising :-)