#1041849 debsecan: CVE-2022-38457 is not being reported at all

Package:
debsecan
Source:
debsecan
Submitter:
Sebastien Delafond
Date:
2023-07-24 10:51:04 UTC
Severity:
normal
#1041849#5
Date:
2023-07-24 10:49:23 UTC
From:
To:
CVE-2022-38457[0] is not being reported on a bullseye system with a
vulnerable kernel:

  root# dpkg -l *linux-image* | grep ii
  ii  linux-image-5.10.0-19-amd64-unsigned 5.10.149-2   amd64        Linux 5.10 for 64-bit PCs
  root# debsecan | grep CVE-2022-38457
  root#

Tinkering a bit with the debsecan source code, we can see that
CVE-2022-38457 is internally referenced with id 34442, which is not
tied to any source package in debsecan's data file:

  root# grep 34442 /tmp/debsecan-data-20230724.txt
  root#

Cheers,