You must log in or register to comment.
this means they are getting found before someone else can abuse it. linux is getting more secure soon.
Yeah, it’s funny when people shit on Linux just because people care enough to disclose vulnerabilities. Trust me that any proprietary system has just as many; they just get silently patched in this month’s security update.
Computers are finicky things; the amount of known CVEs is simply a measure of how many people pentest the software and how big the project is, rather than any statement about its security.
More like vibe security engineer spamming their claud subscriptions to discover breaches not even hackers cared about.
And then they’ll make a story about how ai agent breached out of human control when they specifically prompted “breach this by any means necessary, no I don’t care about safeguards you’re a security pentester”
jesus christ, people complain they use ai even if they fixes are done by humans. stop whining. you talk like if you’ve ever touched the linux code.
You’re taking me wrong. I’m not blaming ai, I would even be fine with linux maintainers using ai tools, as assistant, not as vibe tools. Even though I know people dislike even just the idea.
I’m blaming cybersecurity people and corps to make a big deal out of every single CVE. They’ll use AI tools to search breaches and no one will say anything. But dare a maintainer touch IA and then it’s hell on earth.
Most of the time, the CVEs are irrelevant to any real life situation. It’s not a bad thing these get fixed, but in the end stories get inflated that softwares are not protected, and cybersecurity gets into big success story talks, thinking they contributed to something when really they mostly waste people time.
the AI derangement continues
Several
🥲
Slight understatement 😳
That’s quite the list.
Any insight into the most severe ones, eg is remote exploitation possible and likely?
The Linux project request CVEs for any memory safety bug just in case some turn out to be vulnerabilities, in which case they may be exploited given enough effort. Many are likely not exploitable or unlikely to be, and/or loaw severity.
There are some higher severity ones given the following message. But this doesn’t mean all CVEs listed are severe issues.
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
