- cross-posted to:
- linux@programming.dev
- cross-posted to:
- linux@programming.dev
You must log in or # to comment.
Because of a recent policy change regarding what is labeled a CVE.
Why so many, you may ask. Well, because of several reasons, one of them being the recent policy change in CVE assignment for the kernel project, where essentially any commit identified as fixing a potential security issue gets a CVE assigned, even if it’s a minor one or has no known exploit path.
wtf?!!! why?!
i mean it makes sense to me, a vulnerability is a vulnerability regardless of whether it has been exploited or not
Well more book work, filling the cve database and bureaucracy. That is why. 😳😩
It’s because over the last decade the understanding and tools to take advantage of a bunch of small seemingly insignificant exploits in order to gain privileged access have become widespread.
It’s the flip side of not trusting things written in rust to be effectively more secure just because it prevents someone from sticking their thumb between their fore and middle fingers and declaring they “got your stack”.
deleted by creator
