4 ms·

At least they are honest about them unlike windows where we won't find NT kernel vulnerabilities for a decade sometimes and by then it's been widely exploited.

delusional 5y ago
You missed the point. The point was that 65 CVEs mean that you should at least have rebooted your PC 65 times. No judgment on whether that's few or many CVEs.
- brigade 5y ago
  Unless every single one of those CVEs was actively exploited at the time a fix was committed to the kernel, no. Just no. Even then, no.
- melissalobos 5y ago
  > you should at least have rebooted your PC 65 times Really not every CVE in the kernel applies to every system and configuration. You can compile the linux kernel in all kinds of different ways and a decent number of security vulnerabilities found in any given year only apply to unusual configurations.
- antiframe 5y ago
  Not every CVE affects every system. The kernel is modular and most people don't run every module.
- Beltalowda 5y ago
  Looking at those 65 CVEs[1] and thinking just about the desktop use case (as that's what this is about), none of them really stand out as "zomg update immediately!" A number just aren't applicable at all for most desktop users, and quite a lot of others aren't readily exploitable, and are not cause for a panic update and reboot. [1]: https://www.cvedetails.com/vulnerability-list.php?vendor_id=33&product_id=47&version_id=&page=1&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=0&cvssscoremax=0&year=2022&month=0&cweid=0&order=3&trc=65&sha=ba801471883fb757c1345d508c515b19388c67e2 https://www.cvedetails.com/vulnerability-list.php?vendor_id=...
- Karellen 5y ago
  In addition to what others have said, CVSs often come in related groups, and are patched together. It's likely that a single kernel security release will fix multiple related CVEs all at once.

delusional 5y ago

You missed the point. The point was that 65 CVEs mean that you should at least have rebooted your PC 65 times. No judgment on whether that's few or many CVEs.

brigade 5y ago
Unless every single one of those CVEs was actively exploited at the time a fix was committed to the kernel, no. Just no. Even then, no.
melissalobos 5y ago
> you should at least have rebooted your PC 65 times Really not every CVE in the kernel applies to every system and configuration. You can compile the linux kernel in all kinds of different ways and a decent number of security vulnerabilities found in any given year only apply to unusual configurations.
antiframe 5y ago
Not every CVE affects every system. The kernel is modular and most people don't run every module.
Beltalowda 5y ago
Looking at those 65 CVEs[1] and thinking just about the desktop use case (as that's what this is about), none of them really stand out as "zomg update immediately!" A number just aren't applicable at all for most desktop users, and quite a lot of others aren't readily exploitable, and are not cause for a panic update and reboot. [1]: https://www.cvedetails.com/vulnerability-list.php?vendor_id=33&product_id=47&version_id=&page=1&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=0&cvssscoremax=0&year=2022&month=0&cweid=0&order=3&trc=65&sha=ba801471883fb757c1345d508c515b19388c67e2 https://www.cvedetails.com/vulnerability-list.php?vendor_id=...
Karellen 5y ago
In addition to what others have said, CVSs often come in related groups, and are patched together. It's likely that a single kernel security release will fix multiple related CVEs all at once.