4 ms·

I want to learn more. Do you have some examples?

• yyyk 5y ago
  Just yesterday, Microsoft found a few[0]. There's no shortage of these, but more important is the haphazard way fixes are backported to longterm (e.g. [1]). This reached the point that Google's security advice is 'always follow the latest kernel'[2], except most users and distros simply cannot afford it, so they are stuck with a vulnerable system. Linux is not unique here. In the longterm, all the typical desktop OSs will need significant structural changes far beyond 'chase vulnerabilities and patch everything all the time'. [0] https://www.theregister.com/2022/04/27/microsoft-linux-vulnerability/ https://www.theregister.com/2022/04/27/microsoft-linux-vulne... [1] https://nvd.nist.gov/vuln/detail/CVE-2019-15902 https://nvd.nist.gov/vuln/detail/CVE-2019-15902 [2] https://security.googleblog.com/2021/08/linux-kernel-security-done-right.html https://security.googleblog.com/2021/08/linux-kernel-securit...