3 ms·
Ok but if you look over the past 5 years or so, Linux has had 10x as many CVEs per year, including far more with high CVE scores.
by medler 3y ago
Ok but if you look over the past 5 years or so, Linux has had 10x as many CVEs per year, including far more with high CVE scores.
- hollerith 3y agoI don't doubt it. I also heard that when a Linux dev find a bug that might be a vulnerability, they often don't bother adding it to the CVE database (and say as much in discussions with the other kernel devs) which casts doubt on the usefulness of counting CVEs as a way to estimate how secure Linux is.