2 ms·
https://lore.kernel.org/lkml/2024021314-unwelcome-shrill-690e@gregkh/ https://lore.kernel.org/lkml/2024021314-unwelcome-shrill-690... > Note, due to the layer
by herczegzsolt 3y ago
https://lore.kernel.org/lkml/2024021314-unwelcome-shrill-690e@gregkh/ https://lore.kernel.org/lkml/2024021314-unwelcome-shrill-690...
> Note, due to the layer at which the Linux kernel is in a system, almost any bug might be exploitable to compromise the security of the kernel, but the possibility of exploitation is often not evident when the bug is fixed. Because of this, the CVE assignment team are overly cautious and assign CVE numbers to any bugfix that they identify.
- NekkoDroid 3y agoI don't get how exactly they would be wrong with that and I am not sure why saying "update from the buggier version to a less buggier version" (that is implied with an assigned CVE) is a bad thing.