4 ms·
> this does possibly have a chilling effect if the vendor's CNA refuses valid vulns The Linux kernel went in the opposite direction: Every bugfix that looks li
by jorams 11mo ago
> this does possibly have a chilling effect if the vendor's CNA refuses valid vulns
The Linux kernel went in the opposite direction: Every bugfix that looks like it could be relevant to security gets a CVE[1]. The number of CVEs has increased significantly since it became a CNA.
[1]: https://lwn.net/Articles/978711/ https://lwn.net/Articles/978711/
- fulafel 11mo agoThanks. They seem to be pretty proactive indeed if you look at the feed: https://lore.kernel.org/linux-cve-announce/ https://lore.kernel.org/linux-cve-announce/