Linux kernel team publishes 432 CVEs in two days
Sunday-to-Monday onslaught fuels speculation over AI-assisted bug reports
If you're responsible for Linux security, someone just dumped a pile of work onto your desk: 432 Linux kernel CVEs were published across Sunday and Monday this week. Linux watchers at nixCraft pointed out the volume on Monday morning, and it didn’t take long for seasoned sysadmins to start expressing concerns.
Jan Schaumann, chief information security architect at Akamai Technologies, took to the OSS-SEC mailing list Tuesday to express concerns over the sheer volume of Linux kernel CVEs published in recent days. Aside from noting that the CVE system isn’t the best way to track security changes, Schaumann also wondered in his post whether there was any good way to deal with so many kernel security issues.
“This onslaught really shows it's not feasible to attempt to prioritize individual kernel changes,” Schaumann said.
“You might attempt to process this large set of...
Copyright of this story solely belongs to theregister.com. To see the full text click HERE
