Linux

15321 readers

216 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev

142

Chart of Linux security vulnerabilities fixed per kernel version (media.piefed.social)

submitted 2 days ago by Ek-Hou-Van-Braai@piefed.social to c/linux@programming.dev

34 comments fedilink hide all child comments

Source: https://github.com/gregkh/kernel-development/blob/master/graphs%2Fpatches_per_release%2Fcves_fixed_per_release.png

AI coding tools are pretty good at finding bugs and make it easier and faster to fix them.

Importantly, security vulnerabilities in new releases seem to stay roughly the same and the change to which bugs count as CVEs was around version 6.8 already.

you are viewing a single comment's thread
view the rest of the comments

[–] NathanRanch@lemmy.zip -4 points 2 days ago (2 children)

This was never an issue before, so it just appears as tho it's adding bugs to be fixed later. Unless all these updates are strategically going somewhere.

[–] StabbingSky@lemmy.zip 13 points 2 days ago

Many of the bugs have been present for years. This is about finding bugs that humans didn't, then humans fixing the bugs.

[–] Ephera@lemmy.ml 5 points 2 days ago (1 children)

These were not a problem, because no one found them, but they were still there. Now they are being found, if not by the folks patching them, then by those looking to exploit them. There is no way to navigate this than to patch whatever is found.

[–] Ek-Hou-Van-Braai@piefed.social 3 points 2 days ago

Many governments and secret groups sit on Zero day exploits for years until they need to use them.

Average people are finding them easier now using AI, which is a good thing. Instead of 3 letter organizations sitting on them.