Thread

Several vulnerabilities have been discovered in the Linux kernel

576 points · 408 comments · luispa

drfloyd51 · 1790903371 · focus · HN ↗
Is it possible that some of these bugs were already exploited by governments? And AI might help use close of that kind of thing? (And expose other kinds of things , in a kind of AI arms race?)
1. sippingabonedry · 1790903984 · focus · HN ↗
  Will everyone chill the F out for a minute?
  These get released every few weeks. Tons of CVEs. If a kernel developer farts in the forest, does anyone hear it?
  August saw separate Debian kernel updates released four days apart. Does anyone even reboot that often?
  I have three kernels installed over the last 45 days or so and I probably missed a few.
  1. SoftTalker · 1790905407 · focus · HN ↗
    We're considering weekly reboots at work now with the pace of kernel updates coming out, and the speed with which vulnerabilities are getting exploited.
    sippingabonedry · 1790905833 · focus · HN ↗
    There is exactly one CVE in the entire list that is high severity, and it affects an obscure IBM NIC driver for big iron systems used in companies with more money than brains.
    You can skip the Xanax this week.
    john_strinlai · 1790913989 · focus · HN ↗
    severity on cve is a crapshoot most of the time, but especially with linux cna. i would not advise relying on them for decision making.
    "We can not assign severity
    [...]
    So any group that attempts to give a “severity score” to a Linux CVE is lying to you, UNLESS they know exactly your use case.
    ALWAYS ignore any attempt that groups such as NIST/NVD that purport to assign things like CVSS scores to a vulnerability. Those numbers are false and give companies a “fake sense of security”."
    <a href="http://www.kroah.com/log/blog/2026/02/16/linux-cve-assignment-process/" rel="nofollow">http://www.kroah.com/log/blog/2026/02/16/linux-cve-assignmen...

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.