At least they’re getting found and fixed before they are used. I don’t know if they’re Debian only.
Looks like the latest kernels have been fixed according to this link.
Sorry, in German only. But they see the numbers slightly different;
This does not mean that the Linux kernel is becoming more insecure. On the contrary, a growing number of CVEs can even result from the fact that errors are found more systematically and eliminated more quickly. (Translated by Firefox)
That’s what I was alluding to in my OP.
The most important question here is how these fixes are being upstreamed so that endeavouros and other distro get it as well.
EndeavourOS gets the kernels from the Arch repos directly, at the same time as Arch installs.
this is 1 off many things that make this distro soooo great “hats off” and great respect for everyone helping here and special for the endeavour-team
Greetz
To my understanding, they make a new CVE for every bug fix, which makes it appear a lot worse than it actually is. Still, pretty scary haha
Yeah, I read something this evening that said that. It certainly explains the number!
Expect the new normal to be a flood of CVEs followed by fixes for the next couple of years as old code gets fixed. Eventually it will reach an equilibrium where we are hopefully catching the issues before they are released…fortunately if you are on a rolling release you should be used to daily patches 