Latest Debian 13 “Trixie” Kernel Security Update Patches More Than 1300 CVEs - 9to5Linux

The Debian Project released a new update to address more than 1300 security vulnerabilities

submitted by
edited

https://9to5linux.com/latest-debian-13-trixie-kernel-security-update-patches-more-than-1300-cves

15
94
1

Log in to comment

Hot Top New Old

Because of a recent policy change regarding what is labeled a CVE.

 reply
46

Why so many, you may ask. Well, because of several reasons, one of them being the recent policy change in CVE assignment for the kernel project, where essentially any commit identified as fixing a potential security issue gets a CVE assigned, even if it’s a minor one or has no known exploit path.

wtf?!!! why?!

 reply
20

i’m pretty sure the kernel itself does that to themselves too. basically there’s so much code in the kernel that if any bug, even if small, could possibly under a specific configuration result in some device out there having its security weakened, they prefer to be on the safe side and assign a cve.

 reply
7

Not just that, but any kernel crash could turn off a potentially security related machine

 reply
2

Well more book work, filling the cve database and bureaucracy. That is why. 😳😩

 reply
6

i mean it makes sense to me, a vulnerability is a vulnerability regardless of whether it has been exploited or not

 reply
9

It’s because over the last decade the understanding and tools to take advantage of a bunch of small seemingly insignificant exploits in order to gain privileged access have become widespread.

It’s the flip side of not trusting things written in rust to be effectively more secure just because it prevents someone from sticking their thumb between their fore and middle fingers and declaring they “got your stack”.

 reply
1

So you mean it’s now easier a cve today than before?

 reply
1

Comments in Linux@programming.dev

any commit identified as fixing a potential security issue gets a CVE assigned, even if it’s a minor one or has no known exploit path.

Seems much less severe than it sounds.

 reply
5

Whenever I see articles about vulnerabilities in the Linux Kernel I dream of a day that I can jailbreak all those devices that were abandoned by the manufacturer.

 reply
4
edited

Oh no, my kernel is more secure thanks to AI. How will I ever trust Debian again. Guess I gotta move to a new distro. One that doesnt use the Linux kernel.

 reply
4

Did they use LLMs? It’s not mentioned in the article.

 reply
2

Going to go out on a limb and say that is the pattern with every single OS at the moment. Itll taper off eventually, but there is a lot of technical debt and human slop to clean up for a bit, then things should settle down.

 reply
1

it.. really feels like that, right? I’ve only been messing with Linux for a few years now but heck for some reason this feels like my longtime crush betraying me

 reply
2
Insert image