Arthur Besse@lemmy.ml to linuxmemes@lemmy.worldEnglish · 22 days agoSeveral vulnerabilitieslemmy.mlimagemessage-square43linkfedilinkarrow-up11
arrow-up11imageSeveral vulnerabilitieslemmy.mlArthur Besse@lemmy.ml to linuxmemes@lemmy.worldEnglish · 22 days agomessage-square43linkfedilink
minus-squaretruthfultemporarily@feddit.orglinkfedilinkarrow-up0·22 days agoTo add, pretty much any kernel bug gets a CVE because everything wrong in the kernel could theoretically be abused.
minus-squareklankin@piefed.calinkfedilinkEnglisharrow-up0·22 days agoAnd they just changed the CVE rules to include non-exploitable bugs too. My theory is its to pump AI ‘discoveries’ numbers
minus-squareslazer2au@lemmy.worldlinkfedilinkEnglisharrow-up0·22 days agoBut there is a difference between an unauthenticated bug and a bug requiring an authenticated user getting some deserialised data.
minus-squaretruthfultemporarily@feddit.orglinkfedilinkarrow-up0·22 days agoYes, hence why you would have to check the CVSS of all of those.
To add, pretty much any kernel bug gets a CVE because everything wrong in the kernel could theoretically be abused.
And they just changed the CVE rules to include non-exploitable bugs too.
My theory is its to pump AI ‘discoveries’ numbers
But there is a difference between an unauthenticated bug and a bug requiring an authenticated user getting some deserialised data.
Yes, hence why you would have to check the CVSS of all of those.