Join Nostr
2026-10-03 13:06:24 UTC

semisol on Nostr: I should state that Linux overreports security vulnerabilities. Anything that could ...

I should state that Linux overreports security vulnerabilities. Anything that could *theoretically* cause the system to crash for example is included, or a UAF which is not very exploitable.

Only a subset of these vulnerabilities are exploitable in production systems, and much less have any confidentiality/integrity impact, and even then you usually need to have user access to the server.
"Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
[...] We recommend that you upgrade your linux packages."

List of CVEs:


https://lwn.net/Articles/1097401/