Remix.run Logo
staticassertion 3 hours ago

Greg and Linus do not believe in the entire concept of "vulnerabilities" in the Linux kernel and do not believe in the methods that distros use like cherry picking, therefor they typically are against issuing CVEs, scoring CVEs, describing vulnerabilities at all (if you use the word "vulnerability", your patch will be rejected), etc.

It's fundamentally their position to not work the way that you describe.

baggy_trough 3 hours ago | parent [-]

That doesn't really seem to map onto the situation since Greg himself released a 6.12 with the patch earlier today.

staticassertion 3 hours ago | parent [-]

I don't know what you mean at all. I'm just repeating known kernel policy here. What does 6.12 have to do with anything?

baggy_trough 2 hours ago | parent [-]

What is your interpretation of why Greg KH released a version of 6.12 with this fix in it today, other than to help distributions avoid this vulnerability?