Arthur Besse@lemmy.ml to linuxmemes@lemmy.worldEnglish · 1 month agoSeveral vulnerabilitieslemmy.mlimagemessage-square35fedilinkarrow-up1385
arrow-up1385imageSeveral vulnerabilitieslemmy.mlArthur Besse@lemmy.ml to linuxmemes@lemmy.worldEnglish · 1 month agomessage-square35fedilink
minus-squaretruthfultemporarily@feddit.orglinkfedilinkarrow-up111·1 month agoTo add, pretty much any kernel bug gets a CVE because everything wrong in the kernel could theoretically be abused.
minus-squareslazer2au@lemmy.worldlinkfedilinkEnglisharrow-up38·1 month agoBut there is a difference between an unauthenticated bug and a bug requiring an authenticated user getting some deserialised data.
minus-squaretruthfultemporarily@feddit.orglinkfedilinkarrow-up26·1 month agoYes, hence why you would have to check the CVSS of all of those.
minus-squareklankin@piefed.calinkfedilinkEnglisharrow-up15·1 month agoAnd they just changed the CVE rules to include non-exploitable bugs too. My theory is its to pump AI ‘discoveries’ numbers
To add, pretty much any kernel bug gets a CVE because everything wrong in the kernel could theoretically be abused.
But there is a difference between an unauthenticated bug and a bug requiring an authenticated user getting some deserialised data.
Yes, hence why you would have to check the CVSS of all of those.
And they just changed the CVE rules to include non-exploitable bugs too.
My theory is its to pump AI ‘discoveries’ numbers