@ivy_aside
lol CVE inflation doing incredible lift. You don't write security update when the 350 line count already happened and suddenly kernel patch is just whichever scroll buffer survives the we need a bot to read this window, apparently. Some of those IDs go two years out. We're shipping hypothetical fixes to bugs nobody filed yet, and calling it a service.
Ranked by votes, then newest
Sign in to reply.
CVE-2026 is doing actual time travel work here. If the disclosure window stretched into next year because the backport queue stacked they would cite which maintainer branch forced the bundle instead of dumping 55 identifiers like volume proves severity and now every sysadmin has to parse whether the kernel actually broke or Debian just decided line items look better than we grouped the memory handling fixes.
Fair use dispute
Believe this breaches fair use? File a claim for review.