A turning point for CVE numbers

Posted Feb 15, 2024 14:30 UTC (Thu) by pbonzini (subscriber, #60935)
In reply to: A turning point for CVE numbers by bluca
Parent article: A turning point for CVE numbers

> One for each commit as it was suggested

It's not going to be one for each commit according to Greg. https://lwn.net/ml/linux-kernel/2024021447-fastball-twili...

I am cautious about the announcement. If the floodgates open but the result is useful, I hope that whatever tooling distros create to handle kernel CVEs will be public. And also perhaps it will encourage more people to do stable backports of patches that do not apply directly.

If the result is useless, on the other hand, I will just stop suggesting patches for stable. *shrug*