Are these real vulnerabilities or are these “When Mars and Jupiter are aligned next to each other and you compile the kernel backwards X might crash” ones?
Like the tide, only the moon affects kernel compilation
for anyone too lazy to click the link: CVE-2026-93829 CVE-2026-93830 CVE-2026-97407 CVE-2026-97408 CVE-2026-97409 CVE-2026-97410 CVE-2026-97411 CVE-2026-97412 CVE-2026-97413 CVE-2026-97414 CVE-2026-97415 CVE-2026-97416 CVE-2026-97417 CVE-2026-97418 CVE-2026-97419 CVE-2026-97420 CVE-2026-97421 CVE-2026-97425 CVE-2026-97427 CVE-2026-97428 CVE-2026-97429 CVE-2026-97430 CVE-2026-97434 CVE-2026-97435 CVE-2026-97436 CVE-2026-97437 CVE-2026-97438 CVE-2026-97439 CVE-2026-97440 CVE-2026-97441 CVE-2026-97442 CVE-2026-97443 CVE-2026-97444 CVE-2026-97445 CVE-2026-97446 CVE-2026-97448 CVE-2026-97449 CVE-2026-97450 CVE-2026-97451 CVE-2026-97452 CVE-2026-97453 CVE-2026-97454 CVE-2026-97455 CVE-2026-97456 CVE-2026-97472 CVE-2026-97473 CVE-2026-97475 CVE-2026-97476 CVE-2026-97481 CVE-2026-97482 CVE-2026-97483 CVE-2026-97484 CVE-2026-97485 CVE-2026-97486 CVE-2026-97487 CVE-2026-97488 CVE-2026-97489 CVE-2026-97490 CVE-2026-97491 CVE-2026-97492 CVE-2026-97494 CVE-2026-97495 CVE-2026-97496 CVE-2026-97497 CVE-2026-97500 CVE-2026-97502 CVE-2026-97504 CVE-2026-97505 CVE-2026-97506 CVE-2026-97507 CVE-2026-97508 CVE-2026-97509 CVE-2026-97510 CVE-2026-97512 CVE-2026-97514 CVE-2026-97516 CVE-2026-97517 CVE-2026-97518 CVE-2026-97520 CVE-2026-97521 CVE-2026-97522 CVE-2026-97523 CVE-2026-97524 CVE-2026-97539 CVE-2026-97540 CVE-2026-97541 CVE-2026-97542 CVE-2026-97543 CVE-2026-97544 CVE-2026-97545 CVE-2026-97546 CVE-2026-97547 CVE-2026-97551 CVE-2026-97552 CVE-2026-97555 CVE-2026-97556 CVE-2026-97557 CVE-2026-97560 CVE-2026-97562 CVE-2026-97564 CVE-2026-97568 CVE-2026-97572 CVE-2026-97573 CVE-2026-97575 CVE-2026-97576 CVE-2026-97577 CVE-2026-97578 CVE-2026-97579 CVE-2026-97581 CVE-2026-97582 CVE-2026-97583 CVE-2026-97584 CVE-2026-97587 CVE-2026-97592 CVE-2026-97595 CVE-2026-97596 CVE-2026-97598 CVE-2026-97599 CVE-2026-97600 CVE-2026-97601 CVE-2026-97602 CVE-2026-97604 CVE-2026-97605 CVE-2026-97606 CVE-2026-97607 CVE-2026-97608 CVE-2026-97611 CVE-2026-97612 CVE-2026-97613 CVE-2026-97616 CVE-2026-97617 CVE-2026-97899 CVE-2026-97900 CVE-2026-97902 CVE-2026-97904 CVE-2026-97905 CVE-2026-97907 CVE-2026-97908 CVE-2026-97909 CVE-2026-97910 CVE-2026-97915 CVE-2026-97916 CVE-2026-97917 CVE-2026-97920 CVE-2026-97921 CVE-2026-97922 CVE-2026-97923 CVE-2026-97924 CVE-2026-97925 CVE-2026-97926 CVE-2026-97927 CVE-2026-97929 CVE-2026-97930 CVE-2026-97931 CVE-2026-97936 CVE-2026-97940 CVE-2026-97945 CVE-2026-97948 CVE-2026-97951 CVE-2026-97952 CVE-2026-97953 CVE-2026-97954 CVE-2026-97957 CVE-2026-97958 CVE-2026-97959 CVE-2026-97961 CVE-2026-97963 CVE-2026-97964 CVE-2026-97965 CVE-2026-97966 CVE-2026-97967 CVE-2026-97968 CVE-2026-97969 CVE-2026-97970 CVE-2026-97973 CVE-2026-97976 CVE-2026-97977 CVE-2026-97978 CVE-2026-97979 CVE-2026-97981 CVE-2026-97982 CVE-2026-97984 CVE-2026-97985 CVE-2026-97986 CVE-2026-97987 CVE-2026-97990 CVE-2026-97991 CVE-2026-97992 CVE-2026-97993 CVE-2026-97994 CVE-2026-97995 CVE-2026-97996 CVE-2026-97998 CVE-2026-98001 CVE-2026-98006 CVE-2026-98007 CVE-2026-98008 CVE-2026-98009 CVE-2026-98010 CVE-2026-98011 CVE-2026-98012 CVE-2026-98013 CVE-2026-98014 CVE-2026-98015 CVE-2026-98016 CVE-2026-98017 CVE-2026-98018 CVE-2026-98020 CVE-2026-98021 CVE-2026-98022 CVE-2026-98023 CVE-2026-98024 CVE-2026-98025 CVE-2026-98026 CVE-2026-98027 CVE-2026-98028 CVE-2026-98029 CVE-2026-98030 CVE-2026-98031 CVE-2026-98037 CVE-2026-98039 CVE-2026-98041 CVE-2026-98045 CVE-2026-98046 CVE-2026-98051 CVE-2026-98052 CVE-2026-98054 CVE-2026-98055 CVE-2026-98056 CVE-2026-98057 CVE-2026-98059 CVE-2026-98063 CVE-2026-98064 CVE-2026-98066 CVE-2026-98068 CVE-2026-98069 CVE-2026-98070 CVE-2026-98071 CVE-2026-98072 CVE-2026-98074 CVE-2026-98075 CVE-2026-98076 CVE-2026-98077 CVE-2026-98078 CVE-2026-98080 CVE-2026-98081 CVE-2026-98082 CVE-2026-98083 CVE-2026-98086 CVE-2026-98088 CVE-2026-98089 CVE-2026-98090 CVE-2026-98091 CVE-2026-98092 CVE-2026-98094 CVE-2026-98095 CVE-2026-98096 CVE-2026-98097 CVE-2026-98098 CVE-2026-98102 CVE-2026-98103 CVE-2026-98104 CVE-2026-98105 CVE-2026-98107 CVE-2026-98108 CVE-2026-98109 CVE-2026-98110 CVE-2026-98111 CVE-2026-98113 CVE-2026-98114 CVE-2026-98116 CVE-2026-98121 CVE-2026-98122 CVE-2026-98123 CVE-2026-98126 CVE-2026-98127 CVE-2026-98128 CVE-2026-98129 CVE-2026-98130 CVE-2026-98142 CVE-2026-98151 CVE-2026-98152 CVE-2026-98154 CVE-2026-98155 CVE-2026-98157 CVE-2026-98158 CVE-2026-98159 CVE-2026-98160 CVE-2026-100070 CVE-2026-100071 CVE-2026-100075 CVE-2026-100078 CVE-2026-100079 Debian Bug : 1108860
and if i am too lazy to read?
TL;DR - Jesus, that’s a lot of CVEs.
Can you translate that for other religions and atheists, too?
“shit’s fucked”
Some of them are 2024 and 2025. How come they made it into this list?
Serious answer: They’re low priority bullshit rather than practical security concerns.
“This method crashes if you intentionally feed it malformed data!!”- type of stuff.
The following is my guess, I don’t know what the Debian project’s selection criteria for security advisories are.
Taking the first one as an example, CVE-2024-52560 is a bug that affects version 5.15 of the Linux Kernel. The oldest version of Debian that’s still in general LTS is Debian 11 which shipped with Linux 5.10. So they are still supporting releases that may be running the affected kernel and can’t upgrade the kernel for some reason, but would still benefit from some downstream patches that mitigate the exposure of the kernel bug.
At least they are aware 😰
Much worse if there are no CVE’s…
Nothing to see here, citizen. Move along.
wait why are there 2024 cves?
moth will answer you tomorrow, assuming moth remembers and finds time, is why
I saw this in the CISA announcement today. I was wondering if either:
- the project to port the kernel to rust Or
- people using AI to look for vulnerabilities
Caused the huge list?
(IBM had a ton too)
More the fact that it’s Debian and they still support huge amounts of ancient stuff. There are year’s old ones in the list… alas, Debian still supports kernels like 5.10LTS. And backporting fixes doesn’t get easier over time.
It’s the latter; the kernel CVE report counts have gone through the roof in the past few years.
No one is porting the whole kernel to rust (as part of the official project, at least).
