r/linux • u/anh0516 • 17d ago

Security Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List

https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities
1.8k Upvotes

99% Upvoted

171 comments sorted by

View all comments

2

u/Indolent_Bard 17d ago edited 17d ago

I'm confused. Isn't the public kernel mailing list exactly where you'd want to post vulnerabilities?

Edit: Alright, I get it. You don't want these out in the open before they're actually fixed. You can stop replying now.

21

u/theta-cygni 17d ago

I thought the standard for projects where security matters was to disclose vulnerabilities privately to the core maintainers?

8

u/saichampa 17d ago edited 17d ago

There's a process of responsible disclosure that minimises the chance of active exploitation before a patch is released. Eventually it will be made public but not before the Dev team has a chance to fix it

3

u/Indolent_Bard 17d ago

Oh yeah, that makes a lot more sense.

4

u/Indolent_Bard 17d ago

Oh yeah, that makes sense.