2026-10-31 18:18 UTC
This is misleading.
Linux kernel full releases always have CVEs shortly after them because new features, drivers, memory handling tuning, and other capabilities arr introduced, and people (or ai) hammer away at them as soon as they appear.
I acknowledge that the bump has more amplitude because ai tools accelerate this, but this graph isn’t the shocker you think it is.
Replies (6)
-
@Static_Rocket@lemmy.world 2026-10-31 18:21
Yeah, wasn’t the security community just complaining about the number of CVEs published recently which were just unfiltered bug reports?
-
@Link@rentadrunk.org 2026-10-31 18:40
I thought Torvalds said major versions bumps were meaningless so 6.0 or 7.0 is the same as 6.12 to 6.13
-
@atzanteol@sh.itjust.works 2026-10-31 18:59
How is it misleading? All you’ve said is that releases have cves which is what the graph shows.
-
@thingsiplay@lemmy.ml 2026-10-31 19:09
This is misleading. Is it? What exactly is it misleading here? It just aligns with the usage of Ai, which means that Ai tools helped finding and fixing those issues. I don’t see anything misleading.
-
@_stranger_@lemmy.world 2026-10-31 23:12
-
@PattyMcB@lemmy.world 2026-11-01 02:16
I’d love to see the graph include data back to 4.x. “Axis bias” is real