Home | Notifications | New Note | Local | Federated | Search | Logout

Note Detail

Jan Schaumann@jschauma@mstdn.social (2026-09-29 22:02:37)
Lol, nice.

Debian linux security update DSA 6528-1:

"Several vulnerabilities have been discovered in the Linux kernel that
may lead to a privilege escalation, denial of service or information
leaks."

"Several", as in... 1,313 CVEs.

Enjoy! ✌️

https://lists.debian.org/debian-security-announce/2026/msg00441.html

(I've said it before: you can't track CVEs any longer. Only option is regular, frequent, automated updates and reboots.)

---Replies---

Cassandrich@dalias@hachyderm.io (2026-09-29 22:07:29)
@jschauma That isn't an option either. By accepting automatic/frequent updates, you are just adding more new vulns, and more of them are real vulns not fake ones like the stuff they're reporting.

The "1313 CVEs" are a lie. The hard problem is finding the 10-20 that are actually vulns and the 1-5 that are actually relevant to you amid the slopbros' DDoS attack on our attention. 🤬

The only solution is to close off all of the attack surface. Disable module loading entirely or switch to allow list model to block all of the "IPsec shit nobody asked for". Disable io_uring and other optional niche syscalls. Don't give out user accounts, and don't assume running network-facing junk daemons is safe just because they're running as nobody or chrooted. Etc.