Subject: Directory Listing Enabled on https://mirrors.kernel.org — Data Exposure Risk

Hello Team,

I hope this message finds you well. This is a gentle follow-up regarding the vulnerability report we submitted.
...

---

Please post appropriate meme reactions, I'm too jetlagged to make the effort.

kernel.org tooling update from @monsieuricon

https://lore.kernel.org/all/20251209-roaring-hidden-alligator-068eea@lemur/

""These are the topics that were touched on at the [#Linux #kernel] maintainer summit […]

# What is the state of tooling?

## b4 development update

[…]

- Seeing lots of adoption and use across subsystem,

[…]

I spent a lot of time on trying to integrate AI into b4 workflows, but with little to show for it in the end due to lackluster results.

[…]

it was certainly ironic that one of the top challenges for us was to try to keep AI crawlers from overwhelming kernel.org infrastructure.

[…]

## Are we finally moving away from patches sent over email?

[…]

With lore and public-inbox, we *are* in the process of moving away from
relying on the increasingly unreliable SMTP layer.

[…]

## Work on "local lore"

[…]

## Other tools

### Bugzilla

It may be time to kill bugzilla:

[…]""

#LinuxKernel

Linux kernel maintainers summit has a view of Mt Fuji today.

I slept through the earthquake last night, so I can't even claim that experience. (It was only about 3 points in Tokyo, but apparently it was still quite something if you were in a taller building).

For those who are curious about tomorrow's Maintainers Summit session on machine-learning tools, Sasha Levin has put together a good summary of the state of the discussion: https://lwn.net/ml/all/aTYmE53i3FJ_lJH2@laps

Starting to write up a series of articles about the Linux kernel CVE work that has happened in the past 2 years, starting with some "back to basics" information about how Linux kernels are numbered as many people/companies really don't know how we do this, and it matters a lot in tracking bugfixes and how to determine "vulnerable" and "fixed" kernel releases:
http://www.kroah.com/log/blog/2025/12/08/linux-cves-more-than-you-ever-wanted-to-know/
and
http://www.kroah.com/log/blog/2025/12/09/linux-kernel-version-numbers/

Went to an Irish pub in the middle of Tokyo for drinks and the first thing I see is a Quebec flag on the ceiling.

Omg, finally here!

This is probably the closest to Kamchatka I've ever been in my entire life.

Russia has welcomed US President Donald Trump's new National Security Strategy, calling it "largely consistent" with Moscow's vision.

🤡

https://www.bbc.com/news/articles/cpvd01g2kwwo?utm_source=perplexity

Bored on a super long flight. AMA.

2 hours into the 14-hour flight my resolve to just listen to an audiobook and sleep has failed. Hello, inflight wifi.

Zuckerberg has blown 77 billion – enough money to revitalize entire countries – on an idea so overwhelmingly, obviously stupid that I have never once heard anyone, from the Thanksgiving avuncular table to the most wretched depths of social media, say they liked it or even tried it. He was so sure that it would revolutionize the world that he renamed his extremely famous company after it. And now he's on to the next thing that he's so very, very sure about.

The world needs direction from sober people who aim to improve the human condition, not the whims of a handful of billionaire princelings who absolutely, positively cannot be dissuaded from failing at unprecedented scale while chasing their own vainglory off the edge of a cliff.

Through brilliant feat of planning, I left the nitrokey with my ssh/pgp keys in my other pants before I left for the airport.

#Russia Medvedev and Dmitriev ranting on Twitter/X about “EU limiting free speech” through a VPN because they Twitter is blocked in Russia is an epic level of absurdity 😂

If your company uses ProofPoint, I am judging you.

status=deferred (delivery temporarily suspended: host mxa-0002e601.gslb.pphosted.com[148.163.154.28] refused to talk to me: 421 Deferred - see https://ipcheck.proofpoint.com/?ip=172.234.253.10)

4.7.28 Gmail has detected this message exceeded its quota for sending messages with the same Message-ID. To best protect our users, the message has been temporarily rejected. For more information, go to https://support.google.com/mail/answer/188131 d9443c01a7336-29dbc983a28si15659175ad.168 - gsmtp

$ grep 'same Message-ID' /var/log/maillog | wc -l
146963

Gmail is the f*ng worst.

Hey! I’m CEO of a company that has just raised $10 billion for an app that takes the hard work out of enjoying music. Did you know, some people waste hours each day listening to “tunes”. Our AI will listen to it for you and summarise it in a 15 second scream leaving you more time to focus on what's really important in life: adding value.

In the early 2000s the ReactOS team paused development for years; to engage in a project wide audit, under accusations that a developer may have SEEN leaked windows sourcecode.

In the 2020s folks keep insisting it's cool for #FLOSS devs to use AI's trained on random other projects to generate code; when it is known that such AI assistants occasionally reproduce code verbatim, without regard to the original software license. #llm #AI #eliza #generativeAI

The last 5.4.y kernel release has now happened: https://lore.kernel.org/all/2025120319-blip-grime-93e8@gregkh/

Please don't use this branch anymore, it's really old, and pretty obsolete, and has over 1500 unfixed CVEs in it:
https://lore.kernel.org/all/2025120358-skating-outage-7c61@gregkh/

And if you are stuck with that kernel version for some reason, go ask your vendor to fix those 1500+ CVEs, otherwise you are paying for support that doesn't actually do anything for you...