Memory management subsystem pull request[1] for Linux 6.9-rc1 has been posted. To quote Andrew’s summary for DAMON part:
[1] https://lore.kernel.org/all/20240313200532.34e4cff216acd3db8def4637@linux-foundation.org/
The 6.8 kernel has been released https://lwn.net/Articles/964784/ #LWN
@ljs @kernellogger @larsmb @gregkh @pavel It's really complicated... I'm myself on the distro side here (though speaking only for myself) and I see very clearly the additional work that this is causing. On the other hand... I do think this is actually moving things in the right direction, security-wise. The uncomfortable truth is that the kernel has a TON of bugs, many with security impact. This move really just puts it completely out in the open and forces everybody to acknowledge that fact.
@kernellogger @kees @gregkh I also considered using the repo, especially the nice json files under cve/published/
. However, the README
[1] under cve/
made me hesitate. Quoting the part that made me unsure if it can be used.
For now, ignore this as we are getting things working properly…
[1] https://git.kernel.org/pub/scm/linux/security/vulns.git/tree/cve/README
The #Linux #kernel CVE team released their first two CVEs:
* CVE-2023-52433: netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
https://lore.kernel.org/linux-cve-announce/2024022058-outsell-equator-e1c5@gregkh/
* CVE-2024-26581: netfilter: nft_set_rbtree: skip end interval element from gc
https://lore.kernel.org/linux-cve-announce/2024022024-uniquely-recluse-d893@gregkh/
For more details on the new #LinuxKernel CVE process, see https://docs.kernel.org/process/cve.html (recently added by https://git.kernel.org/torvalds/c/5928d411557ec5d53832cdd39fc443704a3e5b77 )
Screenshot from https://lore.kernel.org/linux-cve-announce/
[$] A turning point for CVE numbers https://lwn.net/Articles/961978/ #LWN
The kernel becomes its own CNA https://lwn.net/Articles/961961/ #LWN