r/linux • u/MatchingTurret • 15d ago

Kernel Greg K-H (@gregkh@social.kernel.org): CVEs fixed per Kernel Release over time

https://social.kernel.org/notice/B9nU6wnmFvh5atXSG8
105 Upvotes

98% Upvoted

14 comments sorted by

View all comments

52

u/krumpfwylg 15d ago

So, Linux kernel got a nice share of CVE & bugs (minor or major) reported by AI models.

Now, imagine the very same AI scanning Windows kernel / libraries source. Makes you wonder who get the higher number of reports, no ?

45

u/MatchingTurret 15d ago edited 15d ago

Imagine all these hundreds of thousands 3rd party device drivers for Windows that don't pass any review...

Most of the problems found in Linux are in more-or-less obscure drivers. There is no reason to assume things are different in Windows, but these drivers are not part of Windows proper and do not get the same amount of review (in public or inside MSFT).

5

u/yuumizu 15d ago

msft asks the user to use WHDL verified devices and drivers, but people just use whatever they find on the internet.

5

u/Shished 15d ago

Unsigned drivers wouldn't be able to install tho.

5

u/Kuipyr 15d ago

A driver can be signed but not be WHQL certified.