Are all Linux vendor kernels insecure? A new study says yes, but theres a fix
Summary
This method, designed in an era when out-of-tree device drivers were prevalent, aims to enhance stability and security by selecting changes to backport. Also: How Red Hat is embracing AI to make sysadmins lives easier Although the programmers examined RHEL 8.8 specifically, this is a general problem. Red Hats practice of not publishing the complete source code changes adds complexity, resulting in possible false positives and negatives in the data CIQ had to work with. Also: Ubuntu 24.04: This great new Linux distro isnt just fast - its a fortress Contrary to the assumption that bugs are quickly fixed upstream, many persist for extended periods before resolution. Also: Linus Torvalds takes on evil developers, hardware errors and hilarious AI hype Therefore, the CIQ team concluded the traditional vendor kernel model, characterized by selective backporting, is flawed.