I maintain a Linux build for an IoT product, and it's been a brutal few months trying to keep up with kernel patches. We're trying to go through certification right now, and one of the questions is effectively "are there any known vulnerabilities, and if so justify why they don't matter". Every time I manage to answer the question, a new set of CVEs comes out and we have to update everything before we can answer it again.
I imagine the people who are committed to keeping LTS versions of the kernel patched are having a terrible time right now. I guess at least AI tools make the patching part easier.
alt Hacker News
I maintain a Linux build for an IoT product, and it's been a brutal few months trying to keep up with kernel patches. We're trying to go through certification right now, and one of the questions is effectively "are there any known vulnerabilities, and if so justify why they don't matter". Every time I manage to answer the question, a new set of CVEs comes out and we have to update everything before we can answer it again.
I imagine the people who are committed to keeping LTS versions of the kernel patched are having a terrible time right now. I guess at least AI tools make the patching part easier.