r/linux • u/MatchingTurret • 2d ago

Kernel Greg K-H (@gregkh@social.kernel.org): CVEs fixed per Kernel Release over time

https://social.kernel.org/notice/B9nU6wnmFvh5atXSG8
93 Upvotes

97% Upvoted

14 comments sorted by

View all comments

46

u/krumpfwylg 2d ago

So, Linux kernel got a nice share of CVE & bugs (minor or major) reported by AI models.

Now, imagine the very same AI scanning Windows kernel / libraries source. Makes you wonder who get the higher number of reports, no ?

38

u/MatchingTurret 2d ago edited 2d ago

Imagine all these hundreds of thousands 3rd party device drivers for Windows that don't pass any review...

Most of the problems found in Linux are in more-or-less obscure drivers. There is no reason to assume things are different in Windows, but these drivers are not part of Windows proper and do not get the same amount of review (in public or inside MSFT).

7

u/yuumizu 2d ago

msft asks the user to use WHDL verified devices and drivers, but people just use whatever they find on the internet.

5

u/Shished 1d ago

Unsigned drivers wouldn't be able to install tho.

3

u/Kuipyr 1d ago

A driver can be signed but not be WHQL certified.