YHacker Newsscreenshots

Screenshot of phoronix.com: Several Linux kernel vulnerabilities accidentally posted to public mailing list

First screen, captured 4 days ago.

Several Linux kernel vulnerabilities accidentally posted to public mailing list

More from phoronix.com →

Phoronix news article reporting that Trend Micro's Zero Day Initiative accidentally posted several unpatched Linux kernel vulnerability reports to the public LKML.

What HN thinks

The kernel's new security policy: if a robot found it, everyone already knows, so might as well tell the mailing list.

AI-found bugs are effectively public
The kernel policy says AI-discovered bugs should be treated as public because the security team saw many duplicate reports of the same bug, sometimes from 13 sources in a week.
Responsible disclosure still matters
Others argue that a bug an LLM could find has not necessarily been found yet, and that the discovery method shouldn't override embargoes.
In-kernel SMB was a mistake
Several want ksmbd out of kernel space, arguing performance-driven kernel imports undermine security, though others note it is an optional module with responsive maintainers.

Consensus: There is no consensus on the AI disclosure policy, but most accept the duplicate-report experience as the reason it exists.

Recommended in the comments

rclone ↗ (tool): Suggested as a network-mount alternative to SMB.
SSHFS-Win (tool): Recommended over SMB for remote drive mounts on Windows.
seL4 (product): Named as the best hope for a secure microkernel architecture.
FileZilla ↗ (tool): Suggested for SFTP-based file transfer instead of SMB.

Summarised by Claude from the comment thread 3 days ago.

Points: 223
Comments: 89
Best rank: #6
Posted: 2026-10-22 by mrkn1
Category: Security

linux-kernel vulnerabilities zero-day-initiative trend-micro lkml ksmbd responsible-disclosure

All captures:

Full page

Full-page screenshot of phoronix.com

Captured 4 days ago. Click for the whole screenshot.

Looks similar

Screenshot of phoronix.com: Linux Kernel Rust Code Sees Its First CVE Vulnerability

Linux Kernel Rust Code Sees Its First CVE Vulnerability (phoronix.com)

68 points by weinzierl 10 months ago | 61 comments

Screenshot of phoronix.com: Fragnesia Made Public as Latest Linux Local Privilege Escalation Vulnerability

Fragnesia Made Public as Latest Linux Local Privilege Escalation Vulnerability (phoronix.com)

19 points by mikece 5 months ago | 9 comments

Screenshot of phoronix.com: Linux 6.7 Reworks PE Header Generation to Reduce Attack Area

Linux 6.7 Reworks PE Header Generation to Reduce Attack Area (phoronix.com)

26 points by LinuxBender 3 years ago | 2 comments

Screenshot of phoronix.com: The Linux Kernel Prepares for Rust 1.77 Upgrade

The Linux Kernel Prepares for Rust 1.77 Upgrade (phoronix.com)

106 points by mindracer 2 years ago | 69 comments

Screenshot of phoronix.com: Glibc dynamic loader hit by a nasty local privilege escalation vulnerability

Glibc dynamic loader hit by a nasty local privilege escalation vulnerability (phoronix.com)

93 points by mfiguiere 3 years ago | 39 comments

Screenshot of phoronix.com: Asahi Linux to Users: Please Stop Using X.org

Asahi Linux to Users: Please Stop Using X.org (phoronix.com)

42 points by laktak 3 years ago | 34 comments

Related stories

Screenshot of bleepingcomputer.com: New Linux udisks flaw lets attackers get root on major Linux distros

New Linux udisks flaw lets attackers get root on major Linux distros (bleepingcomputer.com)

336 points by smig0 1 year ago | 227 comments

BleepingComputer news article about a udisks vulnerability that lets attackers gain root privileges on major Linux distributions.

linux udisks privilege-escalation vulnerability

Screenshot of vkoskiv.com: My first contribution to Linux

My first contribution to Linux (vkoskiv.com)

633 points by vkoskiv 1 year ago | 76 comments

A blog post recounting the author's experience upstreaming their first Linux kernel patch, fixing a hardware issue on a 2005 Fujitsu Lifebook S2110.

linux-kernel kernel-patches fujitsu-lifebook device-drivers

Screenshot of lwn.net: Several vulnerabilities have been discovered in the Linux kernel

Several vulnerabilities have been discovered in the Linux kernel (lwn.net)

529 points by luispa 24 days ago | 380 comments

LWN.net repost of Debian Security Advisory DSA-6528-1, a Linux kernel security update fixing numerous CVEs, dated September 29, 2026.

linux-kernel debian security-advisory cve

Screenshot of openwall.com: For Linux kernel vulnerabilities, there is no heads-up to distributions

For Linux kernel vulnerabilities, there is no heads-up to distributions (openwall.com)

565 points by ori_b 5 months ago | 477 comments

An oss-security mailing list reply from Gentoo's Sam James on CVE-2026-31431 (CopyFail), a Linux local privilege escalation, and the lack of advance notice to distributions.

linux-kernel cve-2026-31431 copyfail privilege-escalation

Screenshot of xeiaso.net: Maybe you shouldn't install new software for a bit

Maybe you shouldn't install new software for a bit (xeiaso.net)

813 points by psxuaw 5 months ago | 427 comments

Short blog post by Xe Iaso noting new Linux kernel vulnerabilities and advising a week-long pause on installing new software due to supply chain attack risk.

linux-kernel vulnerabilities supply-chain-attacks npm

Screenshot of mtlynch.io: Claude Code Found a Linux Vulnerability Hidden for 23 Years

Claude Code Found a Linux Vulnerability Hidden for 23 Years (mtlynch.io)

351 points by eichin 6 months ago | 226 comments

Blog post by Michael Lynch describing how Anthropic researcher Nicholas Carlini used Claude Code to find remotely exploitable Linux kernel bugs, including one hidden for 23 years.

linux-kernel claude-code vulnerability-research anthropic