Re: Lots of kernels

Hey Alan,

On Mon, May 18, 2026 at 3:35 PM Alan Mackenzie <[email protected]> wrote:

> Hello, Gentoo.
>
> Has anybody else noticed that we're getting rather a lot of
> gentoo-sources kernels in recent codebase updates?
>

Yep


>
> It seems we're getting around one every two days, completely unmasked.
> For example, gentoo-sources-6.18.26 was released on 2026-05-01, 6.18.32
> today, and no version in between was keyworded.  That's 7 versions in
> the space of 17 days.
>
> This doesn't particularly bother me, but I am somewhat puzzled.
> Recently there have been quite a few high ranking vulnerabilities
> discovered in Linux, and I'm wondering if all these kernels contain
> fixes for these.  But I keep a clone of the Linux "stable" sources, and
> there is no mention of these CVEs in the clone's log files.
>

A few weeks ago there were a few "defrag" CVEs in the span of a couple
days. These could be mitigated by disabling certain modules, I think, but
patches were released and integrated in Gentoo as far as I could tell.

I'm not sure about since then, but I suspect something similar.

Looking forward to a more informed response,
-- 
D. Ben Knoble