Re: Lots of kernels

One other thing I forgot to mention:

Le 18 mai 2026 à 15:39, D. Ben Knoble <[email protected]> a écrit :



Hey Alan,

On Mon, May 18, 2026 at 3:35 PM Alan Mackenzie <[email protected] > wrote:

Hello, Gentoo.

Has anybody else noticed that we're getting rather a lot of

gentoo-sources kernels in recent codebase updates?

Yep

It seems we're getting around one every two days, completely unmasked.

For example, gentoo-sources-6.18.26 was released on 2026-05-01, 6.18.32

today, and no version in between was keyworded. That's 7 versions in

the space of 17 days.

This doesn't particularly bother me, but I am somewhat puzzled.

Recently there have been quite a few high ranking vulnerabilities

discovered in Linux, and I'm wondering if all these kernels contain

fixes for these. But I keep a clone of the Linux "stable" sources, and

there is no mention of these CVEs in the clone's log files.

Greg KH’s « Linux Kernel Monkey Log » blog has a very informative series on how the team manages CVEs. In short, I don’t know that I would expect to see them mentioned in the commit history (it’s kind of a Linus thing, as I understand: « a bug is a bug is a bug »).

A few weeks ago there were a few "defrag" CVEs in the span of a couple days. These could be mitigated by disabling certain modules, I think, but patches were released and integrated in Gentoo as far as I could tell.

I'm not sure about since then, but I suspect something similar.

Looking forward to a more informed response,
--

D. Ben Knoble

Best,

Ben