38
What is your reaction to the flood of CVEs? (feddit.org)
submitted 4 days ago by HaraldvonBlauzahn@feddit.org to c/linux@lemmy.world
36 comments fedilink hide all child comments

The number of reported security vulnerabilities has gone up drastically. And so has the frequency, number, and volume of security patches. Which also makes the gap between fully supported distributions and ones with only partial security support larger. (Not every distribution provides full security upddates for the full announced life time of a release.)

How are you folks reacting to this?

you are viewing a single comment's thread
view the rest of the comments
[-] thingsiplay@lemmy.ml 3 points 4 days ago

You can absolutely prove the absence of bugs via formal verification.

You can't have a formal verification for an open ended system like the Linux Kernel. You can only have that with extremely narrow defined functions that only operate mathematical and the input and output are 100% deterministic. Someone has to make the test cases, and to my knowledge its not possible to do this with complex systems like the Linux Kernel.

The card example does not really make sense because the kernel is not a random set of syntax and bugs do not happen randomly.

It makes sense, because it proofs my point that a finite number is irrelevant if its that big. The randomness of it is absolutely not the point, its the sheer amount of possibilities.

Well we now have software really good at finding these things, as well as system languages that cannot have these bugs.

No software can test a complex system like this in its entirety to make sure there are no bugs. Those software itself need to be perfect themselves too. Therefore you introduce enormous complexity in solving bugs, which itself can have bugs.

If bugs are closed faster than they are opened, the total amount goes down.

I wasn't arguing against that. I am arguing that a finite number of bugs is not a good argument to have none in the future. Because of the sheer amount of possibilities, and also because we cannot proof that Linux Kernel is perfect without any bugs. It is impossible.

this post was submitted on 09 Nov 2026
38 points (95.2% liked)

Linux

19959 readers
70 users here now

Welcome to c/linux!

Welcome to our thriving Linux community! Whether you're a seasoned Linux enthusiast or just starting your journey, we're excited to have you here. Explore, learn, and collaborate with like-minded individuals who share a passion for open-source software and the endless possibilities it offers. Together, let's dive into the world of Linux and embrace the power of freedom, customization, and innovation. Enjoy your stay and feel free to join the vibrant discussions that await you!

Rules:

  1. Stay on topic: Posts and discussions should be related to Linux, open source software, and related technologies.

  2. Be respectful: Treat fellow community members with respect and courtesy.

  3. Quality over quantity: Share informative and thought-provoking content.

  4. No spam or self-promotion: Avoid excessive self-promotion or spamming.

  5. No NSFW adult content

  6. Follow general lemmy guidelines.

founded 3 years ago
MODERATORS
ieh@lemmy.world