[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <9d2046db-61e3-4ace-9a2a-30989c42c646@oracle.com>
Date: Fri, 24 Jul 2026 08:24:30 -0700
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: oss-security@...ts.openwall.com
Subject: Re: 432 Linux kernel CVEs
On 7/24/2026 3:20 AM, John Haxby wrote:
> And I don't care if you say you have a kernel with a formal proof -- you'll still have bugs in somewhere in the application stack.
Or in the hardware its run on - formal proofs didn't defend from Spectre
and Meltdown when we all learned that CPUs did things differently than
our models of them assumed they did, and the proof of an OS is unlikely
to cover all the code running in the firmware of the underlying devices.
--
-Alan Coopersmith- alan.coopersmith@...cle.com
Oracle Solaris Engineering - https://blogs.oracle.com/solaris
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
