Linux kernel releases 432 CVEs within 48 hours

The Linux kernel project published 432 security vulnerability entries (CVEs) over a 24‑hour period, prompting concern among system administrators. Akamai’s chief information security architect Jan Schaumann described the volume as an "onslaught" that makes prioritising individual patches impractical and suggested that automated, frequent updates might be the only viable response.

Speculation on social media linked the surge to AI‑assisted bug reporting, echoing Linus Torvalds’ earlier warning that the kernel security mailing list had become “almost entirely unmanageable” because of AI‑generated findings. Senior kernel maintainer Greg Kroah‑Hartman noted that the high CVE count is not unique to the kernel, arguing that many organisations must reassess update practices and that the community recommends regular, comprehensive updates or reliance on supported distributions such as Debian or Yocto.