Hacker NewsDear Linux Kernel CNA, What Have You Done?
https://amanitasecurity.com/posts/dear-linux-kernel-cna-what-have-you-done/
#ycombinator #Linux_Kernel #CNA #CVE_Numbering_Authority #Product_manufacturing #Product_engineering #CVE_assignment_process #security_updates #software_bill_of_materials #known_vulnerabilities
https://amanitasecurity.com/posts/dear-linux-kernel-cna-what-have-you-done/
#ycombinator #Linux_Kernel #CNA #CVE_Numbering_Authority #Product_manufacturing #Product_engineering #CVE_assignment_process #security_updates #software_bill_of_materials #known_vulnerabilities
Dear Linux Kernel CNA, What Have You Done ?
The Linux Kernel project’s new CVE Numbering Authority (CNA) has a large impact on product manufacturers. Explore the complexities introduced by the new CVE assignment process, the challenges of frequent updates for electronic devices, and the burden placed on organizations due to the assignment of CVEs for non-security issues.