A Filtering engine and DB for unpropagated kernel security patches

Lobsters Hottest Tools
security kernel patching linux open-source vulnerability-scanning

Summary

A filtering engine and database that scans public kernel commits to identify security patches that have not yet been propagated to stable branches, helping developers track potential vulnerabilities.

<p><a href="https://lobste.rs/s/pfz6dj/filtering_engine_db_for_unpropagated">Comments</a></p>
Original Article
View Cached Full Text

Cached at: 07/16/26, 05:53 AM

# Patchless Source: [https://patchless.natey.sh/](https://patchless.natey.sh/) So you're telling me there's a chance — Very likely — Likely \+ very likely — Total scanned ## Filtered commits Loading current scan data\.\.\. Automated estimates from already\-public kernel commits; not an authoritative security advisory\.

Similar Articles

An AI audit of FreeBSD

Lobsters Hottest

An AI-assisted security audit of FreeBSD uncovered 15 kernel vulnerabilities, including privilege escalations and a VM escape, and details the collaborative process of reporting and patching bugs with the FreeBSD team.

AI eyes scanning for bugs create a worrisome Linux security trend

Reddit r/ArtificialInteligence

AI tools are accelerating the discovery and public disclosure of Linux kernel bugs, creating a worrisome trend of frequent privilege-escalation vulnerabilities that may require weekly server reboots. Linus Torvalds has changed how the Linux security community handles AI-discovered bugs, treating them as public by default.

Patching and forking in package managers

Lobsters Hottest

This article explores strategies for patching and forking dependencies in language-specific package managers when upstream maintainers fail to address vulnerabilities. It contrasts the robust patching capabilities of system package managers with the limitations of language registries, detailing workarounds like git overrides and forks across various ecosystems.