Post #2377472

It seems there is another massive Linux local privilege escalation vulnerability: https://github.com/V4bel/dirtyfrag/blob/master/assets/write-up.md Around December 2025, I posted a piece on why I think software being open source is necessary but not sufficient for them to be declared secure and trustworthy: https://ulveon.net/p/2025-12-03-the-secure-open-source-fallacy/ I certainly didn't expect the idea behind my article to materialise in devastating Linux privilege escalation vulnerabilities, not just once, but twice, in the span of a few weeks. We will continue seeing more and more of this. This doesn't mean that open source software is unsafe or that Linux is worse than proprietary operating systems. But it does mean that those development teams that refuse to adopt AI into their development processes will be severely disadvantaged.