Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <2026111040-splurge-rotunda-940c@gregkh>
Date: Tue, 10 Nov 2026 16:44:51 -0500
From: Greg KH <gregkh@...uxfoundation.org>
To: Nakashima Seiichi <s-nakashima@....biglobe.ne.jp>
Cc: kernel-hardening@...ts.openwall.com,
	linux-security-module@...ts.linux.dev, keescook@...omium.org,
	paul@...l-moore.com, mic@...ikod.net
Subject: Re: [RFC v3] kaf: CVE Emergency Mitigation Policy Standard
 Specification

On Wed, Nov 11, 2026 at 05:56:02AM +0900, Nakashima Seiichi wrote:
> embargo  The period before public CVE disclosure during which vendors are aware
> period   of the vulnerability but it is not yet public.

The kernel does not have "embargo" time periods where any vendors are
aware of a vulnerability but it is not public, sorry.  That's just not
how we operate.  Please point your LLM at our documentation so it
doesn't get these types of basic things wrong.

greg k-h

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.