Vulnerability Management Linux kernel security faces challenge with surge in CVEs July 22, 2026 Share By SC Staff (Spectral-Design via Getty Images) According to The Register, Linux security professionals are facing a significant increase in workload following the publication of 432 Linux kernel CVEs over a two-day period. This surge has prompted concerns among system administrators and security experts regarding the feasibility of managing and prioritizing such a high volume of security vulnerabilities. The sheer number of Linux kernel CVEs, published recently, has raised questions about effective vulnerability management. Jan Schaumann, chief information security architect at Akamai Technologies, highlighted on the OSS-SEC mailing list that the CVE system may not be the ideal method for tracking security changes, especially when faced with such an influx. He suggested that attempting to individually review and patch each vulnerability is becoming impractical. Schaumann proposed potential strategies such as focusing on critical issues as they emerge or implementing weekly fleet-wide updates, though he acknowledged the difficulties large organizations face with lengthy QA processes and contractual obligations. The increase in CVEs is speculated to be linked to AI-assisted bug hunting, a trend previously noted by Linus Torvalds. While AI can be a valuable tool, it is also contributing to an unmanageable volume of reports for kernel maintainers. The definition of a Linux kernel vulnerability, as per the CVE Program, encompasses any weakness affecting confidentiality, integrity, or availability. Consequently, every bug fix addressing such an issue can result in a CVE assignment. Source: The Register SC Staff Related Patch/Configuration Management Microsoft ends extended security updates for Exchange 2016 and 2019 in October 2026 SC Staff July 22, 2026 The Exchange Server team confirmed that there will be no further extensions beyond the current Period 2 ESU program, which concludes in October 2026. Vulnerability Management Ubuntu snap-confine vulnerability grants root access SC Staff July 22, 2026 The vulnerability stems from a security hardening change made in July 2025, where snap-confine shifted to a set-capabilities model. Vulnerability Management F5 fixes critical nginx vulnerability CVE-2026-42533 SC Staff July 20, 2026 The vulnerability, with a CVSS score of 9.2, allows an unauthenticated attacker to trigger a heap buffer overflow by sending specially crafted HTTP requests. Related Events Cybercast Why Mythos is the cybersecurity crisis we need On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Bug Buffer Overflow Disassembly You can skip this ad in 5 seconds