logoalt Hacker News

theamklast Saturday at 7:31 PM1 replyview on HN

Nah, "removing CNA" = "let any security researcher decide what kernel vulnerability is"

And unfortunately, there are plenty of security researchers who are only interested in personal CVE counts, and will try to assign highest priority to a mostly harmless bug.


Replies

tuananhlast Sunday at 1:54 AM

but keeping the CNA and decide, "nah, i wont number it" instead?

show 1 reply