行业动态
news.slashdot.org ·
AI 发现大量 Linux 漏洞，Canonical 将稳定版更新周期改为两周一次
据 Canonical 博客，AI 将漏洞发现从人工密集型流程变为高度自动化引擎，叠加内核社区成为 CVE 编号机构后为大量 bug 分配 CVE，导致 CVE 数量激增。Canonical 因此转向统一的两周发布周期，并计划在公开披露后 24 至 48 小时内提供安全缓解措施，在补丁发布前先让环境进入可防御状态。
AI推荐理由 Canonical 官方博客被转述：AI 自动化漏洞发现导致 CVE 数量激增，上游内核社区成为 CNA 后为大量 bug 分配 CVE，Canonical 因此将稳定版更新周期改为统一的两周一次，并计划在公开披露后 24-48 小时内提供安全缓解措施。这是 AI 改变安全运维节奏的具体产业落地信号，但正文为转述，缺少原始数据与官方链接，需保留不确定性。
78
正文
185866632
story
"Finding vulnerabilities faster also puts pressure on Linux distributions to fix and deliver patches faster," writes Slashdot reader BrianFagioli
AI has transformed bug discovery from "a manual, time-intensive process into a highly automated engine," notes Canonical's blog, leading to a "recent explosion in the volume of CVEs".
Additionally, the upstream kernel community became its own CVE Numbering Authority (CNA) and assigned CVE (Common Vulnerabilities and Exposures) identifiers to thousands of bugs, arguing that at the kernel level, almost any type of bug that can affect a running system, could potentially be classified as a vulnerability. As a result, the volume of CVEs has skyrocketed exponentially, creating a massive backlog of alerts and forcing defenders to drastically increase the speed of their fixes to close the window of risk.
To address the growing volume of CVEs and the demand for faster security fixes, we are transitioning to a unified, 2-week release cycle...
While a patch is being prepared, Canonical aims to provide safe workarounds where applicable, so users aren't left exposed in the meantime. Where no safe workaround exists, Canonical will say so clearly and point users toward general hardening steps instead. The goal is to get environments into a defensible, safer state within 24 to 48 hours of public disclosure — well before a patch ships. This doesn't replace the patch; it buys the time needed to fix the vulnerability properly, without sacrificing security.
"Linux did not suddenly become wildly insecure overnight," notes the blog Nerds.xyz. "We are getting much better at finding and cataloging problems that may have previously gone unnoticed."
There is something almost ironic about all of this. AI is routinely pitched as a tool that will make software development faster, but it is also making vulnerability discovery faster. That means maintainers now have to accelerate the other side of the equation too.
For Ubuntu users, that should ultimately be good news. More bugs being discovered is preferable to vulnerabilities sitting unnoticed in the Linux kernel.