0 Releases 30 Tags

RSS Feed

• v0.9.5 13fbbce618

  Compare

  release v0.9.5: kernel_range drift cleanup (12 modules)

  .leviathan released this 2026-05-28 18:51:15 +00:00 | 18 commits to main since this release

  v0.9.4 fixed cve_metadata drift but exposed kernel_range drift which
  had been hidden behind it. Applied refresh-kernel-ranges.py --patch
  recommendations: 11 TOO_TIGHT findings (false-positive risk — our
  threshold later than Debian's earliest known fix) + 8 MISSING (Debian
  has fixes for branches we didn't model) across 12 modules.

  All changes are strictly correctness-improving: detect() now correctly
  returns OK on kernels Debian has on record as patched, instead of
  false-positiving VULNERABLE.

  The biggest single fix is reverting fragnesia from {7,0,10} (NVD) to
  {7,0,9} (Debian's backported fix). I introduced that off-by-one in
  v0.9.4 from misreading NVD's versionEndExcluding semantics.

  Build's kernel_range drift step now exits 0 with 0 TOO_TIGHT + 0 MISSING.

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)