Tell me you haven't read the article without telling me you haven't read the article.

The amount of people who will speak confidently without knowing the full picture is astounding.

948 is an absurd number to bugs to find at one time. i bet most of them are fake. i've seen the "bugs" AI likes to find

I do not trust AI. We've seen too many mishaps from it. That technology is too early for us to truly comprehend. And now... AI is finding all sort of things wrong with Linux which has been running darn near perfect for how many years now not counting system upgrades over hat is. Then again...I'm no programmer so I could be out in left field.

comment to watch the thread

Linux mint here to chime in. Works flawlessly, gaming included.

ZFS support, perhaps.

Yes vanilla arch can load dkms with zfs support but it’s a pain.

So here's temporary fix and one that Arch technically supports but the devs highly recommend against it. But I have used it in the past for a short time when KDE 6 first released and was buggy as hell on my system.

You can blacklist certain packages from updating by editing /etc/pacman.conf

You should see under [Options], IgnorePkg = It might be commented out or if it's not there at all just add it manually.

So something like IgnorePkg = linux amdgpu

Then save and update like normal. Just don't forget about it since the longer you leave it the more likely something will break.

It’s gamer focused, but still pretty open, it’s arch based so lots of options.

On scale between bazzaite , Nobaru, and catchyos, it’s the most open imo while still offering a near seamless transition for a windows user.

Its an art and design suite. Before Canva bought it and made it free (AI "features" are paid) the company that created it, Serif, deliberately competed with Adobe's subscription bullshit by offering affordable one-time license fees. It is by far the best Adobe suite replacement IMO

The link is benchmarks for the amd64v3 micro-architecture, not specific to Ubuntu. CachyOS repositories also have a bunch of packages that you would otherwise use the AUR for on Arch. An example: https://packages.cachyos.org/package/cachyos/x86_64/euro-office-bin

The link you shared is for Ubuntu. Larger repositories?

It lets you develop apps for macOS without having to buy an Apple product. Some people are also really used to using macOS-exclusive software like Final Cut Pro.

And in the case of gaming, someone successfully ran League of Legends with their own darling fork.

Solid suggestion, I'll try that later, thanks! Also thanks for writing out the grep command, I would have asked otherwise.

Sure, you can generate a list of places to start testing, but each of those has to be validated, reproduced, documented and understood before it’s confirmed

i guess you didn't actually read the blog post this article links to? The number in the headline (948) is the number of LPE bugs which they say they validated and reproduced and developed exploits (and patches) for.

If anybody is interested: distros like Secureblue and Kicksecure (and Kicksecure-based ones like Whonix) reduce attack surface by disabling a bunch of kernel modules, and further harden the kernel via sysctl settings and kernel arguments. Secureblue also sends a notification whenever a system update fixes a vulnerability.

https://secureblue.dev/features
https://www.kicksecure.com/#security

I have great experience with it when it comes to standby time. I sometimes will bring it with me to work to play around on my lunch hour, and if I don't end up pulling it out of my backpack, it'll drop maybe 4-5% over a ~10 hour period. Of course, actual use can be a mixed bag, but I tended to get a few hours of modded Minecraft before needing to reach for a charger.

It's a choice. You either want to make your pizza from scratch or have it delivered. I prefer mine delivered so I can kick my feet up on the couch, watch TV, and start eating right away. I don't have time to gather all the ingredients and do all the cooking, you know?

Affinity is owned by Canva, who bought its British developer, Serif, in 2024. They went on to released a revamped v3 of the suite in October 2025, merging three paid apps into a single free app with a unified UI.

Some kind of graphic art program.

What is that

If you have ever actually seen the discovery process, you'll understand that bugs and rce's don't just popup on a list from a computer. Sure, you can generate a list of places to start testing, but each of those has to be validated, reproduced, documented and understood before it's confirmed. It's not just the discovery of a starting point that constitutes an rce or other vuln, there's a ton of work that needs to be done by humans also.

So a few bad ones in the news? Sure. A list of 1500 non-validated rces? I'm not holding my breath.

You really have to think critically and let go of the "hacker" sensationalism in infosec, it's easy to fall into.

amd64v3 support and larger repositories.

You seem to mistaking amdgpu pro and amdgpu. amdgpu is the default FOSS AMD kernel driver, mesa is the userspace driver. And amdgpu pro is the proprietary AMD kernel driver.

what do you mean?

Something else AI’s ruining…

can you explain what you mean by this? are they ruining linux by revealing its bugs at a much faster rate? or ruining the security research field by depriving researchers of the challenge and enjoyment of finding these bugs themselves?

repeating myself from a previous thread: of all the things i hate about LLMs, getting vulnerabilities in important software like linux discovered and fixed is not one of them

(although, as i said elsewhere in this thread, i find it unlikely that openai is actually disclosing all of the bugs they find 😬)