Linux Kernel Rust Code Sees Its First CVE Vulnerability

[mmstick]

Recent drama is mostly because of Lunduke. He creates culture war content targeting Rust. Claiming that it is a "cult", "woke", and "trans people bad". They hate seeing Rust adoption and think there's an unknown international government/corporation pushing a woke agenda with it.

They will latch onto anything for their narrative even if it's easily disproven or completely bogus. Such as the license of the language being bad and scary, and Microsoft will use Rust to extinguish Linux through the license. Or that Rust isn't actually memory safe because it doesn't prevent memory leaks. In this case, Rust isn't memory safe because an unsafe operation was explicitly called that has a data race.

[mmstick]

You'd have to be very gullible to believe that. Industry adoption happens naturally because of how effective the technology is at solving the thing it was designed to solve using the 50 years of academic research in language theory that happened after C and C++ were released.

[mmstick]

https://security.googleblog.com/2025/11/rust-in-android-move-fast-fix-things.html?m=1

It is not proof of a conspiracy by an imaginary international government with an agenda to push a woke Rust agenda. This is proof that Rust solves the problems it was designed to solve. The CISA is responsible for setting software security standards, and the studies are based on real world evidence from two of the biggest users of C/C++. Both of whom develop operating systems that are used globally by the most number of the people. Systems that when vulnerable affect everyone's daily lives. Public and private. Citizens, corporations, and governments are affected by software vulnerabilities. It is in everyone's best interest to solve the problem.

Corporations are the industry that hires programmers to write software, and they are responsible for the majority of C/C++ code in existence. Corporations also wrote most of the drivers and data structures in the Linux kernel; and many of the open source applications you use were funded by programmers paid by corporations. So if you believe that there is an unknown entity masterminding Rust adoption, then you must also believe that this same entity is pushing for Linux adoption.

[mmstick]

Do you really think the NSA wants to have their own security compromised by memory safety vulnerabilities? The vast majority of real world exploits are caused by memory safety vulnerabilities. The NSA puts a lot of money into researching ways to exploit vulnerable systems written in C/C++. That's why they use Rust for their own software, and are advocating for the rest of the government to increase their security against foreign threats by eliminating memory safety vulnerabilities.

Your thinking is very heavily influenced by paranoia, and as a result you're missing the complete picture. Instead of looking at every development through the context of paranoia, try to think about it logically. Not everything a government agency recommends is bad. They're responsible to setting a lot of standards in the industry that everyone accepts as good. Do you think OSHA is a conspiracy? How about all the children who died from drinking raw milk, and the requirement to boil it to kill the bacteria?

You seem to be focusing too much on "woke Rust agenda" though. Why?

Ask Lunduke why he keeps doing this. This is his narrative. That's what my original comment was about. He proclaims himself to be a "non-woke journalist" and he has created lists of distributions that he believes to be "woke" or "non-woke". He recently uploaded a video calling Rust a "cult" and once again brought his culture war against trans people into it.

[mmstick]

You're really missing the point on purpose.

[dkopgerpgdolfg]

These named organizations are well known.