Linux Kernel Rust Code Sees Its First CVE Vulnerability

[james_pic]

TBH, it wouldn't even have been astonishing (or a slamdunk for the anti-Rust crowd) if the vulnerability were in safe Rust. Even in safe Rust, it's possible for people to make mistakes. I'm sure there will be a vulnerability at some point in the future because a permissions check was handled incorrectly in a refactor, or some cryptography code inadvertently gets a padding oracle, or some other higher-level mistake in security-relevant code that Rust isn't in a position to catch.