

Mainline kernel devs applied the fix upstream on October 5, ten days before the CVE was published
Debian’s kernel team imports entire upstream stable point releases rather than backporting individual CVE patches into heavily patched kernel trees like some of the other distros. Once the fix shipped in the 6.12.113, 6.1.190 and 7.2.10 stable releases, it arrived in Debian unstable/sid as part of a routine version bump
Then a day after the cve was published and marked as 9.8 (16th) Debian also patched the frozen versions like Trixie and bookworm







So what you’re saying is that any president would prioritize corporate profit over national security? Agreed, though I’m unsure why you’re defending that course of action. This isn’t some deal that would cripple Nvidia, they are making money hand over fist right now, this is effort by the Chinese government to get access to stronger Nvidia compute hardware to strengthen their AI capability, likely for cyberwarfare