Techstrong Gang

The Linux kernel CVE surge hit a new high this week. Specifically, maintainers published 432 CVEs in just two days. As a result, security teams are struggling to keep up. Akamai’s Jan Schaumann says prioritizing individual kernel fixes at this volume “is not feasible.” Meanwhile, Linux creator Linus Torvalds says the kernel security mailing list has become “almost entirely unmanageable.” Consequently, some researchers now suspect AI-assisted bug hunting is driving the surge.

Elsewhere, the European Union hit Google with a $1 billion fine. Regulators say Google violated the Digital Markets Act. The company favored its own shopping, travel, and hotel results in search. Additionally, Google restricted app developers from steering users away from Play Store fees.

On the AI funding front, Samsung is negotiating a stake in French AI startup Mistral. Notably, the talks could value the company at roughly $22.8 billion. That’s nearly double its valuation from ten months ago.

Today’s Techstrong Gang panel breaks it all down. Host Jon Swartz joins Tracy Ragan, Jeff Reich, and Jack Poller to unpack the kernel security strain, Google’s EU penalty, and what Samsung’s AI bet signals for chip and AI funding.

Topics Discussed

• The Linux kernel CVE surge, why security teams call it unmanageable, and the AI-assisted bug hunting debate
• The EU’s $1 billion Digital Markets Act fine against Google over search self-preferencing and Play Store restrictions
• Samsung’s talks to invest in Mistral AI at a $22.8 billion valuation, and what it means for AI funding and chip supply chains

Source Facts Digest: The Linux Kernel CVE Surge

Linux Security Teams Face Unprecedented Strain

Linux kernel maintainers published 432 CVEs across Sunday and Monday. Consequently, that volume immediately drew alarm from security professionals. Linux watchers at nixCraft flagged the count. Additionally, Jan Schaumann, chief information security architect at Akamai Technologies, posted a warning to the OSS-SEC mailing list. He said “this onslaught really shows it’s not feasible to attempt to prioritize individual kernel changes.” Schaumann told The Register that reviewing vulnerabilities individually was already difficult before this volume. As a result, automation may be the only path forward, though not necessarily a good one. Separately, the nixCraft team speculated that AI-assisted bug reports are a likely driver of the surge. That claim has precedent. Torvalds said in May that the mailing list had become “almost entirely unmanageable” due to AI-assisted bug hunting. (The Register)

EU Hits Google With $1 Billion Penalty

The European Commission fined Google €890 million ($1 billion) on July 23. The penalty covers two separate breaches of the EU’s Digital Markets Act. These are the law’s first monetary penalties since it took effect three years ago. Specifically, a €460 million fine covers “self-preferencing.” Google promoted its own shopping, travel, hotel, and translation services ahead of competitors in search. Roughly 90% of EU online searches run through Google Search, which amplified the impact. A separate €430 million fine covers “anti-steering” practices. Google had prevented app developers from directing Play Store users toward cheaper offers elsewhere. Consequently, the Commission ordered Google to treat third-party services fairly. Google now has 60 days to comply or face fines of up to 5% of its global turnover. (Reuters, Bloomberg, MacRumors)

Samsung Negotiates a Stake in Mistral AI

Samsung Electronics is in advanced talks to invest up to €1 billion in Paris-based AI startup Mistral. That’s roughly $1.14 billion. A Financial Times report cites sources familiar with the matter. The investment would be part of a new funding round targeting €3 billion in total commitments. It would value Mistral at approximately €20 billion, or $22.8 billion. That’s nearly double its €11.7 billion valuation from last September’s Series C round. Sweden’s EQT is also reportedly in talks to participate, through its Scaleup Europe Fund. However, neither Samsung nor Mistral has confirmed the deal. (Techstrong Semi, Reuters)

For more daily coverage, visit the Techstrong Gang video archive. Additionally, watch daily on Techstrong TV and subscribe for more DevOps, AI, and enterprise tech coverage.