@mruffell Perhaps I'm missing something, but the kernel discussion thread you linked specifically ends with "The CVE has now been rejected, thanks for the review!".
Surely that means that the Ubuntu team can revert the commit then? (unless you are of the opinion that the security vulnerability the commit addresses is serious enough that the change has to be kept regardless of CVE status?) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2073267 Title: Virtualbox Guru meditation on VM start caused by kernel commit in v6.9-rc4 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2073267/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs