u/unixbhaskar

CVE issue stats for the first 6 months of the year, by vendor, sorted by quantity:

   2308 "vendor": "LCVE issue stats for the first 6 months of the year, by vendor, sorted by quantity:   2308 "vendor": "Linux",
   1752 "vendor": "Google",
   1308 "vendor": "n/a",
    843 "vendor": "Microsoft",
    495 "vendor": "OpenClaw",
    445 "vendor": "Oracle Corporation",
    395 "vendor": "Adobe",
    340 "vendor": "Red Hat",
    310 "vendor": "Apache Software Foundation",
    284 "vendor": "Apple",
   
....and the original link can be found here : https://social.kernel.org/objects/4e81c982-6b6f-4645-88f6-947589f71b1d

efivarfs 148K 144K 0 100% /sys/firmware/efi/efivars

Oh, I have read the wiki : https://wiki.gentoo.org/wiki/Efivarfs and the kernel docs : https://docs.kernel.org/6.1/filesystems/efivarfs.html and this GITHUB post too : https://github.com/FrameworkComputer/SoftwareFirmwareIssueTracker/issues/90

But not sure how to clean or decreased the store. And it seems DBX update is failing for lack of space.

And the damn thing has showellen considerably ....irks ...

-rw-r--r-- 1 root root 20720 Jul 2 02:58 dbx-d719b2cb-3d3a-4596-a3bc-dad00e67656f

Now here is failed part when trying to update the firmware via fwupdmgr ...

Summary: UEFI revocation database

│ Current version: 20250902

│ Minimum Version: 20250902

│ Vendor: Microsoft (UEFI:Microsoft)

│ Install Duration: 1 second

│ Update Error: Not enough efivarfs space, requested 30.7 kB and got 4.1 kB

There are other keys failure on the chain too. Wondering .

Not sure what to do????

+- strscpy() when the destination must be NUL-terminated.

+- strscpy_pad() when the destination must be NUL-terminated and

+ zero-padded (e.g., structs crossing privilege boundaries).

+- memtostr() for NUL-terminated destinations from non-NUL-terminated

+ fixed-width sources (with the `__nonstring` attribute on the source).

+- memtostr_pad() for the same, but with zero-padding.

+- strtomem() for non-NUL-terminated fixed-width destinations, with

+ the `__nonstring` attribute on the destination.

+- strtomem_pad() for non-NUL-terminated destinations that also need

+ zero-padding.

+- memcpy_and_pad() for bounded copies from potentially unterminated

+ sources where the destination size is a runtime value.