Surviving the surge of new Linux LPE : Defense in Depth not dead

Thanks to AI-assisted vulnerability research and kernel patch diffing that breaks "responsible disclosure" embargos, it's quite the overwhelming time for defenders. There's been a weekly reveal of new Linux critical vulnerabilities, with full exploit scripts made public days before patchs are widely available.

Yet, most of the exploitation chains that have been recently published can be mitigated