# OpenAI allocates frontier compute to finding and patching open-source vulnerabilities

> Original title: additional context on the project: https://x.com/Eric_Wallace_/status/2118123944251453949

- Source: Greg Brockman
- Published: 2026-11-04T23:54:59.000Z
- Bad Influence: https://badinfluence.news/items/j5uovnf483e1evcii7hyvp0uz
- Original: https://x.com/gdb/status/2118129916923568345

## Summary

OpenAI says it is allocating a significant amount of its frontier compute to discovering and patching vulnerabilities in open-source codebases, fully pro bono. In one case, its upcoming frontier cyber model found about 1000 local privilege escalation vulnerabilities in the Linux kernel in one week using about $1M of tokens. The post says the model also discovered at least 10 novel classes of Linux exploitation techniques, compared with roughly 20 such vulnerabilities a typical year before AI.

## Why it matters

The post gives concrete results, roughly 1000 Linux privilege escalation bugs found in one week versus about 20 per year before AI, showing the scale of the change.

## Post

additional context on the project: https://x.com/Eric_Wallace_/status/2118123944251453949

## Quoted post @Eric_Wallace_

> We are now allocating a significant amount of our frontier compute towards discovering and patching vulnerabilities in open source codebases, fully pro bono.
> 
> In one case, we studied the Linux kernel, which is a particularly load-bearing piece of software at OpenAI.
> 
> Before AI, security researchers might discover ~20 local privilege escalation (LPE) vulnerabilities in Linux in a typical year.
> 
> In one week's time, our upcoming frontier cyber model was able to find ~1000 LPE vulnerabilities using about $1M of tokens. In the process, it was able to discover at least 10 novel classes of Linux exploitation techniques.

https://x.com/Eric_Wallace_/status/2118123944251453949