Skip to content
View original post on X: Rohan Paul
Published
Same story78/100

OpenAI reports an AI pipeline that patched 948 Linux kernel privilege escalation bugs

AIOpenAI says an autonomous pipeline for finding, exploiting and patching vulnerabilities produced fixes for 948 local privilege escalation bugs in the Linux kernel in one run. The run used an upcoming cyber model, cost $1.2 million in API credits, and was reviewed by humans before results went to Linux maintainers.
Rohan PaulVerified on X
@rohanpaul_ai
View on X

OpenAI claims their new security model patched 948 Linux privilege escalation vulnerabilities.

Scout agents cut the kernel’s 40M-plus lines to 2.8M worth auditing.
i.e. AI agents picked the most security-relevant 7% of the Linux kernel (2.8M lines), flagged 2,308 suspected bugs, confirmed 1,724 in test machines, and built working root-takeover exploits and fixes for 948. Humans reviewed the results before sending them to Linux maintainers.

The whole run cost $1,213,430 in API credits, $775,929 of it on building exploits, though OpenAI ran its own model, so that’s likely not cash actually spent.

So all this means that finding and weaponizing a Linux kernel bug now costs about $1,279 with AI, so any unpatched Linux machine where an attacker gets even a basic user account should be treated as fully taken over.

OpenAI@OpenAI
Our security researchers built an autonomous cyber vulnerability discovery, exploitation, and patching pipeline. In a single run with an upcoming cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in the Linux kernel at a total API cost of $1.2 million.
View quoted post on X

This story is featured in top picks: “OpenAI reports autonomous pipeline found and patched 948 Linux kernel vulnerabilities”

Source details

Rohan Paul · x.comPublished · added here

Original title: OpenAI claims their new security model patched 948 Linux privilege escalation vulnerabilities.