# OpenAI reports an AI pipeline that patched 948 Linux kernel privilege escalation bugs

> Original title: OpenAI claims their new security model patched 948 Linux privilege escalation vulnerabilities.

- Source: Rohan Paul
- Published: 2026-11-05T01:06:09.000Z
- Bad Influence: https://badinfluence.news/items/mcau227ytlilel4aixfeukq7b
- Original: https://x.com/rohanpaul_ai/status/2118147825146175666

## Summary

OpenAI says an autonomous pipeline for finding, exploiting and patching vulnerabilities produced fixes for 948 local privilege escalation bugs in the Linux kernel in one run. The run used an upcoming cyber model, cost $1.2 million in API credits, and was reviewed by humans before results went to Linux maintainers. The author, Rohan Paul, adds that the run's API cost is likely not real cash spent, since OpenAI ran its own model.

## Post

OpenAI claims their new security model patched 948 Linux privilege escalation vulnerabilities.

Scout agents cut the kernel’s 40M-plus lines to 2.8M worth auditing. 
i.e. AI agents picked the most security-relevant 7% of the Linux kernel (2.8M lines), flagged 2,308 suspected bugs, confirmed 1,724 in test machines, and built working root-takeover exploits and fixes for 948. Humans reviewed the results before sending them to Linux maintainers.

The whole run cost $1,213,430 in API credits, $775,929 of it on building exploits, though OpenAI ran its own model, so that’s likely not cash actually spent.

So all this means that finding and weaponizing a Linux kernel bug now costs about $1,279 with AI, so any unpatched Linux machine where an attacker gets even a basic user account should be treated as fully taken over.

![](https://badinfluence.news/api/img-proxy?u=https%3A%2F%2Fpbs.twimg.com%2Fmedia%2FHWUrBMCagAAv5FG.jpg&mode=thumb&exp=1794096000&sig=aec753532847955e)

## Quoted post @OpenAI

> Our security researchers built an autonomous cyber vulnerability discovery, exploitation, and patching pipeline.
> 
> In a single run with an upcoming cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in the Linux kernel at a total API cost of $1.2 million.

https://x.com/OpenAI/status/2118119451401048497