OpenAI finds 948 Linux kernel vulnerabilities and generates patches autonomously

Top News · 236 HN points

OpenAI built an autonomous pipeline for Linux kernel security, covering discovery, validation, and patch generation. It found 948 local privilege-escalation vulnerabilities and validated them. The system also generated patches for those same vulnerabilities as part of the autonomous workflow.

Here is what the pipeline does:

• The pipeline found 948 local privilege-escalation vulnerabilities in the Linux kernel.
• Validation covered those same 948 vulnerabilities, making it part of the workflow rather than a separate follow-up task.
• The system generated patches for the vulnerabilities it found and validated, connecting discovery directly to proposed fixes.

Why care? If you build security agents, this pipeline provides an example of autonomous discovery, validation, and patch generation applied together to 948 local privilege-escalation vulnerabilities in the Linux kernel.

Sources: openai.com