TREE NEWS update: OpenAI said its security researchers built an autonomous vulnerability discovery, exploitation and patching pipeline that, paired with an upcoming cybersecurity model, reproduced 1,724 vulnerabilities in a single run and generated working exploit code and candidate patches for 948 distinct Linux kernel local privilege-escalation flaws. The run also produced proofs of concept for 291 information-disclosure bugs at a total API cost of about $1.21 million, or roughly $1,279 per privilege-escalation flaw. OpenAI said the agent surfaced at least 10 previously unknown Linux exploitation techniques and is working with Linux maintainers and Patch the Planet partners on disclosure and patches.
OpenAI security AI finds 948 Linux kernel privilege-escalation exploits in one run
The significance here is less the raw find count than the economics and the disclosure model: an automated pipeline turning model output into working exploits and candidate patches at a stated per-flaw cost reframes kernel vulnerability research from artisan work toward a budgeted, repeatable process. The immediate stakeholders are Linux maintainers and the disclosure partners now absorbing a large batch of reports, plus defenders who inherit a faster patch-and-exploit tempo. The open question is whether the pipeline's candidate patches hold up under maintainer review and whether the previously unknown techniques survive coordinated disclosure intact.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.