OpenAI Builds Automated Pipeline That Finds and Patches Linux Kernel Privilege Flaws

OpenAI has described an autonomous pipeline that found, validated and generated patches for 948 local privilege-escalation vulnerabilities in the Linux kernel. The work is titled "A thousand fewer paths to root", a reference to the way these flaws can let an attacker gain full control of a system.

Local privilege-escalation bugs matter because they let someone who already has limited access, such as a basic user account or a compromised application, raise their permissions to the highest level. The Linux kernel sits at the core of a very large number of servers, cloud services and devices, so weaknesses at this level can affect many organisations.

The announcement is an example of AI being used for defence, with a system handling the full cycle from discovery through to proposed fixes. The summary provided does not give details on how the pipeline works, how the patches were reviewed, or how they were released to Linux maintainers, so those points remain to be confirmed in the full report.