[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-openai-pipeline-finds-948-linux-kernel-privilege-bugs":10,"sections":49},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":38,"tags":39,"sources":44,"feedback":48,"feedback_at":22,"cost_usd":48,"total_tokens":48},12493,"openai-pipeline-finds-948-linux-kernel-privilege-bugs","OpenAI Pipeline Finds 948 Linux Kernel Privilege Bugs","OpenAI says its automated system found, validated, and drafted fixes for 948 Linux kernel flaws; how many maintainers accept is the open question.","OpenAI says it built an autonomous pipeline that found, validated, and generated patches for 948 local privilege-escalation vulnerabilities in the Linux kernel.\n\nA local privilege-escalation bug lets someone who already has limited access to a machine, or code running on it, take over as root, the all-powerful administrator account. The kernel is the core software that manages hardware and every other program, so a flaw there can undo the protections everything else relies on. Attackers typically use these bugs as a second step: get in through a weak application, then climb to full control.\n\nThe pipeline handled three jobs without a human steering each one: finding candidate flaws, confirming they were real, and writing fixes. The confirmation step is the one to watch. Open-source maintainers have complained for some time about low-quality, AI-generated bug reports that cost them hours and turn out to be wrong. A system that filters its own output before anyone else sees it is aimed squarely at that problem.\n\nThe number, though, comes from the company's own announcement, and that announcement does not say how many of the flaws were severe, how many candidates were discarded along the way, or how many patches maintainers accepted. Those three figures decide whether 948 is a milestone or a big pile of paperwork.\n\nAutomated bug hunting itself is not new. Google's Big Sleep project reported an SQLite flaw in 2024, and DARPA's AI Cyber Challenge pushed teams to build systems that find and fix vulnerabilities. What stands out here is the scale on a single, heavily scrutinized codebase, paired with generated patches rather than just reports.\n\nThat pairing raises a practical question. Kernel changes pass through human reviewers, and 948 patches is a lot to ask of volunteers and subsystem maintainers. If the fixes are good, review capacity becomes the limit. If they are not, the pipeline has just moved the noise downstream.","[\"linux-kernel\",\"vulnerabilities\",\"ai-security\",\"openai\"]","2026-11-04T08:00:00.000Z","2026-11-08T04:58:56.776Z","2026-11-08T04:58:56.949Z","published",null,[24,30,34],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"The headline and dek say the pipeline 'patches' and 'patched' 948 flaws, but the source and your own body say it only generated patches, with no word on whether any were accepted or merged, so rewrite both to say 'generated patches' (or 'proposed fixes') and make sure no line implies the bugs are actually fixed.","resolved",{"id":31,"reviewer":26,"round":32,"reason":33,"status":29},"editor-r2",2,"The headline and dek now correctly say 'generates patches', but the lead's 'the company said on November 4' date appears nowhere in the source, so remove it or source it, and make sure claims about what the announcement omits (severity, discarded candidates, maintainer acceptance) are limited to what the source material actually shows.",{"id":35,"reviewer":26,"round":36,"reason":37,"status":29},"editor-r3",3,"The unsourced November 4 date is gone, but the line 'the source gives no breakdown beyond it' acknowledges missing source material in the text, so cut it or reword it as a plain statement that OpenAI's announcement does not say how many flaws were severe, how many candidates were discarded, or how many patches maintainers accepted.","security",[40,41,42,43],"linux-kernel","vulnerabilities","ai-security","openai",[45],{"name":46,"url":47},"OpenAI","https:\u002F\u002Fopenai.com\u002Findex\u002Fa-thousand-fewer-paths-to-root",0,{"sections":50},[51,56,60,65,70,75,80,85,90,95,100,105,110,115],{"name":52,"slug":53,"count":54,"latest_published_at":55},"AI","ai",7110,"2026-11-08T14:34:09.000Z",{"name":57,"slug":38,"count":58,"latest_published_at":59},"Security",1099,"2026-11-08T15:24:01.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Deals","deals",620,"2026-11-08T08:00:00.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Policy","policy",604,"2026-11-07T15:48:26.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Consumer Tech","consumer-tech",336,"2026-11-08T21:00:00.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Hardware","hardware",316,"2026-11-08T14:36:39.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Science","science",222,"2026-11-07T16:19:17.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"Software","software",154,"2026-11-08T15:42:52.000Z",{"name":91,"slug":92,"count":93,"latest_published_at":94},"Startups","startups",150,"2026-11-06T16:50:01.000Z",{"name":96,"slug":97,"count":98,"latest_published_at":99},"Dev Tools","dev-tools",125,"2026-11-06T22:15:59.000Z",{"name":101,"slug":102,"count":103,"latest_published_at":104},"General","general",111,"2026-11-08T21:27:29.000Z",{"name":106,"slug":107,"count":108,"latest_published_at":109},"Gaming","gaming",94,"2026-11-08T20:52:05.000Z",{"name":111,"slug":112,"count":113,"latest_published_at":114},"Reviews","reviews",38,"2026-10-20T12:00:00.000Z",{"name":116,"slug":117,"count":118,"latest_published_at":119},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]