OpenAI model finds 1,000 Linux LPE vulnerabilities
additional context on the project: https://t.co/mDqbF3W0s3
The finding reframes vulnerability discovery economics: a week of model compute can match a decade of human researcher output on Linux LPE hunting. Security teams maintaining open-source stacks should expect triage and patching pipelines to become the bottleneck rather than discovery. The comparison with tools like CodeQL-style static analysis is stark, since the model surfaced novel exploitation classes, not just known patterns.
OpenAI researcher Eric Wallace said the company is allocating frontier compute to finding and patching open-source vulnerabilities pro bono. In one case, an upcoming frontier cyber model scanned the Linux kernel and found about 1,000 local privilege escalation (LPE) vulnerabilities in one week, using roughly US$1M worth of tokens. Before AI, security researchers typically discovered about 20 LPE vulnerabilities in Linux per year. The model also identified at least 10 novel classes of Linux exploitation techniques.
additional context on the project: https://t.co/mDqbF3W0s3
additional context on the project: x.com/Eric_Wallace_/… Eric Wallace @Eric_Wallace_ We are now allocating a significant amount of our frontier compute towards discovering and patching vulnerabilities in open source codebases, fully pro bono. In one case, we studied the Linux kernel, which is a particularly load-bearing piece of software at OpenAI. Before AI, security researchers might discover ~20 local privilege escalation (LPE) vulnerabilities in Linux in a typical year. In one week's time, our upcoming frontier cyber model was able to find ~1000 LPE vulnerabilities using about $1M of tokens. In the process, it was able to discover at least 10 novel classes of Linux exploitation techniques. 🔗 View Quoted Tweet 💬 2 🔄 2 ❤️ 34 👀 5730 📊 4 ⚡
