OpenAI 网络安全模型一次找出 948 个 Linux 内核漏洞
OpenAI 的网络安全模型一次跑出 948 个 Linux 内核漏洞还能自动写补丁，AI 挖漏洞这事已经真实发生了。
OpenAI 的安全研究展示了一个即将推出的网络安全模型如何让漏洞挖掘更快、更便宜。在一次运行中，该模型在 Linux 内核里发现 948 个漏洞，并构造出可让普通用户获得机器完全控制权的可用 exploit，同时生成了供人工审核的补丁建议。这些 exploit 需要已有本地访问权限，但该权限可能来自被盗账号或已被入侵的应用。Linux 内核有超过 4000 万行代码，支撑着 Android 设备、云基础设施和超级计算机。
OpenAI’s latest security research shows how AI could make cyberattacks faster and cheaper.
In one run, an upcoming cyber model helped find 948 Linux kernel vulnerabilities and build working exploits that could give an ordinary user full control of a machine. The system also generated proposed patches for human review.
The exploits required existing local access. But that access could come from a stolen account or an already compromised application.
To understand the significance:
"The Linux kernel underpins Android devices, cloud infrastructure, supercomputers, and other systems used by billions of people. With more than 40 million lines of code, the kernel exposes a broad attack surface through system calls, networking, filesystems, and device drivers. We chose Linux to study how effectively frontier models could find vulnerabilities and demonstrate their security impact in a codebase of this scale and importance."
