Linux Kernel Approaches 2,000 CVEs per Release Amid AI Bug-Hunting Influx

ArticleEtiido UkoNews

The growing use of AI tools for static code analysis is pushing the number of CVE fixes in the Linux kernel to unprecedented levels. Maintainers are struggling under a flood of submissions ranging from verified vulnerabilities to hallucinations and trivial clean-ups, prompting the removal of legacy drivers and the deployment of AI-based patch filtering.

Key points

  1. Linux 7.3 is expected to exceed 2,000 CVE fixes per release, up from roughly 500 during the Linux 6.x cycle.
  2. The surge is driven by automated tools and LLMs scanning the 40-million-line codebase rather than a decline in kernel security.
  3. Maintainers report severe workloads; Jakub Kicinski estimated up to half of incoming networking patches were low-priority AI-driven adjustments.
  4. Decades-old hardware drivers (ISA, PCMCIA, SGI, IBM) and filesystems like FreeVxFS are being removed to eliminate automated bug-hunter targets.
  5. Greg Kroah-Hartman has banned unverified LLM-generated patches in staging, and the kernel project is now using frontier AI models to triage and filter submissions.

Why it matters

This highlights the severe operational asymmetry introduced by AI in open-source maintenance: generating code reports and patches costs virtually nothing, but validating them consumes scarce expert human attention.

Analysis

To cope with the volume, the Linux kernel community is shifting its approach to legacy maintenance and review. By retiring unmaintained subsystems, developers permanently eliminate review overhead. Concurrently, maintainers are forced to adopt frontier models as gatekeepers, turning automated systems into a defensive filter against external AI-generated noise.

Mentioned links

Found in

Summary generated by AI (Gemini 3.8 Flash, 27 September 2026). It may contain errors – the original source is authoritative.

Related entries

Similar in content, found by the AI search.

  • Article:The Cognition Team

    Cognition Introduces Devin Security Swarm

    Cognition has launched Devin Security Swarm, a multi-agent system designed to identify, validate, and remediate codebase vulnerabilities. Instead of merely surfacing static alerts, the system verifies exploitability in runtime sandboxes and automatically generates remediation pull requests.

    AI & LLMs· Announcement

  • Repository:nealbridges/VulnHunter

    VulnHunter: Agentic AI Security Scanner for Exploitable Vulnerabilities

    VulnHunter is an open-source, agentic AI security scanner that inspects source code from an attacker's perspective, confirms exploitability, and generates fixes. This maintained fork of Capital One's original project decouples the tool from Claude Code to support arbitrary agent harnesses and open-weight models.

    223starsPython

    AI & LLMs· Tool

  • Article:Marcos Hernanz

    How Next.js Closed 1,500 GitHub Issues Using AI Agents

    The Next.js team built autonomous research agents using Vercel's open-source framework eve to investigate over 2,200 GitHub issues. Within weeks, maintainers closed 1,462 tickets with high precision based on evidence collected by the agents.

    AI & LLMs· News

  • X post:Next.js

    Next.js Clears Issue Backlog Using AI Research Agent and Human Review

    The Next.js team closed nearly 1,500 GitHub issues in one month, bringing their repository backlog down from over 2,200 to under 1,000 open reports. The process was powered by 'closability', a research agent built with Vercel's open-source 'eve' framework and GPT-5.6 Luna.

    503bookmarks178.3kviews

    AI & LLMs· Announcement

Back to the knowledge base

Let's talk about your project

Get in touch

Locations

  • Mattersburg
    Johann Nepomuk Bergerstraße 7/2/14
    7210 Mattersburg, Austria
  • Vienna
    Ungargasse 64-66/3/404
    1030 Wien, Austria

Parts of this content were created with the assistance of AI.