Home / Technology / AI Hunts Linux Bugs, Finds Thousands
AI Hunts Linux Bugs, Finds Thousands
5 Nov
Summary
- An AI pipeline discovered 2,308 potential vulnerabilities in the Linux kernel.
- The AI proved 948 vulnerabilities were dangerous, capable of full system control.
- OpenAI estimates the AI's run cost $1,213,430, saving money on bug bounties.
OpenAI has developed an autonomous AI pipeline that discovers, exploits, and patches software vulnerabilities. This system scanned the Linux kernel, a foundational component for much of the internet and Android devices.
During its operation, the AI identified 2,308 potential vulnerabilities. It then rigorously tested 948 of these on a virtual machine, confirming their severity and potential for full system compromise.
Subsequently, agents within the AI wrote the necessary patches for these validated threats. These patches were then submitted for human approval before any code modifications were made.
The AI's extensive run consumed significant resources, incurring an estimated API cost of $1,213,430. OpenAI suggests this cost is a bargain compared to the market rate for bug bounties, which could range from $18.9 million to $66.3 million for the same number of exploits.
This initiative follows OpenAI's similar efforts, such as the 'Patch the Planet' project. Automated vulnerability discovery is increasingly being utilized by major tech companies, with Google also reporting success in using AI for security.
