OpenAI reports AI-assisted Linux kernel vulnerability research
OpenAI says a research prototype in a controlled environment analyzed 2,308 candidate Linux kernel findings, dynamically reproduced 1,724 vulnerabilities and produced 948 local privilege-escalation exploits. The company used the results to prioritize vulnerabilities for reporting and develop candidate patches for maintainer review. It also expanded the work into a five-stage pipeline powered by an upcoming cyber model that covers discovery, dynamic validation, exploitability assessment and patch generation; human researchers reviewed its outputs before reports and patches were submitted.
The report says AI can support systematic vulnerability discovery and patching workflows for widely used critical software. It also identifies prioritization and validation as operational bottlenecks and says hardening projects such as Linux can protect downstream systems and users.
Security research that once required a separate, sustained investigation for each finding can increasingly be run as a systematic process. This document explores one of our efforts in this area.
Vulnerability discovery is becoming easier to scale, but prioritization and validation remain operational bottlenecks. We built a prototype to look for security flaws in the Linux kernel inside a controlled research environment. Our prototype identified and analyzed 2,308 candidate Linux kernel findings, dynamically reproduced 1,724 vulnerabilities, and produced 948 local privilege escalation (LPE) exploits that could allow an unprivileged local user to gain root access.
We used this evidence to prioritize vulnerabilities for reporting and developed candidate patches for maintainer review. Following guidance from the Linux kernel community, we began with critical vulnerabilities and are working with Patch the Planet partners on further reports and patches.
In June, as part of our Patch the Planet initiative, we shared that GPT‑5.5 Cyber had identified Linux kernel vulnerabilities and developed 24 local privilege escalation exploits to validate and report them. We expanded that work into a pipeline, powered by an upcoming cyber model, covering vulnerability discovery, dynamic validation, exploitability assessment, and patch generation. When it finished, human researchers reviewed the outputs and reported found vulnerabilities alongside patches.