OpenAI pipeline found 948 Linux kernel privilege-escalation flaws
First merged summary.
OpenAI says an unreleased AI pipeline found 948 unique Linux kernel local privilege-escalation flaws in one scan costing about $1.2 million.
OpenAI says an autonomous pipeline using an unreleased cyber model scanned the Linux kernel and produced exploits for 948 unique local privilege-escalation flaws, costing about $1.2 million. SecurityWeek reports 2,308 candidates, 1,724 confirmed bugs, 1,169 working LPE exploits and 291 information-leak proofs of concept, tested on VMs with KASLR, SMEP and SMAP. Both outlets say the run exceeded a prior GPT experiment by more than five times and used at least 10 novel techniques. Patches went to maintainers after human review, CSO Online says, and full details stay private. Already-fixed counts conflict: SecurityWeek says over 100 were patched during the scan; CSO Online says 61 were patched upstream.
- Exact API cost was $1,213,430, about $1,279 per unique exploit.
- CSO Online places the experiment in October; SecurityWeek names prior model GPT-5.6 Sol.
- OpenAI is raising Security Bug Bounty payouts, SecurityWeek reports.
- Hundreds of reports and patches were submitted to kernel maintainers.
- Agents focused on low-privileged reachable areas of the kernel.
What each outlet adds
beyond the shared facts- SecurityWeekFunnel counts, exact spend, VM protections, bounty increase, and GPT-5.6 Sol.
- CSO OnlineOctober timing, human review, 61 upstream fixes, and hundreds of submissions.
- Vendors
- OpenAI
- Products
- Linux kernel
- Organizations
- Linux kernel maintainersSecurity BrigadeIDCSUSE
- AI models
- GPT-5.6 Sol
Coverage
oldest first · one row per article · UTC- · 8d ago
SecurityWeekFirst report
OpenAI AI Agents Find 948 Linux Kernel Exploits
OpenAI's unreleased cyber model agents found 948 unique Linux kernel LPE exploits in a single run at $1.2 million in API costs.
- · 8d ago
CSO Online
OpenAI AI pipeline finds exploits and patches Linux kernel flaws
OpenAI's pipeline identified 948 Linux local privilege-escalation vulnerabilities at $1.2 million API cost through automated discovery, exploitation and patching.