Skip to content
NewA calmer, faster ZeroHour
StoryAI researchhigh

OpenAI pipeline finds 948 Linux kernel privilege escalations

6 sources · 6 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

OpenAI’s unreleased cyber-model pipeline produced 948 Linux kernel local privilege-escalation exploits in one run costing about $1.2 million.

OpenAI said an autonomous pipeline using an upcoming cyber model scanned the Linux kernel, reproduced bugs, and generated exploits and patches for maintainer review. Reports agree on 2,308 candidates, 1,724 reproduced bugs, 1,169 working local privilege-escalation proofs of concept grouped into 948 vulnerabilities, and 291 information-leak proofs of concept, at a cost of $1,213,430. The Hacker News and Cyber Security News describe a 30-hour run, while Help Net Security and GBHackers describe about 10 days. Cyber Security News says all 948 were patched; Help Net Security and CSO Online report 61 patched upstream, and SecurityWeek reports more than 100 patched during the scan. Agents used at least 10 novel techniques; SecurityWeek says testing ran on virtual machines with KASLR, SMEP and SMAP, and full details were withheld.

Key facts
  • Run cost $1,213,430, about $1,279 per exploit.
  • 2,308 candidates were narrowed to 1,724 reproducible bugs.
  • 1,169 LPE proofs of concept mapped to 948 vulnerabilities.
  • Agents also generated 291 information-leak proofs of concept.
  • At least 10 novel exploitation techniques were identified.
  • Upstream fixes reported as 61 or more than 100, not 948.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

What each outlet adds

beyond the shared facts
  • Help Net SecurityPlaces the run in mid-October on the latest kernel and stock desktop OS.
  • SecurityWeekCites VM protections, more than 100 patches during the scan, and rising bounties.
  • The Hacker NewsLinks results to 24 June 2026 exploits and a prior GPT-5.5-Cyber run.
  • Cyber Security NewsClaims 948 were patched and cites a $18.9 million to $66.3 million bounty range.
  • GBHackersReports 5,034 audit targets and a five-stage pipeline.
Vendors
OpenAI
Products
Linux kernel
Organizations
Patch the PlanetLinux maintainersLinux kernel maintainersSecurity BrigadeIDCSUSE
AI models
cyber modelGPT-5.5-CyberGPT-5.6 Solfrontier model

Coverage

oldest first · one row per article · UTC
  1. · 6d ago Cyber Security NewsFirst report

    OpenAI AI uncovers 948 Linux kernel privilege escalation vulnerabilities

    AI agents validated 948 Linux kernel flaws in 30 hours, with patches starting within 10 days and bounties valued at $18.9M-$66.3M.

  2. · 6d ago The Hacker News

    OpenAI Pipeline Generates 948 Linux Root Escalation Exploits

    OpenAI's AI pipeline discovered and patched 948 Linux local privilege escalation exploits in 30 hours at $1.2 million cost, using an upcoming cyber model.

  3. · 6d ago GBHackers

    OpenAI Cyber AI Model Finds 948 Linux Privilege Escalation Vulnerabilities

    OpenAI's autonomous pipeline discovered, validated, and patched 948 local privilege escalation vulnerabilities in Linux kernel for $1.2M.

  4. · 6d ago Help Net Security

    OpenAI AI model generates 948 Linux kernel root exploits in single run

    OpenAI's frontier model produced 948 local privilege escalation exploits from Linux kernel bugs at a cost of $1,213,430.

  5. · 6d ago SecurityWeek

    OpenAI AI Agents Find 948 Linux Kernel Exploits

    OpenAI's unreleased cyber model agents found 948 unique Linux kernel LPE exploits in a single run at $1.2 million in API costs.

  6. · 6d ago CSO Online

    OpenAI AI pipeline finds exploits and patches Linux kernel flaws

    OpenAI's pipeline identified 948 Linux local privilege-escalation vulnerabilities at $1.2 million API cost through automated discovery, exploitation and patching.