[Discuss] With AI, 2,000 Vulnerabilities per Linux kernel release

[Randall Rose]

Linux kernel developer Greg Kroah-Hartman says that the number of known vulnerabilities has risen to nearly 2,000 for each new kernel release thanks to AI.
https://www.linux-magazine.com/Online/News/2-000-Vulnerabilities-per-Linux-Release

The story mentions that some of these vulnerabilities may be dealt with by dropping support for drivers for relatively old hardware, but still, that's a lot of vulnerabilities to handle.

Thanks to those who discussed a similar thread back in the spring about AI-detected vulnerabilities in open source: Alex Brennen, Dan Ritter, Kent Borg, markw, Rich Pieri, Steve Litt.

On Fri, Apr 17, 2026, at 6:25 PM, Rich Pieri wrote:
> On Thu, 16 Apr 2026 15:59:15 +0000
> "V. Alex Brennen" <vab at cryptnet.net> wrote:
>
>> Basically, it is all priced by tokens (which are about 75% of a word
>> for English text and a little less clear for say C Code). So, I just
>> ran `wc` a few different ways to try and estimate. For the stuff I
>> look at that was mostly crypto related code and robotics code it
>> seems to work out to around $350USD to $500USD mostly depending on
>> the size of the repo.
>
> Which is approximately one billion percent more than most open source
> projects have to spend. You need to be a well-funded organization --
> such as Google, Black Duck, Red Hat or JFrog -- to afford to do this
> kind of scanning on any kind of routine basis.
>
> -- 
> \m/ (--) \m/
> _______________________________________________
> Discuss mailing list
> Discuss at lists.blu.org
> https://lists.blu.org/mailman/listinfo/discuss