139
Chart of Linux security vulnerabilities fixed per kernel version (media.piefed.social)
submitted 1 week ago by to c/linux@programming.dev
32 comments fedilink hide all child comments
 

Source: https://github.com/gregkh/kernel-development/blob/master/graphs%2Fpatches_per_release%2Fcves_fixed_per_release.png

AI coding tools are pretty good at finding bugs and make it easier and faster to fix them.

Importantly, security vulnerabilities in new releases seem to stay roughly the same and the change to which bugs count as CVEs was around version 6.8 already.

you are viewing a single comment's thread
view the rest of the comments
[–] 37 points 1 week ago* (2 children)

For anyone curious about the number of bugs introduced in each kernel release, LWN.net has a plot of Bugs fixed and introduced in each kernel release.

However, it has the obvious limitation that recent releases will appear to have fewer commits introducing bugs, simply because kernel developers haven't had as much time to find and fix the bugs introduced in those releases. So it'll be a while before we can actually see the consequences (positive or negative) of more widespread LLM usage by kernel developers

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 20 points 1 week ago

    As somebody who is quite critical of AI, I will say, it is a fantastic tool for finding bugs early. I advise getting all your changes reviewed by a decent LLM before you push them. It often finds edge cases I forgot in my testing

  • permalink
  • fedilink
  • source
  • parent