Source: https://github.com/gregkh/kernel-development/blob/master/graphs%2Fpatches_per_release%2Fcves_fixed_per_release.png

AI coding tools are pretty good at finding bugs and make it easier and faster to fix them.

Importantly, security vulnerabilities in new releases seem to stay roughly the same and the change to which bugs count as CVEs was around version 6.8 already.

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 2 weeks ago (1 child)

Some people think its bad that so many CVEs are fixed. Because they think without Ai we wouldn't have so many CVEs in the first place... go figure (not my opinion, but I saw such type of comments).

  • source
  • hideshow 1 child comment
  • [–] 2 points 2 weeks ago

    It's natural to think that way if you don't think the implications through - like the infamous WWII plane showing holes in the fusilage and the implications on which parts of the aircraft needed reinforcement. :)

  • source
  • parent