139
Chart of Linux security vulnerabilities fixed per kernel version (media.piefed.social)
submitted 2 weeks ago by to c/linux@programming.dev
30 comments fedilink hide all child comments
 

Source: https://github.com/gregkh/kernel-development/blob/master/graphs%2Fpatches_per_release%2Fcves_fixed_per_release.png

AI coding tools are pretty good at finding bugs and make it easier and faster to fix them.

Importantly, security vulnerabilities in new releases seem to stay roughly the same and the change to which bugs count as CVEs was around version 6.8 already.

you are viewing a single comment's thread
view the rest of the comments
[–] 8 points 2 weeks ago (1 child)

yes, you need to find the vulnerabilities before the hackers and it just so happens that LLMs aren't terrible at it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 2 weeks ago

    I think dusk means it would also be difficult for hackers to find these bugs without AI, which probably is true (given how long some of them seem to have existed). Hard to say how it balances out in the end though.

  • permalink
  • fedilink
  • source
  • parent