do we have one for regressions ? because that seems to be exploding for every other project.
post
For anyone curious about the number of bugs introduced in each kernel release, LWN.net has a plot of Bugs fixed and introduced in each kernel release.
However, it has the obvious limitation that recent releases will appear to have fewer commits introducing bugs, simply because kernel developers haven't had as much time to find and fix the bugs introduced in those releases. So it'll be a while before we can actually see the consequences (positive or negative) of more widespread LLM usage by kernel developers
As somebody who is quite critical of AI, I will say, it is a fantastic tool for finding bugs early. I advise getting all your changes reviewed by a decent LLM before you push them. It often finds edge cases I forgot in my testing
That's a pretty big limitation! They shouldnt have bothered plotting that, it's basically just a plot of time.
It will be fascinating when the data is available, to see a graph showing the number of security vulnerabilities added to the kernel with each commit, obviously they'll have to be found and patched before that can be determined.
I haven't even looked at this yet but someone posted https://lwn.net/Articles/914632/ elsewhere in the thread, so sending it to you. As noted, less time to find in recent versions.
ai, protecting people from ai.
yes, you need to find the vulnerabilities before the hackers and it just so happens that LLMs aren't terrible at it.
Some people think its bad that so many CVEs are fixed. Because they think without Ai we wouldn't have so many CVEs in the first place... go figure (not my opinion, but I saw such type of comments).
AI coding tools are pretty good at
findingwriting bugs and make it easier and faster tofixwrite them.
If you checked the commits you would see that some of the bugs in Linux being found with AI tooling have been present for many years.
I encourage everyone to go have a read for themselves.
Linux hasn’t become some slop treadmill like you’re implying.
Been away for almost a year and came back to many here thinking they're smarter than Torvalds. It's stunning. Goes with what I've been saying about broad DC hate, it's going to cause friendly fire.
Such a lemmy moment, unable to admit AI is capable of anything that might be considered useful.
Yes AI is good at writing bugs, it's also good at finding exploits.
Some of it is due to AI but much of it is people finally paying attention to security. For a long time no one thought about security vulnerabilities. These days many bugs in Linux are considered a security issue and thus gets there own CVE
This was never an issue before, so it just appears as tho it's adding bugs to be fixed later. Unless all these updates are strategically going somewhere.
Many of the bugs have been present for years. This is about finding bugs that humans didn't, then humans fixing the bugs.
These were not a problem, because no one found them, but they were still there. Now they are being found, if not by the folks patching them, then by those looking to exploit them. There is no way to navigate this than to patch whatever is found.
all 31 comments