OpenAI Finds 948 Local Privilege Escalation Bugs In The Linux Kernel

OpenAI published a blog post outlining their work on autonomous vulnerability discovery. To showcase their AI potential, they found 948 valid local privilege escalation vulnerabilities within the Linux kernel. OpenAI's prototype found 2,308 candidate vulnerabilities in the Linux kernel, dynamically reproduced 1,724 vulnerabilities, and ultimately found 948 local privilege escalation exploits for allowing unprivileged local users to gain root access. They also generated candidate patches for maintainer review. Discovering nearly one thousand local privilege escalation vulnerabilities consumed $1.2 million USD in API credits. OpenAI researchers noted in their blog post: "Within the next few years, we believe that if there are vulnerabilities in a given software project, frontier models will likely be able to discover them and even less capable models may be able to develop exploits once disclosed. In a world of no unknown vulnerabilities, it will be critical to build and maintain high assurance software, especially core software such as operating systems, browsers, image parsing libraries, the TCP/IP stack, and more. Investing in training models to write secure code by default, minimizing attack surface by removing unnecessary features, and formal verification are promising areas of future research to effectively scale software security, in addition to finding and fixing existing vulnerabilities." Another interesting takeaway is that their GPT-5.5 Cyber model is finding more than 5x more novel LPEs than their GPT-5.6 Sol model despite three months of hardening/patches in the Linux kernel between scans. Those wanting to go through this OpenAI showcase in more detail can do so via their blog post.