OpenAI says its agents exploited and patched 948 Linux kernel flaws for $1.2M
The mid-October run reproduced 1,724 kernel vulnerabilities and yielded 291 information leak proofs of concept alongside the 948 privilege escalation exploits.
By Ryan Merket · Published
Primary source: OpenAI
Why it matters
OpenAI has put a price on autonomous exploit development: $1,279 per distinct Linux kernel privilege escalation flaw in its own accounting, against historical bounty rates it values at $18.9M to $66.3M for the same set. If defenders can run this kind of scan before release, the backlog of unexamined kernel code becomes a cost decision rather than a staffing limit. The same capability in an attacker's hands compresses the time between a kernel commit and a working root exploit, making human review and maintainer-controlled patching important safeguards.
OpenAI said on November 4th that its security researchers built an autonomous pipeline that validated and generated patches for 948 distinct local privilege escalation vulnerabilities in the Linux kernel in a single run, at a total cost of $1,213,430 in API credits. OpenAI (@OpenAI) announced the result in a thread on X, and detailed the work in its report, titled "A thousand fewer paths to root."…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.