r/technology • u/ControlCAD • 15h ago

Security Linux kernel nears record 2,000 vulnerabilities per release as AI bug hunters scour 40 million lines of code — maintainers say they are "completely overwhelmed" by CVE finds

https://www.tomshardware.com/software/linux/linux-kernel-nears-2-000-cves-per-release-as-ai-bug-hunters-scour-40-million-lines-of-code-maintainers-say-they-are-completely-overwhelmed
1.7k Upvotes

96% Upvoted

275 comments sorted by

View all comments

Show parent comments

16

u/Pawtuckaway 15h ago

Or LLMs hallucinated a bunch of CVEs that don't exist. My work heavily uses LLMs for many things and every PR has about 10 comments from an LLM reviewer. 90% of those comments are irrelevant or just flat out wrong.

-7

u/SweatyAd8914 12h ago edited 12h ago

If you’re not using Claude, your team is irrelevant and false positives are to be expected. I work F100 with strict compliance standards and 80% of flagged CVEs are legit. Sounds like a skill issue.

I’ll also reiterate, you’re correct on small nits, but big issues flat out wrong. I additionally could care less what the other morons here think.

0

u/Pawtuckaway 6h ago

You could care less? I guess you must care a little then.

-4

u/red75prime 14h ago

Just use more AI

The team has also increasingly had to fight AI with AI. It has now secured access to multiple frontier models to help review patches and filter out hallucinated results, and is considering pushing more routine administrative work onto LLMs in subsequent development cycles.