OpenAI says its AI pipeline found 948 Linux kernel privilege escalation flaws

OpenAI says it used an automated AI pipeline to analyze the Linux kernel and found 948 distinct privilege escalation vulnerabilities. The company said the pipeline covered vulnerability discovery, dynamic validation, exploitability assessment, patch generation, and human review.

What the pipeline found

In a mid-October 2026 research run, OpenAI’s AI-powered pipeline discovered 2,308 candidate Linux kernel vulnerabilities, 1,724 of which were successfully reproduced. The system developed 1,169 working local privilege escalation exploits and 291 proof-of-concept demonstrations for information disclosure vulnerabilities. After eliminating duplicates and false positives, researchers arrived at 948 distinct escalation flaws.

The whole run took about 30 hours and cost $1,213,430 in API credits, or about $1,279 per local privilege escalation exploit on average, according to How-To Geek. TechRadar reported the cost as roughly $1.21 million in API credits.

What OpenAI did with the findings

OpenAI said its researchers reviewed all of the generated exploits and patches before reaching out to Linux kernel maintainers. The company said it has started to report critical vulnerabilities and is collaborating with members of the Linux kernel community and Patch the Planet partners on further disclosures and fixes. OpenAI said not all 948 vulnerabilities have been patched or rolled into Linux releases.

OpenAI said Linux maintainers already patched 61 of the identified privilege elevation flaws by the time it completed its analysis, while another 43 had staging patches. Just under 300, roughly a third, were being reported and discussed publicly.

The team also examined 166 exploitation techniques and found 10 that were previously undocumented. They include kernel memory manipulation, page grooming, and privilege escalation through data-only attacks. OpenAI decided not to share the details on these flaws until they are fixed.

Why it matters

OpenAI said the Linux kernel underpins Android devices, cloud infrastructure, supercomputers, and other systems used by billions of people. The company said it chose Linux to study how effectively frontier models could find vulnerabilities in a codebase of this scale and importance. OpenAI also tested its system against the hardened kernelCTF environment from Google, generating 25 information disclosure proof of concepts and 21 local privilege escalation exploits in 112 hours at a cost of about $32,936 in API credits. OpenAI estimates those findings could represent around $1.5 million in potential bug bounty payouts.

---

Sources

• techradar.com: OpenAI says its cyber model found and patched nearly 1000 Linux kernel security issues | TechRadar
• howtogeek.com: OpenAI used AI to find nearly 1,000 ways for hackers to hijack Linux
• hothardware.com: OpenAI Just Found Nearly 1,000 Ways To Gain Root Access In Linux

This article was drafted with AI assistance and checked against the sources above. Company claims are reported as claims. Cover image is AI-generated.