GoKawiilLinux kernel CVE counts nearing 2,000 per release, Kroah-Hartman says
Greg Kroah-Hartman previewed data for his Kernel Recipes 2026 talk in Paris showing that AI and LLM tools scanning the Linux kernel codebase have driven a sharp rise in reported vulnerabilities. Releases that once averaged around 500 fixed CVEs are now approaching 2,000, with Linux 7.3 potentially crossing that mark.
GoKawiil's interpretation of the reporting above, not reported fact.
The jump reflects automated tools finding far more issues than human reviewers previously caught, mostly in obscure or rarely used driver code with limited real-world risk. Still, the surge raises questions about how maintainers triage, prioritize, and communicate vulnerability severity as CVE volume scales beyond traditional manual review capacity.
- Kernel CVEs per release are nearing 2,000, up from a historical average of about 500
- AI/LLM-based code analysis is the main driver behind the spike in reported flaws
- Most new CVEs are low-priority issues in old or obscure driver code, limiting actual impact
Linux Kernel Development" by Robert Love — If kernel CVE counts and release cycles fascinate you, Robert Love's classic is the friendliest way into how the kernel actually works, from scheduling to memory management to driver code. It's the sort of book that turns headlines about patch floods into something you can actually reason about.
See Linux Kernel Development" by Robert Love on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: linux.slashdot.org — Posted, 2026-08-29
Published there as: “The Linux Kernel Is Approaching 2,000 CVEs Per Release”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.