GoKawiilAI models like GLM-5.3 drive Linux kernel CVE count toward 2,000 per release
Chinese AI firm Z.ai's GLM-5.3 model helped find over 1,000 critical vulnerabilities in open-source projects including the Linux kernel, adding to a wave of AI-discovered bugs this year. Kernel maintainer Greg Kroah-Hartman showed data indicating CVEs fixed per kernel release have surged from about 500 to nearly 2,000 as AI code-review tools improve.
GoKawiil's interpretation of the reporting above, not reported fact.
With Linux powering most consumer and industrial devices, a spike in flagged vulnerabilities raises both alarm and hope: many issues are minor or tied to outdated drivers, but the sheer volume is straining maintainers' capacity to triage and patch. The trend has already forced cleanup of legacy code like the ISDN subsystem, showing AI scrutiny can push overdue housekeeping even as it stresses open-source security workflows.
- GLM-5.3 and other AI tools found over 1,000 kernel vulnerabilities this year.
- CVEs per Linux release have risen from ~500 to nearly 2,000.
- Maintainers like Torvalds warn the security mailing list is becoming unmanageable.
Linux Kernel Development by Robert Love — If a flood of AI-found kernel CVEs has you curious about what's actually under the hood, Robert Love's classic is the friendliest way in. It walks through process scheduling, memory management, and the kernel subsystems where these bugs live, so the CVE headlines start making real sense.
See Linux Kernel Development by Robert Love on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: techspot.com — Kishalaya Kundu, 2026-09-02
Published there as: “AI is finding thousands of bugs in Linux, and maintainers can barely keep up”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.