GoKawiilMicrosoft's AI tool finds 59 Linux kernel bugs, but maintainers can't keep pace with review backlog
Microsoft's FORGE Lab used an AI scanning system called MDASH to uncover 59 upstream Linux kernel bug reports, including one defect at least 21 years old. Separately, Microsoft's latest Windows Patch Tuesday disclosed 726 CVEs, with AI-assisted code analysis driving a sharp rise in bug reports across both platforms. Linux kernel maintainer Lorenzo Stoakes announced on November 10 that he is stepping back from code review duties, citing the unsustainable volume of AI-generated patch submissions.
GoKawiil's interpretation of the reporting above, not reported fact.
The surge in AI-discovered bugs highlights a growing mismatch between automated detection capacity and the limited human bandwidth needed to verify and fix flaws, which could slow security patching across widely used systems. Stoakes' resignation from review work suggests volunteer-driven open-source maintenance models may be strained by AI-generated contributions, a concern that could prompt calls for more reviewers or new vetting processes. If left unaddressed, this bottleneck could delay critical fixes even as more vulnerabilities are identified.
- Microsoft's MDASH AI tool found 59 Linux kernel bugs, including a 21-year-old flaw.
- Windows' latest Patch Tuesday included 726 CVEs, reflecting a broader AI-driven surge in bug reports.
- Linux maintainer Lorenzo Stoakes stopped general code reviews, citing unsustainable AI-generated submission volume.
Source: zdnet.com — Steven Vaughan-Nichols, 2026-11-14
Published there as: “‘We need more reviewers’: Finding Linux bugs is easy now – fixing them is another story”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.