OpenAI Model Finds 948 Linux Vulnerabilities for $1.2 Million
An unreleased OpenAI model uncovered 948 unique Linux kernel vulnerabilities and built working root exploits, at a total cost of about $1.2 million.
SUMO· the number puzzle
Dialo· learn languages by speaking
ediviewer· read EDI files like documents
giftdetect· the right gift in minutesOpenAI says an AI model that has not yet been officially released discovered 948 unique security vulnerabilities in the Linux kernel and helped develop exploits that grant root access. The total cost of the experiment exceeded $1.2 million.
The Linux kernel underpins billions of devices worldwide, including Android phones, servers and supercomputers. According to the company, the model scanned and analyzed the code, identified more than 5,000 security targets, and confirmed 1,724 potential flaws. It then produced 1,169 successful exploits tied to 948 distinct vulnerabilities.
Cost and potential value
The main run cost about $1,213,430. OpenAI estimated that the hypothetical bounty value of the discovered flaws, based on typical vulnerability reward programs, falls between $18.9 million and $66.3 million.
The company also ran a second, much cheaper experiment costing $32,936. It produced 21 exploits targeting privilege escalation vulnerabilities.
Reporting and human oversight
OpenAI says it has sent hundreds of reports and fixes to the groups responsible for Linux development, as part of an initiative called Patch the Planet. Security researchers reviewed the findings to confirm their accuracy.
The results point to how quickly AI capabilities in cybersecurity are advancing: models can now find new vulnerabilities, test whether they can be exploited and help fix them. The company stresses that human oversight remains essential to ensure the results are correct.
Apps worth a look
SUMO: the number puzzleTap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.
Dialo: learn languages by speakingTalk to an AI conversation partner; every sentence comes back corrected and explained in your language. 9 languages, A1 to C2.
ediviewer: read EDI files like documentsOpen EDIFACT and X12 messages, see every segment explained, convert to JSON/XML, export PDF and Excel. Runs locally, no upload.
giftdetect: the right gift in minutesPick who it is for, the occasion and their personality. The search engine reads product descriptions from local shops and ranks what fits. Free, no sign-up.
More from this day
See all →
GOG GALAXY Is Coming Natively to Linux After 18 Years
Claude Code accused of leaking users' email addresses to websites
Alta Ares wins six NATO counter-drone lots in first big deal
NCBR Sets Aside PLN 25 Million for International AI R&D Projects
More in: Security
See all →
LINE Adds Passkey Login to Simplify Switching Phones
Japan's National Cyber Office Urges Firms to Fix Basic Security Gaps
Flock Safety loses ground as 10+ US localities drop its cameras
