GLM-5.3, the large language model from Chinese AI company Z.ai, recently helped uncover more than 1,000 critical vulnerabilities across major open-source projects, including the Linux kernel. That torrent of AI-detected bugs is now pushing the number of CVEs fixed per Linux kernel release to nearly 2,000, up from roughly 500 per release for several years running.
However, the vast majority of documented CVEs are either low-priority or affect obsolete drivers and long-deprecated features. The rise in AI-driven bug reports has had a silver lining for the kernel codebase too: earlier this year, maintainers cleared out a batch of old drivers, along with the entire ISDN subsystem, that had been harboring dozens of CVEs.
@QSIMedia

