[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuxR4szsCHbj9NMlemnV7FRAxjpbgcmoF3_5-hyCY_pA":3},{"article":4,"iocs":55,"watch_terms":56,"solutions":57,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"dfca0e3b-efe6-4da4-b516-02fae58afcde","AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research","ai-agents-got-root-on-linux-via-948-kernel-flaws-in-openai-research-45e1c2","An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million. The post AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research appeared first on SecurityWeek.","An unreleased OpenAI AI model autonomously discovered and generated exploits for 948 distinct Linux kernel privilege escalation vulnerabilities in a single run, costing $1.2 million in API credits. The AI identified potential bugs, confirmed them, and tested exploits on virtual machines with common security protections enabled. OpenAI has submitted hundreds of reports and patches for these critical flaws, warning that unpatched systems should be considered compromised.","OpenAI's AI model discovered 948 Linux kernel flaws, costing $1.2M in API credits.","https:\u002F\u002Fwww.securityweek.com\u002Fai-agents-got-root-on-linux-via-948-kernel-flaws-in-openai-research\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F05\u002FLinux-vulnerability-malware.jpeg","2026-11-05T17:32:37+00:00","2026-11-05T18:00:20.119128+00:00",9,[17,20,23,26,28,30],{"name":18,"type":19},"OpenAI","vendor",{"name":21,"type":22},"Linux kernel","technology",{"name":24,"type":25},"GPT-5.6 Sol","product",{"name":27,"type":25},"Firecracker",{"name":29,"type":25},"gVisor",{"name":31,"type":19},"Google","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":32,"icon":34,"name":35,"slug":36},null,"Vulnerabilities","vulnerabilities",[38,40,45,50],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[31,18,24],{"controls":58,"vendors":141},[59,88,117],{"slug":60,"name":61,"problem":62,"products":63},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":89,"name":90,"problem":91,"products":92},"patch-management","Automated patch management","Known holes get closed in days, not months.",[93,101,109],{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":54,"name":118,"problem":119,"products":120},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[121,129,136],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","agentic-threat-intelligence-platform","Agentic Threat Intelligence Platform","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fagentic-threat-intelligence-platform\u002F","Threat intelligence platform, formerly ThreatConnect TI Ops, that collects, scores and structures intelligence and pushes it into security tools.",{"vendor_slug":130,"vendor_name":31,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":137,"product_name":138,"url":139,"description":140},"dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",[],{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":154},"ai-model-discovers-948-linux-kernel-privilege-escalation-flaws-in-one-run","AI Model Discovers 948 Linux Kernel Privilege Escalation Flaws in One Run","An unreleased OpenAI AI model autonomously identified and generated working exploits for 948 Linux kernel privilege escalation vulnerabilities in a single research session, costing $1.2 million in compute credits. This demonstrates that the velocity of vulnerability discovery is accelerating dramatically beyond traditional human-paced research, meaning the window between flaw existence and exploitation is shrinking rapidly. Organizations relying on slow, reactive patch cycles are now exposed to a threat landscape where hundreds of critical flaws can be weaponized at machine speed. OpenAI's warning that unpatched systems 'should be considered compromised' underscores the existential risk of deferred kernel patching. The incident signals a paradigm shift: vulnerability management programs must match AI-driven discovery rates or accept systemic compromise as a baseline.",[147,148,149,150,151,152,153],"CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","OWASP A06:2021 Vulnerable and Outdated Components","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","NIS2 Article 21(2)(b)","CIS Control 17: Incident Response Management",{"NIS2 Article 21(2)(b)":155,"NIST SP 800-53 SI-2: Flaw Remediation":156,"CIS Control 17: Incident Response Management":157,"OWASP A06:2021 Vulnerable and Outdated Components":158,"CIS Control 7: Continuous Vulnerability Management":159,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":160,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":161},"NIS2 requires essential and important entities to implement incident handling and vulnerability management practices; the mass disclosure of 948 critical kernel flaws creates an immediate legal obligation for in-scope organizations to assess exposure and remediate without delay.","SI-2 requires organizations to identify, report, and correct information system flaws on defined timelines; the scale and severity of these kernel privilege escalation bugs make a disciplined, time-bound remediation program mandatory rather than aspirational.","OpenAI's explicit warning that unpatched systems should be treated as compromised demands that organizations activate incident response procedures to triage affected hosts, as a vulnerability of this severity and breadth crosses the threshold from patch event to potential security incident.","The Linux kernel is a foundational component of virtually every Linux-based system, and running outdated, unpatched kernel versions directly maps to this risk category, which warns that component-level vulnerabilities can fully undermine application and system security.","With 948 kernel flaws now documented and exploit code validated, only continuous automated scanning and tracked remediation deadlines can ensure organizations close these vulnerabilities before attackers leverage the same AI-driven discovery techniques.","This control mandates timely identification and remediation of technical vulnerabilities in operating systems; the AI-discovered Linux kernel flaws represent exactly the class of technical vulnerability this control is designed to systematically address.","Privilege escalation exploits succeed by bypassing access control boundaries; enforcing least-privilege, mandatory access controls, and strict privilege separation at the OS level would limit the impact of a successful kernel exploit even before patches are applied."]