logoalt Hacker News

wongarsu • today at 12:09 PM • 2 replies • view on HN

Doesn't the Linux kernel encourage reporting on the public mailing list for kernel vulnerabilities that were found using AI? If I remember correctly they introduced that policy after the security mailing list got swamped with multiple reports for the same vulnerabilities


Replies

smashed • today at 12:45 PM

On first glance it seems you are right.

> If you resorted to AI assistance to identify a bug, you must treat it as public. https://github.com/torvalds/linux/blob/master/Documentation/...

➕ show 2 replies
rwmj • today at 1:09 PM

As it should. If an LLM discovered them you should assume that another LLM, or another person running the same LLM, could find them. They are effectively public already.

➕ show 1 reply