OpenAI 称其自主网络漏洞发现与修复流水线在即将推出的网络模型单次运行中，验证并生成 948 个 Linux 内核本地提权漏洞补丁，总 API 成本 121 万美元。Scout agents 把 4000 多万行内核代码筛到 280 万行待审，标记 2308 个疑似漏洞、验证 1724 个，人工审查后才提交 Linux 维护者；作者推算单个漏洞武器化成本约 $1,279。
原文梳理了漏斗各阶段数字和成本构成，读者可以据此评估 AI 驱动漏洞发现对 Linux 安全的实际影响。
OpenAI claims their new security model patched 948 Linux privilege escalation vulnerabilities.
Scout agents cut the kernel’s 40M-plus lines to 2.8M worth auditing.
i.e. AI agents picked the most security-relevant 7% of the Linux kernel (2.8M lines), flagged 2,308 suspected bugs, confirmed 1,724 in test machines, and built working root-takeover exploits and fixes for 948. Humans reviewed the results before sending them to Linux maintainers.
The whole run cost $1,213,430 in API credits, $775,929 of it on building exploits, though OpenAI ran its own model, so that’s likely not cash actually spent.
So all this means that finding and weaponizing a Linux kernel bug now costs about $1,279 with AI, so any unpatched Linux machine where an attacker gets even a basic user account should be treated as fully taken over.
Our security researchers built an autonomous cyber vulnerability discovery, exploitation, and patching pipeline. In a single run with an upcoming cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in the Linux kernel at a total API cost of $1.2 million.在 X 查看被引用的帖子
来源：Rohan Paul · x.com