OpenAI Cyber Model Uncovers 948 Linux Kernel Privilege Escalation Vulnerabilities

What happened?

OpenAI says an automated research pipeline found and proved 948 separate Linux kernel privilege escalation flaws in one run. These bugs could let a normal local user gain root access. The run took place in mid-October 2026 and used an upcoming cyber model, as OpenAI explains in its research write-up. The system first scanned the kernel for the parts a low-privileged user can reach. These “Scout” agents picked 5,034 audit targets, about 2.8 million lines of code or roughly 7% of the kernel. “Analyst” agents then produced 2,308 candidate findings in 12 hours.

Key details

• OpenAI's automated pipeline discovered and proved 948 Linux kernel privilege escalation vulnerabilities in a single run.
• The research run occurred in mid-October 2026 using an upcoming cyber model with Scout and Analyst agents.
• Scout agents identified 5,034 audit targets covering 2.8 million lines of kernel code accessible to low-privileged users.
• Exploit agents produced 291 information leak proofs and 1,169 working privilege escalation exploits against hardened kernels.
• The pipeline used at least 10 novel exploitation techniques unknown to outside kernel experts.
• OpenAI warns that unprivileged accounts on unpatched systems should be treated as root access for well-funded attackers.

Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.