Automated AI-assisted vulnerability scanning is discovering real flaws in the Linux kernel's 40 million lines of code, driving CVE counts to record levels as of September 2026. Maintainers report being overwhelmed by the volume of findings, though commentators note the spike reflects improved detection, not declining code quality.
No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.
AI-assisted bug hunting is driving Linux toward 2,000 CVEs per release, surfacing real flaws and mountains of low-priority work for overwhelmed maintainers.
"Linux kernel nears record 2,000 vulnerabilities per release as AI bug hunters scour 40 million lines of code — maintainers say they are 'completely overwhelmed' by CVE finds" "AI-assisted bug hunting is driving Linux toward 2,000 CVEs per release, surfacing real flaws and mountains of low-priority work for overwhelmed maintainers." https://www. tomshardware.com/software/linu x/linux-kernel-nears-
# LinuxKernel nears record 2,000 # vulnerabilities per release as AI bug hunters scour 40 million lines of code — maintainers say they are 'completely overwhelmed' by # CVE finds # Linux stable maintainer Greg Kroah-Hartman revealed the trend in a slide teasing an upcoming presentation at Kernel Recipes 2026, showing CVE counts jumping above 1,000 with Linux 7.0 and exceeding 1,500 with Linux 7.2.
🐧 SIGINT // Linux Watch — 2026-09-02 CVE counts aren't rising because Linux got worse, they're rising because LLMs are now grep-ing 40 million lines of code and triage still requires humans. Congrats, maintainers, you've been automated into a bigger queue. 🔗 https://www. tomshardware.com/software/linu x/linux-kernel-nears-2-000-cves-per-release-as-ai-bug-hunters-scour-40-million-lines-of-code-ma