Datenverkehr
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
Beep@feddit.online to Technology@lemmy.worldEnglish · 10 hours ago

A Microsoft researcher and an intern used AI to find 59 security bugs in the Linux kernel. One had gone unnoticed for at least 21 years

www.microsoft.com

external-link
message-square
14
link
fedilink
46
external-link

A Microsoft researcher and an intern used AI to find 59 security bugs in the Linux kernel. One had gone unnoticed for at least 21 years

www.microsoft.com

Beep@feddit.online to Technology@lemmy.worldEnglish · 10 hours ago
message-square
14
link
fedilink
Lessons from 59 Linux Kernel Bug Reports | Microsoft Security Blog
www.microsoft.com
external-link
Microsoft FORGE Lab researchers used codename MDASH to investigate Linux kernel vulnerabilities, resulting in 59 upstream bug reports, 33 assigned CVEs, and 38 merged fixes. The research includes eight demonstrated local root privilege-escalation exploits and examines the challenges of turning AI-generated findings into validated vulnerabilities and upstream fixes.

cross-posted from: https://feddit.online/c/[email protected]/p/2110066/a-microsoft-researcher-and-an-intern-used-ai-to-find-59-security-bugs-in-the-linux-kern

alert-triangle
You must log in or register to comment.
  • m3t00🌎@piefed.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    20 minutes ago

    thanks, have your ai contact linux’s ai and i’ll go on a long fishing trip.

    they’re always shoveling FUD. 365

    image

    • m3t00🌎@piefed.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      18 minutes ago

      image

  • Catoklysm@thelemmy.club
    link
    fedilink
    English
    arrow-up
    1
    ·
    28 minutes ago

    and adding several hundred new ones on windows by vibe coding

  • phutatorius@lemmy.zip
    link
    fedilink
    English
    arrow-up
    7
    ·
    2 hours ago

    And how many of those are exploitable in real-world situations? Raw counts of bugs aren’t all that meaningful.

  • fox2263@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    1 hour ago

    Is that two people or one people

  • nyan@lemmy.cafe
    link
    fedilink
    English
    arrow-up
    52
    arrow-down
    1
    ·
    7 hours ago

    I double-dog-dare them to open the Windows codebase to outside inspection and see how many bugs that turns up.

    • IllNess@infosec.pub
      link
      fedilink
      English
      arrow-up
      2
      ·
      3 hours ago

      I believe they have to do that to be used for government work.

      • db2@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        ·
        2 hours ago

        “My back door is only for you baby” - Microsoft probably

  • Quazatron@lemmy.world
    link
    fedilink
    English
    arrow-up
    11
    ·
    6 hours ago

    Thank you for making my system more secure, Mr. Microsoft researcher. I’ll apt upgrade right away.

  • takeda@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    48
    ·
    9 hours ago

    Is this why their services are not working now?

    • ch00f@lemmy.world
      link
      fedilink
      English
      arrow-up
      22
      ·
      7 hours ago

      They accidentally fixed the wrong operating system.

    • SpicyLizards@reddthat.com
      link
      fedilink
      English
      arrow-up
      5
      ·
      7 hours ago

      Well, they are prioritising stability of something

    • mcSlibinas@lemmy.world
      link
      fedilink
      English
      arrow-up
      17
      ·
      9 hours ago

      Windows - looks inside - 23 years old linux bug

    • aim4harmony@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      8 hours ago

      deleted by creator

  • SpicyLizards@reddthat.com
    link
    fedilink
    English
    arrow-up
    7
    ·
    7 hours ago

    Either copilot got it right or not. MS has its rep and the timing is funny.

Technology@lemmy.world

technology@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


  • @[email protected]
  • @[email protected]
  • @[email protected]
  • @[email protected]
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 4.51K users / day
  • 8.38K users / week
  • 15.4K users / month
  • 15.5K users / 6 months
  • 1 local subscriber
  • 89.7K subscribers
  • 1.27K Posts
  • 29.8K Comments
  • Modlog
  • mods:
  • L3s@lemmy.world
  • enu@lemmy.world
  • Technopagan@lemmy.world
  • L4sBot@lemmy.worldB
  • BE: 0.19.20
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org