logoalt Hacker News

krona • today at 1:59 PM • 2 replies • view on HN

Just go ask some actual kernel maintainers who are being spammed by frontier models daily.

> These are relatively simple statistics.

According to Greg KH 50% of the vulns are flat out wrong, or the patches don't fix the problem, or the scenario is impossible in the real world, or just isn't a security issue.


Replies

cogman10 • today at 3:32 PM

The kernel has also been removing a bunch of old unmaintained drivers due to these reports.

I have to wonder how many of these 1000 paths are simply dead drivers with security vulnerabilities [1]. Impossible to exploit because nobody uses it, but easy enough to juice up the numbers of "found" vulnerabilities.

[1] https://lwn.net/Articles/1068928/

spacebanana7 • today at 2:18 PM

To be fair that sounds like similar false positive rate to human bug reports, if not better. Although the agentic scale of these reports must consume huge amounts of time.