Minecloud Lemmy
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
Beep@feddit.online to Technology@lemmy.worldEnglish · 1 day ago

A Microsoft researcher and an intern used AI to find 59 security bugs in the Linux kernel. One had gone unnoticed for at least 21 years

www.microsoft.com

external-link
message-square
15
link
fedilink
67
external-link

A Microsoft researcher and an intern used AI to find 59 security bugs in the Linux kernel. One had gone unnoticed for at least 21 years

www.microsoft.com

Beep@feddit.online to Technology@lemmy.worldEnglish · 1 day ago
message-square
15
link
fedilink
Lessons from 59 Linux Kernel Bug Reports | Microsoft Security Blog
www.microsoft.com
external-link
Microsoft FORGE Lab researchers used codename MDASH to investigate Linux kernel vulnerabilities, resulting in 59 upstream bug reports, 33 assigned CVEs, and 38 merged fixes. The research includes eight demonstrated local root privilege-escalation exploits and examines the challenges of turning AI-generated findings into validated vulnerabilities and upstream fixes.

cross-posted from: https://feddit.online/c/tech@feddit.online/p/2110066/a-microsoft-researcher-and-an-intern-used-ai-to-find-59-security-bugs-in-the-linux-kern

alert-triangle
You must log in or # to comment.
  • Armand1@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    10 hours ago

    Is a bug a bug if it never occurs?

  • phutatorius@lemmy.zip
    link
    fedilink
    English
    arrow-up
    27
    ·
    16 hours ago

    And how many of those are exploitable in real-world situations? Raw counts of bugs aren’t all that meaningful.

  • nyan@lemmy.cafe
    link
    fedilink
    English
    arrow-up
    72
    arrow-down
    1
    ·
    21 hours ago

    I double-dog-dare them to open the Windows codebase to outside inspection and see how many bugs that turns up.

    • IllNess@infosec.pub
      link
      fedilink
      English
      arrow-up
      4
      ·
      17 hours ago

      I believe they have to do that to be used for government work.

      • db2@lemmy.world
        link
        fedilink
        English
        arrow-up
        11
        ·
        17 hours ago

        “My back door is only for you baby” - Microsoft probably

  • takeda@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    61
    ·
    24 hours ago

    Is this why their services are not working now?

    • ch00f@lemmy.world
      link
      fedilink
      English
      arrow-up
      35
      ·
      22 hours ago

      They accidentally fixed the wrong operating system.

    • mcSlibinas@lemmy.world
      link
      fedilink
      English
      arrow-up
      18
      ·
      24 hours ago

      Windows - looks inside - 23 years old linux bug

    • SpicyLizards@reddthat.com
      link
      fedilink
      English
      arrow-up
      5
      ·
      21 hours ago

      Well, they are prioritising stability of something

    • aim4harmony@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      23 hours ago

      deleted by creator

  • m3t00🌎@piefed.world
    link
    fedilink
    English
    arrow-up
    4
    ·
    15 hours ago

    thanks, have your ai contact linux’s ai and i’ll go on a long fishing trip.

    they’re always shoveling FUD. 365

    image

    • m3t00🌎@piefed.world
      link
      fedilink
      English
      arrow-up
      9
      ·
      15 hours ago

      image

  • Catoklysm@thelemmy.club
    link
    fedilink
    English
    arrow-up
    3
    ·
    15 hours ago

    and adding several hundred new ones on windows by vibe coding

  • Quazatron@lemmy.world
    link
    fedilink
    English
    arrow-up
    13
    ·
    21 hours ago

    Thank you for making my system more secure, Mr. Microsoft researcher. I’ll apt upgrade right away.

  • SpicyLizards@reddthat.com
    link
    fedilink
    English
    arrow-up
    12
    ·
    21 hours ago

    Either copilot got it right or not. MS has its rep and the timing is funny.

  • fox2263@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    15 hours ago

    Is that two people or one people

Technology@lemmy.world

technology@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@lemmy.world

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


  • @L4s@lemmy.world
  • @autotldr@lemmings.world
  • @PipedLinkBot@feddit.rocks
  • @wikibot@lemmy.world
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 4.5K users / day
  • 8.8K users / week
  • 15.6K users / month
  • 30.1K users / 6 months
  • 1 local subscriber
  • 89.8K subscribers
  • 23.1K Posts
  • 986K Comments
  • Modlog
  • mods:
  • L3s@lemmy.world
  • enu@lemmy.world
  • Technopagan@lemmy.world
  • L4sBot@lemmy.worldB
  • L3s@hackingne.ws
  • BE: 0.19.18
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org