OpenAI 前沿网络安全模型一周发现约 1000 个 Linux 本地提权漏洞

Greg Brockman· @gdb · X·2026-11-05 07:54· 1 小时前同事件AI 评分68

AI 导读

OpenAI 将大量前沿算力用于免费发现并修补开源代码库漏洞。其即将推出的前沿网络安全模型在一周内、约 $1M token 成本下，在 Linux 内核发现约 1000 个本地提权（LPE）漏洞，并发现至少 10 类新的 Linux 利用技术；作为对比，以前安全研究者通常每年在 Linux 中发现约 20 个 LPE 漏洞。Greg Brockman 转发该项目补充说明，称 Linux 内核是 OpenAI 尤为关键的软件。

同一件事，精选收录的是《OpenAI 用 cyber 模型自动化挖掘并修补 948 个 Linux 内核本地提权漏洞》

正文 · 原文

引用Eric Wallace@Eric_Wallace_

We are now allocating a significant amount of our frontier compute towards discovering and patching vulnerabilities in open source codebases, fully pro bono. In one case, we studied the Linux kernel, which is a particularly load-bearing piece of software at OpenAI. Before AI, security researchers might discover ~20 local privilege escalation (LPE) vulnerabilities in Linux in a typical year. In one week's time, our upcoming frontier cyber model was able to find ~1000 LPE vulnerabilities using about $1M of tokens. In the process, it was able to discover at least 10 novel classes of Linux exploitation techniques.

在 X 查看被引用的帖子

来源：Greg Brockman · x.com

事件后续 · 2

查看事件全部