Linux kernel developers are facing an unprecedented flood of bug reports. The number of fixed vulnerabilities in each release is growing rapidly. The figure has come close to two thousand vulnerabilities. Earlier in the Linux 6.x era, the count hovered around five hundred. The reason for the surge lies in the widespread use of modern neural networks. Large language models are actively analyzing the system's source code. Stable branch maintainer Greg Kroah-Hartman drew attention to the trend. The expert published a slide from an upcoming conference presentation. The Kernel Recipes 2026 event is taking place in the near future. Phoronix reported on this on August 28. The CVE counter crossed one thousand with the release of Linux 7.0. The figure exceeded fifteen hundred vulnerabilities in Linux 7.2.
The growth rate of bugs remains high at present. Linux 7.3 could break the two-thousand mark. The subject of study is impressive in its enormous technical scale. The source tree has grown to forty million lines of code. Automated tools are combing through the most obscure sections of program code. People have barely returned to these files in years. Artificial intelligence sometimes finds real problem areas in the system. CVE entries explicitly point to the assistance of static analysis. Intel Product Security confirmed some of the discovered vulnerabilities. A significant portion of the findings turn out to be minor bugs in drivers. Models often generate dubious patches or outright hallucinations.
Human maintainers are forced to sort through this enormous stream of information. The scale of the burden was described by networking subsystem maintainer Jakub Kicinski. The expert reviewed a pull request for Linux 7.3. He processed six hundred and forty-eight patches in a single cycle. Between a third and half of the fixes appeared to be low-priority. These corrections were generated by automated neural network algorithms. Jakub Kicinski stated that the development team is completely overloaded. The flood of reports has prompted a reassessment of legacy code. Andrew Lunn proposed deleting twenty-eight thousand lines. These are outdated network drivers from the ISA era. Previously, such code required almost no attention from specialists.
Analyzers have started finding defects in long-forgotten files. Maintainers are obligated to fix bugs regardless of the hardware's relevance. Linux 7.3 removes old SGI driver code. A similar fate awaits components from IBM and others. The FreeVxfs filesystem driver was completely removed from the kernel. The maintainer described the code as food for automated bug checkers. The kernel community does not reject artificial intelligence entirely at present. Greg Kroah-Hartman has successfully used AI-assisted fuzzing tools. The unverified output of language models remains a contentious issue. The developer banned neural network patches in the staging subsystem. An exception was made only for genuine security fixes. Guidelines warn against wasting time on such reports.