The Linux Kernel Is Approaching 2,000 CVEs Per Release
Phoronix reports on Greg Kroah-Hartman's recent slide from his upcoming talk in Paris at Kernel Recipes 2026 (September 21 to 23): With the proliferation of AI/LLM models analyzing the Linux kernel's vast codebase, there has been a surge in the number of CVEs per kernel release. After typically being around 500 CVEs fixed per release, we are now approaching 2,000 CVEs fixed per release and…
The Linux kernel is experiencing a significant increase in Common Vulnerabilities and Exposures (CVEs) per release. According to Phoronix, the number of CVEs fixed per release has surged from around 500 to nearly 2,000. This trend may continue, with the possibility of exceeding 2,000 CVEs for Linux 7.3.
The increase in CVEs is attributed to the proliferation of AI/LLM models analyzing the Linux kernel's vast codebase. Fortunately, most of these vulnerabilities are reportedly lower priority and often found in old or obscure driver code, resulting in minimal impact.
Greg Kroah-Hartman, as reported by Slashdot, noted that the surge in CVEs is a recent development. The Kernel Recipes 2026 conference, where Kroah-Hartman is scheduled to speak, takes place from September 21 to 23 in Paris.
Brief written by urgent.news from Slashdot, Phoronix — 2 reports on this story. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
