AI Finds a Linux Zero-Day

AI / BUG HUNTING / LINUX KERNEL How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation MAY 22, 2025 LEAVE A COMMENT In this post I’ll show you how I found a zeroday vulnerability in the Linux kernel using OpenAI’s o3 model. I found the vulnerability with nothing more complicated than the o3 API – no scaffolding, no agentic frameworks, no tool use. Recently I’ve been auditing ksmbd for vulnerabilities. ksmbd is “a linux kernel server which implements SMB3 protocol in kernel space for sharing files over network.”. I

A screenshot of a technical blog post about using OpenAI’s o3 model to discover a remote zero-day vulnerability in the Linux kernel’s SMB implementation. The joke comes from the contrast between the dramatic clickbait headline and the uploader’s disclaimer that the researcher found the bug manually, then merely guided o3 to rediscover it. People share it as a sarcastic reaction to exaggerated AI-assisted programming or security claims.

• @dev_meme / 6813 2025-05-25