Post #2312126

2026-05-08 07:43 UTC

@miketango@chaos.social from what I can read in the discussion is that someone saw the fix in the commit and asked a LLM too build an exploit and published that. That someone was not aware of an embargo https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=f4c50a4034e62ab75f1d5cdd191dd5f9c77fdff4

Replies (4)

@Laird_Dave@chaos.social 2026-05-08 07:44

@mcfly@milliways.social @miketango@chaos.social may they step on a Lego every day forever.

Open ##2312127
@cjd@pkteerium.xyz 2026-05-08 08:26

I keep trying to find applications for LLMs in my work, and generally I find that they're pretty stupid. But from the wash of recent security vulns that have been getting found, it's pretty clear that in the right hands, they are proving to be a very sharp tool.

Open ##2312128
@securitym0nkey@infosec.exchange 2026-05-08 09:12

@mcfly@milliways.social @miketango@chaos.social I guess that's the world we live in now. If fixes are open in the public eventually some vibe-kiddy just publishes an exploits. But is it feasible keep the fixing work secret in projects like the linux kernel? I doubt. In this times it really comes to light who has actually good security. Who can quickly apply mitigations and detection.

Open ##2312131
@disco3000@climatejustice.social 2026-05-08 19:29

@mcfly@milliways.social @miketango@chaos.social 🤦🏻‍♂️

Open ##2312132