{"slug": "openai-s-ai-just-found-948-ways-to-get-root-on-linux-and-it-cost-less-than-a-bug", "title": "OpenAI's AI Just Found 948 Ways to Get Root on Linux — and It Cost Less Than a Bug Bounty", "summary": "OpenAI's KernelBench team built Aardvark, an autonomous agent that spent 10 days and $88 scanning 291 million lines of Linux kernel code across 1,067 drivers and core modules in 2,135 KVM virtual machines, flagging 948 potential security issues. The Linux Kernel Security team has confirmed 33 of the reports as genuine, and kernel developers have supplied a 12,000-line code chunk for further testing. OpenAI says the run cost far less than the roughly $6,000 older models would have required for comparable work.", "body_md": "Originally published at [ConvertElementor](https://convertelementor.com/blog/openai-s-ai-just-found-948-ways-to-get-root-on-linux-and-it-cost-less-than-a-bug-bounty-november-2026-20261106).\n\nOpenAI's Aardvark agent was given a simple brief: test how much of the Linux kernel an AI can actually secure. It ran for 10 days, at a cost of $88, and found 948 real security issues — 33 of them already confirmed by the Kernel Security team as genuine, valid reports.\n\nAardvark was built by OpenAI's KernelBench team to autonomously find Linux kernel vulnerabilities and build proofs of concept for them. It got a big production-grade slice of Linux — 1,067 drivers and core modules, fully wired into KVM virtual machines with real I/O, dedicated per-model memory and rate limiting. In total, it looked at 291 million lines and ran them in 2,135 virtual machines.\n\nThe main model refused hours of in-depth testing. Where its older peers would charge $6,000 for a similar workload, Aardvark spent just $88 — far below what a human tester would normally charge for a single critical vulnerability, let alone a full review.\n\nLinux kernel developers are already taking notice. The kernel appears to be actively looking at both the 948 flagged issues and the quality of Aardvark's proof-of-concept work. In an acknowledgement, OpenAI says that \"the kernel has also provided a 12,000-line chunk of code to test with us.\" The first real test will be whether this actually helps fix kernel bugs before they break things.\n\nLinux runs most of the web — including the servers that host WordPress sites. A cheaper, faster way to find kernel vulnerabilities means faster patches for the infrastructure our sites depend on. It also shows how AI security testing is moving from demos to production-scale work.\n\nRead the full article on ConvertElementor: [https://convertelementor.com/blog/openai-s-ai-just-found-948-ways-to-get-root-on-linux-and-it-cost-less-than-a-bug-bounty-november-2026-20261106](https://convertelementor.com/blog/openai-s-ai-just-found-948-ways-to-get-root-on-linux-and-it-cost-less-than-a-bug-bounty-november-2026-20261106)", "url": "https://wpnews.pro/news/openai-s-ai-just-found-948-ways-to-get-root-on-linux-and-it-cost-less-than-a-bug", "canonical_source": "https://dev.to/ahtisham_lala_a1af953f29b/openais-ai-just-found-948-ways-to-get-root-on-linux-and-it-cost-less-than-a-bug-bounty-360", "published_at": "2026-11-06 21:40:58+00:00", "updated_at": "2026-11-06 21:53:11.640840+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "artificial-intelligence", "ai-tools"], "entities": ["OpenAI", "Aardvark", "KernelBench", "Linux kernel", "Linux Kernel Security team"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/openai-s-ai-just-found-948-ways-to-get-root-on-linux-and-it-cost-less-than-a-bug", "markdown": "https://wpnews.pro/news/openai-s-ai-just-found-948-ways-to-get-root-on-linux-and-it-cost-less-than-a-bug.md", "text": "https://wpnews.pro/news/openai-s-ai-just-found-948-ways-to-get-root-on-linux-and-it-cost-less-than-a-bug.txt", "jsonld": "https://wpnews.pro/news/openai-s-ai-just-found-948-ways-to-get-root-on-linux-and-it-cost-less-than-a-bug.jsonld"}}