The Linux Kernel Is Approaching 2,000 CVEs Per Release

Greg Kroah-Hartman previewed his Kernel Recipes 2026 talk with a chart showing Linux kernel CVEs per release climbing sharply: roughly 500 CVEs per release from Linux 6.9 through 6.19, jumping past 1,000 since Linux 7.0, and exceeding 1,500 with Linux 7.2. The trend is attributed largely to generative AI/LLM tools scanning the kernel's roughly 40-million-line codebase and surfacing vulnerabilities, many of them low-priority issues in old or obscure driver code. The surge in AI-driven bug and security reports has also pushed efforts this year to remove obsolete kernel code, such as old networking drivers.

Source: https://www.phoronix.com/news/Linux-Kernel-CVEs-Nearly-2000. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.