{"id":680046,"date":"2026-11-10T02:28:21","date_gmt":"2026-11-10T02:28:21","guid":{"rendered":"https:\/\/www.newsbeep.com\/ie\/680046\/"},"modified":"2026-11-10T02:28:21","modified_gmt":"2026-11-10T02:28:21","slug":"linus-torvalds-sees-signs-ai-prompted-patch-flood-has-peaked","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ie\/680046\/","title":{"rendered":"Linus Torvalds sees signs AI-prompted patch flood has peaked"},"content":{"rendered":"<p>                    <a data-tag=\"security\" href=\"https:\/\/www.theregister.com\/tag\/security\" class=\"lab-article-section-link\" rel=\"nofollow noopener\" target=\"_blank\"><\/p>\n<p style=\"\" class=\" lab-article-section lab-article-section-top \">\n                    security\n                <\/p>\n<p>                    <\/a><\/p>\n<p class=\"subtitle below\" style=\"\">\n        Fixes are arriving faster than new bug reports for one major Linux project\n    <\/p>\n<p>The worst of the patchpocalypse may be behind us, according to Linus Torvalds.<\/p>\n<p>Writing in his <a href=\"https:\/\/lkml.iu.edu\/2611.1\/01530.html\" target=\"_blank\" rel=\"nofollow noopener\">weekly kernel update post<\/a>, the Linux kernel dev leader delivered Linux 7.4 rc2 \u2013 the second rough cut of the next kernel \u2013 which he rated as a big release for two reasons.<\/p>\n<p>One is that he left some code out of rc1, because he was busy and because it was already the largest such release in the history of the kernel.<\/p>\n<p>The other is what Torvalds described as \u201cvarious AI fixes.\u201d<\/p>\n<p>Such fixes are necessary because ever since Anthropic launched its Mythos bug-finding model in <a href=\"https:\/\/www.theregister.com\/security\/2026\/04\/08\/anthropic-mythos-model-can-find-and-exploit-0-days\/5224393\" target=\"_blank\" rel=\"nofollow noopener\">April<\/a>, developers have been able to find more software flaws than was previously possible.<\/p>\n<p>Microsoft, for example, <a href=\"https:\/\/www.theregister.com\/security\/2026\/09\/09\/microsoft-breaks-patch-tuesday-record-with-974-cve-deluge\/5295160\" target=\"_blank\" rel=\"nofollow noopener\">addressed a record 974 flaws<\/a> in September \u2013 its third record fixing spree this year after it <a href=\"https:\/\/www.theregister.com\/security\/2026\/07\/14\/patchpocalypse-now-microsoft-tops-last-months-record-with-622-patch-tuesday-cves\/5271434\" target=\"_blank\" rel=\"nofollow noopener\">whacked 622 flaws in July<\/a> and 206 in June. Oracle <a href=\"https:\/\/www.theregister.com\/security\/2026\/07\/23\/oracle-drops-1449-security-patches-like-its-the-new-normal\/5277114\" target=\"_blank\" rel=\"nofollow noopener\">addressed 1,449 flaws<\/a> in a single month.<\/p>\n<p>That\u2019s many more patches than IT teams are set up to handle, yet they must find ways to deal with bugs more quickly because attackers are increasingly <a href=\"https:\/\/www.theregister.com\/patches\/2026\/10\/19\/security-patches-need-patches-now-that-attackers-have-ai\/5303927\" target=\"_blank\" rel=\"nofollow noopener\">targeting flaws found by AI<\/a>.<\/p>\n<p>Torvalds\u2019 post suggests that, perhaps, the worst of this is behind us.<\/p>\n<p>\u201cThis time around Alexei claims that on the bpf side at least the fixes are now coming in faster than the new reports, and that sounds lovely if true,\u201d he wrote.<\/p>\n<p>That\u2019s a reference to Alexei Starovoitov, co-creator and lead dev on the Extended Berkeley Packet Filter (eBPF), the <a href=\"https:\/\/www.theregister.com\/software\/2025\/03\/09\/ebpf-it-doesnt-stand-for-anything-but-it-might-mean-bank\/1495487\" target=\"_blank\" rel=\"nofollow noopener\">project<\/a> that makes it possible to run sandboxed programs within the Linux kernel.<\/p>\n<p>\u201cI think most other areas haven&#8217;t reached that point yet, but it&#8217;s at least a sign that we _may_ be starting to see the tide starting to turn,\u201d he added. \u201cDon&#8217;t hold your breath, but maybe cross your fingers we&#8217;ll be getting there in the not entirely distant future.\u201d<\/p>\n<p>If Torvalds is correct, that\u2019s welcome news. The Linux kernel\u2019s 40-million-plus lines of code makes it one of the world\u2019s bigger software projects. If AI soon stops finding flaws in other parts of the kernel beyond eBPF, perhaps the deluge of fixes developers and users alike will need to handle has peaked. \u00ae<\/p>\n","protected":false},"excerpt":{"rendered":"security Fixes are arriving faster than new bug reports for one major Linux project The worst of the&hellip;\n","protected":false},"author":2,"featured_media":680047,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[220,218,219,61,60,80],"class_list":["post-680046","post","type-post","status-publish","format-standard","has-post-thumbnail","category-artificial-intelligence","tag-ai","tag-artificial-intelligence","tag-artificialintelligence","tag-ie","tag-ireland","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/680046","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/comments?post=680046"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/680046\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media\/680047"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media?parent=680046"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/categories?post=680046"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/tags?post=680046"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}