TLDR
- OpenAI identified 948 distinct Linux kernel flaws and developed working attacks during controlled security tests.
- The company spent approximately $1.21 million on the research, averaging $1,279 per confirmed flaw with a working exploit.
- The flaws could allow someone with limited access to gain administrator control of affected Linux systems.
- OpenAI estimated the hypothetical value of the exploits at between $18.9 million and $66.3 million.
- Linux supports blockchain nodes, cryptocurrency exchange systems and other digital infrastructure.
OpenAI says its experimental AI system found 948 distinct flaws in the Linux kernel that could let someone with limited access take full control of a computer. The findings concern software widely used by servers, cloud services, and blockchain networks.
The company published the results on November 4 after testing an unreleased cyber model during October. Researchers said the system produced working attacks under normal desktop security settings.
OpenAI Details Linux Kernel Findings
The research began with 2,308 possible flaws. Automated tests reproduced 1,724, and further checks identified 948 distinct flaws that allowed users to gain administrator rights. OpenAI used separate patches to count unique findings.
The announcement follows a recent Binance security breach, where attackers reportedly targeted employees and reached systems that approve wallet transfers. OpenAI did not connect its Linux research to that incident or identify any affected crypto operator.
The system examined selected parts of the Linux code, tested potential weaknesses in isolated computers, and checked whether attackers could use them. It then drafted repairs. Human researchers reviewed the evidence and proposed fixes before reporting them to Linux maintainers.
OpenAI said the process cost $1,213,430 in API credits, averaging $1,279 for each verified flaw with a working attack. The company compared that spending with historic security contest awards, estimating a hypothetical value of $18.9 million to $66.3 million.
Crypto Networks Use Linux Servers
Linux supports many blockchain nodes and exchange servers. Separate from the research, Solana wallet provider Solflare restricted access to its code and infrastructure after recent industry attacks. Its controls require multiple approvals for software changes.
Polygon Labs technology chief Mudit Gupta told CoinDesk that decentralized blockchain networks have multiple operators and backup systems. Those features can reduce dependence on any single machine, although individual services and users may still face security risks.
Crypto teams have also issued unrelated fixes. Ethereum clients Teku and Besu released security updates in late October over certificate concerns affecting certain connections. Their updates address separate weaknesses and do not stem from OpenAI’s Linux findings. OpenAI said it has submitted hundreds of reports and patches for serious problems. During the research, Linux developers also fixed or prepared fixes for numerous flaws.
