AI Tool Discovers 15-Year-Old Root Privilege Bug in Linux Kernel

An AI tool uncovered a Linux kernel vulnerability that went undetected for 15 years, allowing root-level access.

A security vulnerability lurking in the Linux kernel for roughly 15 years has been uncovered — not by a human researcher, but by an AI tool. The bug is described as a 'root bug,' meaning it could potentially allow an attacker to gain the highest level of system privileges on affected machines. The discovery highlights a growing role for AI in vulnerability research, where automated tools can systematically audit large, complex codebases that human reviewers may overlook or simply never fully examine. Linux, as one of the most widely deployed operating systems in the world, underpins everything from web servers to Android devices. The Wired report packaging this story also references several other security developments, including a Pentagon program training civilian volunteers for offensive cyber operations and an incident in which a Flock Safety license plate reader misidentified a vehicle, resulting in police surrounding a car reviewer.

Why it matters

A root-level bug in the Linux kernel, present for 15 years, represents a significant exposure risk given Linux's ubiquity in servers, cloud infrastructure, and embedded systems worldwide. The discovery also signals that AI-assisted code auditing may catch long-standing flaws that traditional human review has consistently missed.

What's next

Details on whether a patch has been issued or is forthcoming were not provided in the available reporting.

Key facts

• The Linux kernel bug reportedly went undetected for approximately 15 years
• The vulnerability is classified as a 'root bug,' capable of granting highest-level system privileges
• An AI tool — not a human researcher — is credited with identifying the flaw
• The story was reported by Wired as part of a broader security news roundup
• The same report references a Pentagon program enlisting civilian amateurs for cyber operations
• A separate incident involved a Flock license plate reader error that triggered a police response against a car reviewer

Bias & framing notes

Both sources are effectively the same article — the IT Security News entry is an index of the Wired piece, so there is only one independent source. The headline framing ('Everyone Missed') is slightly sensational but reflects the factual claim. Without additional corroborating outlets or technical disclosures, specifics such as the exact CVE, affected kernel versions, or patch status cannot be verified from these sources alone.

NewsClear — neutral news & congressional tracking · Bill of the Week