ChatGPT's o3 Model Found Remote Zeroday in Linux Kernel Code
OpenAI's o3 just uncovered a remote 0-day in the Linux kernel's SMB code—CVE-2025-37899. A patch has already been rolled out.
Seems we're now at an ungodly amount of fabricated bug reports and wasted developer time because they were made up. And one meaningful contribution to the kernel.
Yeah, the difference is that this time an expert uses the tools as it should be. Not regular Joe feeding all the code with a prompt to "find a vulnerability". Even then, this is a coincidence. But this discovery means there exists (maybe) a strategy that can be tried to detect similar exploits.
In the hands of an expert you can get expert level results from tools like ChatGPT. In the hands of a novice you get novice level results. What a succinct way to put that, thanks! You probably saved me a paragraph every time I try to explain such a simple concept.
I will never understand why it is a good idea to put SMB into the Kernel. Stuff like that belongs in user space, IMHO
speed.jpg
That's just a static image, mate. You need speed.gif
So NFS. But i like Ganesha.
