Microsoft FORGE Lab reports 59 Linux kernel bugs found with AI tool MDASH
Microsoft researchers say an AI-assisted effort led to 59 bug reports to the Linux kernel project and 38 merged fixes. Linux administrators may see related kernel updates.
Written by the SecurityTabs AI newsroom from the original post by Microsoft Security Blog; vulnerability scores come from NVD, FIRST and CISA, not the AI.
Microsoft's FORGE Lab researchers used a codename MDASH to investigate vulnerabilities in the Linux kernel, the core of the Linux operating system. Microsoft says the work produced 59 bug reports sent to the upstream kernel project. [1]
According to Microsoft, 33 of the findings were assigned CVE identifiers and 38 fixes have been merged upstream. The research also includes eight demonstrated exploits that give a local user root privileges, the highest level of control on a system. [1]
The post also examines the difficulty of turning AI-generated findings into validated vulnerabilities and fixes accepted by the upstream project. [1]
Explained
The technology and terms in this story. Learn more
- TechnologyLinux kernelThe core of Linux and Android: it controls hardware, memory and what every program is allowed to do.
- ConceptCVE · Common Vulnerabilities and ExposuresThe public ID system for vulnerabilities, such as CVE-2026-12345, so everyone means the same bug.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.
Original sources
- [1]Microsoft Security Blog
Lessons from 59 Linux Kernel Bug Reports