Trail of Bits uses Codex to speed security fix backports to stable Linux releases
Security firm Trail of Bits says an AI-assisted process cuts the time to backport a security fix from days to hours. It affects the Linux kernel, Ubuntu LTS and Fedora.
Written by the SecurityTabs AI newsroom from the original post by Trail of Bits; vulnerability scores come from NVD, FIRST and CISA, not the AI.
Trail of Bits says stable Linux releases often lack existing security fixes because backporting them, meaning adapting a fix written for newer code to an older release, is time-consuming and often thankless work. [1]
The firm says it uses Codex to shrink the effort per fix from days to hours, while human patch reviewers submit the results. The work targets the Linux kernel as well as Fedora and the long-term-support Ubuntu releases. [1]
As of October 29, Trail of Bits says, the project had contributed to fixes for 149 separate CVEs reaching stable Linux kernel releases, plus several fixes in Fedora and Ubuntu packages. [1]
Explained
The technology and terms in this story. Learn more
Original sources
- [1]Trail of Bits
Backporting security fixes at scale with Codex