Linus Torvalds Says Flood of AI Reports Is Burdening Linux Security Maintainers

The Linux kernel is maintained under the leadership of Linus Torvalds, and its security mailing list is an important channel for researchers to report vulnerabilities and coordinate fixes. Generative AI has made it easier to scan code, but it has also unleashed a flood of reports that have not been verified by humans. That is increasing the maintenance team’s screening workload and diverting resources from genuine vulnerabilities.

Torvalds recently criticized AI researchers for repeatedly submitting the same or low-quality issues, saying duplicate reports can be more troublesome than the vulnerabilities themselves. An OpenSSF expert said about 30% of the relevant vulnerability reports were duplicates. Torvalds urged researchers to go beyond filing reports and use AI to provide verifiable patches that make a substantive contribution to Linux security.