Claude Code Found a Linux Vulnerability Hidden for 23 Years (mtlynch.io)

submitted 2 weeks ago by codeinabox@programming.dev to c/linux@programming.dev

15 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[-] INeedMana@piefed.zip 71 points 2 weeks ago

I can’t report because I haven’t validated them yet… I’m not going to send [the Linux kernel maintainers] potential slop

That's worth pointing out IMO

[-] codeinabox@programming.dev 16 points 2 weeks ago

Though that quote is followed by this, which indicates at least five of those vulnerabilities were real:

I searched the Linux kernel and found a total of five Linux vulnerabilities so far that Nicholas either fixed directly or reported to the Linux kernel maintainers, some as recently as last week:

[-] entwine@programming.dev 16 points 2 weeks ago

I wonder how true that is. The author of this blog post seems to just be taking this guy's word for it. Did Anthropic actually confirm the bug exists by trying to trigger it on real systems, or are they assuming it's real because it looks plausible? The report claims you cam do it with two cooperating NFS clients, so did they actually do that, or are they just assuming it'll work?

[-] Aatube@lemmy.dbzer0.com 2 points 1 week ago* (last edited 1 week ago)

Those are five bugs the kernel maintainers have reviewed and decided to patch (the links are to the commits), not just five bug reports. I think that leans towards “they tested it” or at least “proofed the formal logic in their minds successfully”.

this post was submitted on 03 Apr 2026

31 points (73.8% liked)

Linux

13277 readers

368 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 2 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev