Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades — mentioned by jryio

Tue, 07 Apr 2026 20:11:56 GMT

The majority of vulnerabilities are in newly committed lines of code. This has been shown again and again [1] [2] From a marketing standpoint Anthropic is showing that they're able to direct 'compute' to find vulnerabilities where human time/cost is not efficient or effective. Project Glasswing is attempting to pay off as many of these old vulnerabilities as possible now so the low-hanging fruit has already been picked. The next generation of Mythos and real world vulnerabilities exploits are going to be in newly committed code... [1]: https://dl.acm.org/doi/epdf/10.1145/2635868.2635880 [2]…

Paper and discussion history. A mention is not an endorsement.

Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades · HackerPapers discussions

Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades — mentioned by jryio