TLDR Tech / InfoSec
Getting LLMs Drunk to Find Remote Linux Kernel OOB Writes (and More)
The researcher uses a homegrown swarm of LLM-powered agents to hunt for real-world bugs in core infrastructure such as the Linux kernel's ksmbd server, Docker, OpenSSL, CUPS, HAProxy, Caddy, Traefik, CoreDNS, and more. The system starts with documentation and source code, generates vulnerability hypotheses, and iterates on proofs of concept in isolated VMs, with a separate grader model checking severity and novelty before human review. Over a few months, this setup found 20+ assigned CVEs, including remote unauthenticated OOB writes in ksmbd and practical auth and access‑control bypasses in widely deployed network services.
Read the full story