None
EN
AI Helped Develop a Linux Exploit
['Jack Wallen']
Linux Magazine News (path: lmi_news)
Jack WallenStar Labs recently announced that researcher Lee Jia Jie used AI to help find a vulnerability and speed up exploit development.
He continued, "As such, I used AI to speed up various aspects of the process -- discovery of the bug, KASAN poc, and improving the race condition."
Although the vulnerability relied on the hard-coded ROP gadget offsets, he was still able to successfully run the exploit 10 times on CentOS Stream 9.
On top of that, during his experiment, Lee also found a few other exploitable bugs, which he summarized saying "how effective AI was in finding bugs in Linux.
At the same time, he reminds us that AI still has many blind spots and lapses in reasoning that would require a deep understanding of the target.