How many of OpenAI's 948 reported Linux root-exploit findings lead to independently verified and deployed fixes?
OpenAI reports an October 2026 agent-assisted Linux kernel research campaign that produced 2,308 candidate findings, dynamically reproduced 1,724 faults and identified 948 distinct local privilege-escalation vulnerabilities through exploit and patch analysis, with $1,213,430 in reported API credits. Human researchers were assigned to review and report findings to maintainers. The published company report is evidence for the reported experiment and its methodology, not independent confirmation that all 948 fixes were merged or deployed.
What the primary sources establish
OpenAI reports an October 2026 agent-assisted Linux kernel research campaign that produced 2,308 candidate findings, dynamically reproduced 1,724 faults and identified 948 distinct local privilege-escalation vulnerabilities through exploit and patch analysis, with $1,213,430 in reported API credits. Human researchers were assigned to review and report findings to maintainers. The published company report is evidence for the reported experiment and its methodology, not independent confirmation that all 948 fixes were merged or deployed.
What cannot yet be concluded
Evidence limit: The 948 count is deduplicated according to OpenAI's own patch-variant analysis. Candidate patches and working exploits are not proof of upstream acceptance, distribution delivery, exploit uniqueness confirmed by independent maintainers or measured security benefits for users. Company API credits exclude broader operational costs.
Category: research replication. A reported benchmark or demonstration is not independent reproduction or real-world validation.
Dated evidence history
OpenAI reports finding, reproducing and assessing Linux kernel vulnerabilities.
948 distinct local privilege-escalation vulnerabilities reported; merged fix count not independently audited.
Inspect the primary sources
Original publisher rights are retained. URLs are source attributions, not third-party audits of each claim.
Trace what happens next
The Evidence Graph timeline connects this new case to its original sources, topic and any corresponding Cortist article. Future material changes require a new dated version, not edits to this baseline.