The Linux kernel development process is experiencing a dramatic acceleration in security vulnerability fixes, with the number of patched CVEs jumping from roughly 500 per release between versions 6.9 and 6.19 to over 1,500 in version 7.2. If this momentum holds, version 7.3 is expected to exceed 2,000 CVE fixes—a 300% increase driven by the adoption of large language models in the development workflow.
The surge is substantial, though kernel maintainers note that most fixes address low-priority vulnerabilities found in legacy or rarely-used driver code. These aren't critical zero-days but rather long-standing issues that LLMs are now systematically identifying and patching at scale. This shift suggests that AI-assisted code analysis is proving effective at surface-level vulnerability detection, enabling developers to tackle technical debt that would have otherwise remained dormant in the kernel's aging subsystems.