CVE-2025-37899General(linux / linux_kernel)

Plenty. A few Linux-kernel examples: CVE-2024-53141 - netfilter ipset one-bit OOB write that Mythos programmed into a PTE flipper CVE-2026-31402 - 23-year-old remote heap overflow in NFSv4 LOCK CVE-2025-37899 - ksmbd concurrent-thread UAF, found by @seanhn The Mythos red-team blog has a bunch more (FreeBSD NFS RPCSEC_GSS, AF_UNIX MSG_OOB cross-cache, Firefox JIT spray) if you want to go deeper.

@seanhn showed this clearly: using o3 on Linux kernel SMB code, the model found the vulnerability in 8 out of 100 runs. In many runs it concluded there was no bug. The punchline: if you keep running it, you stop needing luck. https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/

This is not new. In 2025, the company found three vulnerabilities in OpenSSL: https://aisle.com/blog/aisle-discovers-three-of-the-four-openssl-vulnerabilities-of-2025 Other researchers like @seanhn have also reported discovering zero-days using o3. https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/

C educators — May 2026 updates + a note on AI: • glibc CVE-2025-4802 (LD_LIBRARY_PATH in setuid binaries) • Linux ksmbd use-after-free (CVE-2025-37899), found with AI help • GCC 15 in Fedora 42 with C23 defaults • Clang/LLVM nearing full C23 support • @GitHub Copilot Coding Agent launched • @SQLite 3.50.0 (25th anniversary) AI is simply a tool. It is not here to replace you. You still know the students, notice when they’re stuck, and decide what help they need next. AI just makes everyday tasks easier so you have more time for real teaching. It can draft practice examples, suggest clearer explanations, clean up rough student code for comparison, or generate quick checks. Keep it plain and useful. Stay in charge — always check what it produces. Used this way, AI is a helpful assistant, not a replacement. You already do excellent work. Let’s explore AI carefully and keep the focus on the students. Thoughts? #CProgramming #CLang #C23 #AIinEducation #CodingEducation #EdTech

@Rothmus and these days 15 and 25yr old vulnerabilities are found in #Linux in this "open source" software that everyone can "check" (SMB CVE-2025-37899) and Linus is a self proclaimed communist good luck with that Clown Show 🤣🤣🤡

El salto en 12 meses: Mayo 2025 — CVE-2025-37899 Un investigador (Sean Heelan) usando o3 de OpenAI desde su suscripción personal. Humano al volante, IA como copiloto. Abril 2026 — CVE-2026-4747 Mythos, de Anthropic. Totalmente autónomo. Sin humano en el loop. De copiloto a piloto en un año.