As it should. If an LLM discovered them you should assume that another LLM, or another person running the same LLM, could find them. They are effectively public already.

▲

wilkystyle an hour ago | parent [-]

No. I have an LLM and didn't discover it. Folks in HR have LLMs but can't produce the same software you can. Just because an LLM could discover it does not mean that it has been discovered yet. Responsible disclosure is still a valuable thing.

▲

john_strinlai an hour ago | parent [-]

>I have an LLM and didn't discover it.

are you actively pointing your LLM at the kernel to identify security bugs?

the policy wasn't made on a whim. to quote the linux security team: "bugs discovered this way [via ai] systematically surface simultaneously across multiple researchers, often on the same day."

>Responsible disclosure

the term responsible disclosure is a silly thing made up by vendors.

	▲	yreg 17 minutes ago \| parent [-]
		You could say that there is no reason to report them at all, because the maintainers can point llms to the kernel themselves.