>I have an LLM and didn't discover it.

are you actively pointing your LLM at the kernel to identify security bugs?

the policy wasn't made on a whim. to quote the linux security team: "bugs discovered this way [via ai] systematically surface simultaneously across multiple researchers, often on the same day."

>Responsible disclosure

the term responsible disclosure is a silly thing made up by vendors.

You could say that there is no reason to report them at all, because the maintainers can point llms to the kernel themselves.