Claude Code Found a Linux Vulnerability Hidden for 23 Years (mtlynch.io) AI

Anthropic researcher Nicholas Carlini says he used Claude Code to identify multiple remotely exploitable Linux kernel vulnerabilities, including an NFSv4 flaw that had remained undiscovered since 2003. The NFS bug involves a heap buffer overflow triggered when the kernel generates a denial response that can exceed a fixed-size buffer. Carlini also reported that newer Claude models found far more issues than older versions, suggesting AI-assisted vulnerability discovery could accelerate remediation efforts.