Navigate Select ESC Close

732 bytes of Python just borked every Linux machine on earth…

2026-05-04 Science & Technology
95.3k
6.3k
401
Fireship
Fireship
4.2m subscribers

Unlock all features

FREE: Get instant access to 10 AI summaries, chats, or transcripts per day.

Description

CodeRabbit's new Slack Agent lets you manage your team's agentic workflow right in Slack - https://coderabbit.link/fireship-agent A 100% reliable logic flaw was discovered in the Linux kernel and an AI tool wrote an exploit for it that affects every Linux machine updated since 2017. Let's look at the technical details behind the vulnerability and what to do if you're affected... #coding #programming #linux #python Want more Fireship? 🗞️ Newsletter: https://bytes.dev 🧠 Courses: https://fireship.dev

Top Comments (10)

@MK73DS 2026-05-04

I wish the title were true. For example no Android device is affected, while it would have actually been useful in order to finally gain back root access on OUR devices...

3.6k 103 replies
@justincampbell2971 2026-05-04

“My private equity, illuminati overseers” that was good, much respect

2.6k 47 replies
@aniketjadhav2569 2026-05-04

Thanks fireship. I did not understand this vuln in first place now I do not understand in 2nd place as well😢 Update: Thanks for so many likes🙏

2.5k 36 replies
@UC6h-h7xIZPdaVBlAaY5hQIg 2026-05-04

You forgot to mention how those security researchers failed to notify the distro teams and just disclosed the exploit without waiting for the patches to roll out while coincidentally launching their slop security product on the same day.

1.6k 37 replies
@LordRaven37 2026-05-04

I am sad this wasn't about Horse Tinder.

1.2k 9 replies
@dan-bz7dz 2026-05-04

It wasn't just that AI scan that found it. It was someone who gave them the attack surface, and they had the AI focus on that particular one thing.

804 58 replies
@liffidmonky1216 2026-05-05

Using “My private equity, illuminati overseers” as a joke is exactly what private equity, illuminati overseers would do to make people doubt of their existence.

537 11 replies
@powerstripunpluggged 2026-05-05

TempleOS: remains unaffected because all of the hackers are too scared to walk by the incredibly scary guy foaming at the mouth to gain physical access 😭

500 18 replies
@maskettaman1488 2026-05-04

I appreciate Fireship adding the detail that the agent that found this wasn't just told to "find exploits". The researches had already found a potential issue in the splice function and gave the agent specific instructions on where to look for potential vulnerabilities. That's a more realistic use case for AI/LLM tech than most people realize.

282 3 replies
@_mohyddin 2026-05-04

So basically they told AI the vulnerability and used it as a search tool

76 1 replies

Unlock the Data Inside
Turn Videos into Knowledge

  • Get FREE 10/day: transcripts, summaries, chats
  • Chat with videos, export text & PDF
  • $1 free API credit for RAG, chatbots & research

Free forever plan • All features unlocked

App screenshot