The Register’s headline claims Linus Torvalds says AI-driven patch floods have “peaked,” but Torvalds’ actual Linux 7.4 rc2 update is far more hedged. He notes that much kernel work is “driven by various AI fixes” and that eBPF maintainer Alexei Starovoitov reports fixes are now arriving faster than new vulnerabilities. But he immediately adds: “most other areas haven’t reached that point yet.” Torvalds frames it as “signs” they “may be starting to see the tide turn,” not confirmation of a peak.
The actual story is narrower than the headline suggests. One subsystem (eBPF) may have crossed a threshold where patches outpace discoveries. Everything else is still in the flood phase. That’s progress in a slice of the kernel, not evidence the AI patch wave has crested overall. Torvalds’ careful language (“may be,” “starting to”) documents a possible inflection point while explicitly refusing to generalize it beyond early signal.
The gap between “peaked” and “may be starting to turn” matters. One says the problem is solved. The other says there’s a hopeful sign in one area.
Sources: Linus Torvalds Linux 7.4 rc2 update
Coverage: The Register
Related on this blog: [AUTO] Anthropic’s automated vulnerability scanner reaches 85% accuracy. Can it scale? • [AUTO] Vulnerability discovery hits the patch ceiling • [AUTO] AI’s Predictable Hallucinations Become Supply-Chain Weapons